The earlier email I sent you came, as I said, from the computer folks at
Valencia. They copied it from the SYMANTAC page on the web.
Unfortunately, the file name of the offending virus was incorrectly
listed. The registry file you should look for is as follows:
HKLM/Software/Microsoft/Windows/Current Version/Run/tapwen/....
What comes after tapwen is the executable file name you clicked on to
get the nasty worm on your computer in the first place (I am relisting
some of the possible .exe files below-from the SYMANTAC site). I just
got the thing off of my computer and after deleting this file from the
registry (mine said GOAL1.exe), I then had to restart the computer.
Then I went to Start/Find and looked for anyplace where that file may
have saved itself on my computer. In fact, it saved itself in a couple
of places. I right-clicked on both of those and deleted them. Be
careful not to double click lest you put it back on the computer again.
Hope this helps.
Mary
Attached to the message will be one of the following file name:
g-zilla.exe, cooler3.exe, cooler1.exe, copier.exe, video.exe,
pirate.exe, goal1.exe, hog.exe, party.exe, saddam.exe, monica.exe,
boss.exe, farter.exe, cheeseburst.exe, panther.exe, theobbq.exe,
goal.exe, baby.exe, bboy.exe, cupid2.exe, fborfw.exe, casper.exe,
irnglant.exe, or gadget.exe
****************************************************************************
* To post to the list: email mathedcc@archives.math.utk.edu *
* To unsubscribe, send mail to: majordomo@archives.math.utk.edu *
* In the mail message, enter ONLY the words: unsubscribe mathedcc *
* Words in the Subject: line are NOT processed! *
* Archives at http://archives.math.utk.edu/hypermail/mathedcc/ *
****************************************************************************