W32.Ainesey - sfarm.exe

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.Ainesey

Sender:

Varies.

Subject:

Adult contents
All Under 15
benchmark
cool mail
Crack para windows XP
Cracks
Damn crack...
Disk tool
freeIRC beta mail list
Honey ;)
IE Plug-in
Improve your site
My Rom List
Necesitas seriales
NS Plug-in
Quieres mejorar tu pagina
Quiz
Secure Communications Inc.
Sex Farm
Sexy game
Shield PAK Installation
Under 18 Teens Nudes
why

Message:

Ask if you want something ;)
Cool pics you send me!!! try this little game... rulez!
Do you feel secure? Run this small program to see if your
communications are safe.
Este programa solucionara tus problemas
Hello,
Hi honey!
Hi!
How goes fine here. There is the little app i told you.
I love you
I'm testing my new cool mail client... rockz! and is smallllll ;)
I'm trying to make run this shit but... please test it if ya can.
Las fotos que siempre as sonado
Last Beta 0.6.
Nota: Version de Evaluacion por 30 dias
Prueba este programa y luego me cuentas
Pruebalo es una maravilla
Reply with subject
See you!
Sex Farm! Take a look at this little demo for free.  Adult content!!!
Take a look at this new archiver! 30 trial version.
Take a look to this little app!
Test this js scripts and tell me what do you think.
Thanks you for the information.
There is my list...
There is the plug-in for IE... ;) send me comments.
There is the plug-in for NS... ;) send me comments.
this makes you feel better, there's a benchmark.
to leave mail list...
try this. 30 trial version.
un-subscribe
What can i do? please reply as soon as posible.
Your page is nice.

Attachment:

bdbench.exe
clist.exe
crack.exe
doc.exe
drDisk.exe
ie-pin.exe
instalar.exe
ISPAK.EXE
myList.exe
ns-pin.exe
powerDick.exe
SCommSetup.exe
Serial.exe
SETUP.EXE
Setup.exe
setupb.exe
sfarm.exe
smail.exe
Teenies.exe
Under18.exe
winXPcrak.exe

Comments: A mass-mailing worm that sends a copy of itself to all the email addresses gatheredfrom the computer.

Symptoms:


 Creates the file, %Windir%Winexec.exe.vbs, and executes it. This
file is detected as W32.Ainesey.A@mm!vbs. 
 Adds the values: "MSIEXEC"="%Windows%MSIEXEC32.exe"
"WinExec"=""%Windows%Winexec.exe.vbs" to the registry key:
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunServices 
 Adds the values: "AccessVBOM"="0x00000001"
"DontTrustInstalledFiles"="0x00000000" "Level"="0x00000001" to the
registry keys:
HKEY_CURRENT_USERSOFTWAREMicrosoftOffice10.0WordSecurity
HKEY_CURRENT_USERSOFTWAREMicrosoftOffice9.0WordSecurity
HKEY_CURRENT_USERSOFTWAREMicrosoftOffice10.0ExcelSecurity
HKEY_CURRENT_USERSOFTWAREMicrosoftOffice9.0ExcelSecurity
HKEY_CURRENT_USERSOFTWAREMicrosoftOffice10.0PowerPointSecurity
HKEY_CURRENT_USERSOFTWAREMicrosoftOffice9.0PowerPointSecurity which
decreases security settings in Microsoft Word, Excel, and PowerPoint.

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Disable System Restore (Windows Me/XP).
Update the virus definitions.
Run a full system scan and delete all the files detected as W32.Ainesey.A@mm.
Delete the value that was added to the registry.
Restore the Microsoft Office security settings