Here You Are e-mail worm

[hellnoire]

Daniel, thank you very much for your help.... I do appreciate it.

[Daniel]

UPDATE: I completed the basic of this script, stopping running process, deleting files and removing the registry keys. I need to create the script to restore the registry values back to the default.

Does anyone know I can test the script? I got a spare computer that I can do my testing.

[hellnoire]

That's the thing... the site that had it has been shut down, though I imagine it could come back if he decided to be a pain. I know I don't have a copy of it....

[Daniel]

Other question, will I be breaking the law if I got a copy of the original? Also am I breaking the forum rules by asking if anyone got a copy? If so, I'm sorry.

[Ceyfer √]

Easy to avoid. Just be cautious guys!

This worm might suddenly evolved, time can tell.

[hellnoire]

Depends on where you live....in the US, it would be illegal to get a copy of it, yes, but in Canada, and most other places in the world, it's grey.

It's technically against the rules of this forum to get the virus... and I don't have a clue where you'd find it right now, so I can't even begin to suggest anything.

[Boyfriend]

According to Malware Research Group test, all major antiviruses and antimalwares detect "Here You Have” email worm.

Source: Here

[hellnoire]

That I didn't know... haha, shows you how much I knew on the worm.

[ahashmi06]

I have tried and created a batch file for removing this worm.

I did not test it with the actual virus.

Here is the link: http://forum.raymond.cc/spyware-viru...-are-worm.html