1. /
  2. Security Response/
  3. VBS.Forgotten.A@mm

VBS.Forgotten.A@mm - Removal

Risk Level 1: Very Low

Discovered:
December 13, 2000
Updated:
February 13, 2007 11:46:41 AM
Type:
Worm

To remove this worm:
  1. Run a full system scan, making sure that Norton AntiVirus is set to scan all files.
  2. Delete any file detected as infected with VBS.Forgotten.A@mm. These files cannot be repaired, and must be restored from clean backup copies.
  3. Using Registry Editor, select the following registry key:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
  4. In the right pane, delete the following value:

    vb1
  5. Delete the following registry key:

    HKEY_CURRENT_USER\Software\(ANSWER)


Writeup By: Brian Ewell

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report
Symantec DeepSight Screensaver