VBS.Forgotten.A@mm - Removal

Risk Level 1: Very Low

Discovered: December 13, 2000

Updated: February 13, 2007 11:46:41 AM

Type: Worm

To remove this worm:

Run a full system scan, making sure that Norton AntiVirus is set to scan all files.
Delete any file detected as infected with VBS.Forgotten.A@mm. These files cannot be repaired, and must be restored from clean backup copies.
Using Registry Editor, select the following registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
In the right pane, delete the following value:

vb1
Delete the following registry key:

HKEY_CURRENT_USER\Software\(ANSWER)

Writeup By: Brian Ewell

Technical Details

Search Threats

Search by name

_{Example: W32.Beagle.AG@mm}