Automated PC Solutions       VACM - Virus Alerts for the Common Man VACM Home APCS Home Links      Contact APCS "get it" links:         #1 AntiSpyware #1 AntiVirus   #1 Personal Firewall

Goner, Gone, Pentagone virus bigger than BadTrans.B

Greetings from The VACM Team,

 "Hi"

The message reads:

  "When I saw this screensaver, I immediately thought
  about you. I am in a harry, I promise you will love it!"

Attached to the message is what appears to be a screensaver file:

  GONE.SCR

Long time VACM subscribers will recall that you should never
double click on certain types of files, including:

  .EXE, .DOC, .XLS, .SCR, .VBS, .WSF, .PIF,
  .BAT, .CMD, .SHE, .SHB

***************************************************
* What "Pentagone" Does To Your System...
***************************************************
If you double click on GONE.SCR, this virus will:

  -display an animation dialog box
  -display a bogus error message
  -create copy of itself in the "C:\Windows\System" folder
  -ensures that it will run itself when your system boots
  -mass-mail itself to everyone in your address book
  -send itself via ICQ (if installed)
  -terminates and deletes your personal firewall
  -terminates and deletes your realtime antivirus scanner

***************************************************
* If You Get Infected...
***************************************************
Get the latest updates for your antivirus software and run a
full system scan.  

If you need to manually remove the virus, reboot into DOS mode
using a clean DOS boot diskette, go to the "Windows\System"
directory and delete the file "gone.scr".  

Deleting the GONE.SCR file will deactivate the virus, but
in order to completely remove all traces of the virus, your
best bet is to use your up-to-date antivirus software.

***********************************************
* How Could You Have Avoided This?
***********************************************
-Know what files are executable (and dangerous to
double click on) and never double-click these types
of files.  See the previously mentioned list, above.

-Instead of double-clicking attachments, right-click them
and then do "Save As" and save them to your desktop or
a folder.  This gives your antivirus software a chance
to scan the attachment.

-Don't let Windows hide file extensions (the last part
of filenames after the period).  Follow the instructions
at "How To: Unhide File Extensions to tell
Windows not to hide file extensions.

Best Regards,
Marc Deschenes, VACM Editor
The VACM Project at
Automated PC Solutions

*** Be sure to check out the appendix at the end of this alert if you are having trouble booting your computer into "Safe Mode". The process is all spelled out for you there.   Why should you be very concerned about Spyware? Learn how to avoid Identity Theft and Windows corruption in this free VACM Video:      VACM-tested #1 AntiSpyware Software How did they steal my Identity? Why do I get so much SPAM ? Why is your computer running so slow ? Today, every PC needs just a few protection softwares. Find out what and why. Visit our Links Page to avoid Indentiry Theft and costly computer repairs.    VACM Links to Protection Tools and Softwares Keep your PC Safe and Avoid a costly trip to the shop... with these VACM approved tools. You need 3 things to protect your PC(s) automatically. Use these links to go directly to the Download and Purchase pages: the best AntiSpyware product the best Firewall product the best AntiVirus product           Old Shotgun Shell Boxes are collector's items and worth good money!  (yes... just the empty boxes) get your   ShotShell BlueBook price guide now.     To cancel your subscription to VACM, reply to this email with the word UNSUBSCRIBE in the subject. If you click on the link below, the "unsubscribe" email will be created for you and you can simply hit "Send" in you email program: Create My Unsubscribe Email IMPORTANT: please include the email address at which you are currently receiving VACM Alerts in the body of the message.     ******** APPENDIX - Handy How-To Tips **********   * How To Boot into Safe Mode Shut the computer down so that the power is off. Turn the computer on, wait 1 second and begin pressing the F8 key on the keyboard, once every second repeatedly. Do this until the Windows Startup Menu appears. If you get a keyboard error, press F1 to resume and then continue pressing the F8 key once every second, or your PC may tell you to press another key for BIOS setup. Select Safe Mode from the Windows Startup Menu, then press the Enter key on the keyboard. Windows will then boot into Safe Mode. NOTE: This may take longer than a normal boot. At the end of the boot process a dialog box will appear informing you that Windows is in Safe Mode. Click OK on this dialog box. Windows is now in Safe Mode. If you miss hitting the F8 at the right time, Windows will boot normally and you will not see the "Safe Mode" message.  In this case, start from the top of these instructions until you get the boot menu screen where you can choose "Safe Mode".  This can be a little tricky the first time you do it.