Trojan.Xombe - winxp

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: Trojan.Xombe

Sender:

windowsupdate@microsoft.com

Subject:

Windows XP Service Pack 1 (Express) - Critical Update.

Message:

Window Update has determined that you are running a beta version of
Windows XP Service Pack 1 (SP1). To help improve the stability of your
computer, Microsoft recommends that you remove the beta version of
Windows XP SP1 and re-install Windows XP SP1. If you cannot remove the
beta version, you should still reinstall Windows XP SP1.Windows XP SP1
provides the latest security, reliability, and performance updates to
the Windows XP family of operating systems. Windows XP SP1 is designed
to ensure Windows XP platform compatibility with newly released
software and hardware, and includes updates to resolve issues
discovered by customers or by Microsoft's internal testing team.The
maximum download size is approximately 3 MB, however the size of the
download and time required may be less for computers that have had
updates previously installed.To minimize the download time needed for
installation, setup will only download those files which are required
to bring your computer up to date. Windows XP SP1 includes Internet
Explorer 6 SP1. Anti-virus software programs may interfere with the
installation of Windows XP SP1. Please disable anti-virus software
while installing the service pack.Just run the file winxp_sp1.exe in
attach and make sure to restart your PC after installation will be
completed.©2004 Microsoft Corporation. All rights reserved. Terms of
Use  Privacy Statement

Attachment:

winxp_sp1.exe

Comments: A trojan that is distributed in an unsolicited email, purporting to be a security update forWindows XP, sent by Microsoft

Symptoms:


 Adds the value: "msvcc" = "%system%msvchost.exe" in the registry
key: HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Disable System Restore (Windows Me/XP).
Update the virus definitions.
Delete the value that was added to the registry, and restart the computer.
Run a full system scan and delete all the files detected as Trojan.Xombe.