( ! ) Notice: Undefined variable: p in /app/domains/com/druid628/www/public_html/techtips/virus/header.php on line 5
Call Stack
#TimeMemoryFunctionLocation
10.0003231552{main}( )../pentagoner.php:0
20.0005238536include( '/app/domains/com/druid628/www/public_html/techtips/virus/header.php' )../pentagoner.php:5
<br /> <font size='1'><table class='xdebug-error xe-notice' dir='ltr' border='1' cellspacing='0' cellpadding='1'> <tr><th align='left' bgcolor='#f57900' colspan="5"><span style='background-color: #cc0000; color: #fce94f; font-size: x-large;'>( ! )</span> Notice: Undefined variable: subtopic in /app/domains/com/druid628/www/public_html/techtips/virus/header.php on line <i>15</i></th></tr> <tr><th align='left' bgcolor='#e9b96e' colspan='5'>Call Stack</th></tr> <tr><th align='center' bgcolor='#eeeeec'>#</th><th align='left' bgcolor='#eeeeec'>Time</th><th align='left' bgcolor='#eeeeec'>Memory</th><th align='left' bgcolor='#eeeeec'>Function</th><th align='left' bgcolor='#eeeeec'>Location</th></tr> <tr><td bgcolor='#eeeeec' align='center'>1</td><td bgcolor='#eeeeec' align='center'>0.0003</td><td bgcolor='#eeeeec' align='right'>231552</td><td bgcolor='#eeeeec'>{main}( )</td><td title='/app/domains/com/druid628/www/public_html/techtips/virus/pentagoner.php' bgcolor='#eeeeec'>../pentagoner.php<b>:</b>0</td></tr> <tr><td bgcolor='#eeeeec' align='center'>2</td><td bgcolor='#eeeeec' align='center'>0.0005</td><td bgcolor='#eeeeec' align='right'>238536</td><td bgcolor='#eeeeec'>include( <font color='#00bb00'>'/app/domains/com/druid628/www/public_html/techtips/virus/header.php'</font> )</td><td title='/app/domains/com/druid628/www/public_html/techtips/virus/pentagoner.php' bgcolor='#eeeeec'>../pentagoner.php<b>:</b>5</td></tr> </table></font> Druid628 :: Virus :: Pentagone - Goner Worm
DruiD628 :: Tech Tips ::
( ! ) Notice: Undefined variable: subtopic in /app/domains/com/druid628/www/public_html/techtips/virus/header.php on line 38
Call Stack
#TimeMemoryFunctionLocation
10.0003231552{main}( )../pentagoner.php:0
20.0005238536include( '/app/domains/com/druid628/www/public_html/techtips/virus/header.php' )../pentagoner.php:5
Virus ::
Pentagone - Goner Worm  


( ! ) Notice: Undefined variable: PHP_SELF in /app/domains/com/druid628/www/public_html/techtips/virus/header.php on line 55

Call Stack
#TimeMemoryFunctionLocation
10.0003231552{main}( )../pentagoner.php:0
20.0005238536include( '/app/domains/com/druid628/www/public_html/techtips/virus/header.php' )../pentagoner.php:5
','500','500');" onMouseDown="javascript:window.status=' ';return true;" onMouseOver="javascript:window.status='';return true;" onMouseUp="javascript:window.status='';return true;" onMouseOut="javascript:window.status='';return true;"> Email this to a friend

Pentagone (Goner) worm

The Goner Worm is a nasty little bugger. 

You will first receive an email from someone with the Subject Line: "Hi"
This will be the program (screen saver) you will see (IT IS EVIL!) DO NOT OPEN IT!
Well, if you did open it... this is one of the things you will see
You also will see this.

If you are using Outlook or Outlook Express,  you might want to Email EVERYONE on your contact list and tell them NOT to open the attachment.

 

First thing first, as I said before EMAIL, call, fax, send by the pony express, what ever you have to do to let your contacts know that you were infected by a virus. Next you must go to "Start" then to "Run" and type "regedit" and click "ok"
 
  Once in Regedit go to "Edit" then "Find" type "gone.scr" delete the String value.
It should be located at:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

Make a note of the location of the gone.scr file.
On a 98  it should be:
"C:\Windows\System\gone.scr" and the value should be the same.

If you are on a NT or 2000 machine it should be:
"C:\Winnt\System32\gone.scr" with the same value.

On XP, I believe it is:
"C:\Windows\System32\gone.scr" with the same value
.
 

Next you must reboot the machine and boot into the Command prompt.
To boot into the command prompt press F8 when you see Starting Windows 98 or Verifying DMI Data Pool.
Then Select Command Prompt.
On later versions of Windows press F8 when the splash screen first starts to load. Select Safe Mode with Command Prompt.
 
Now change to the directory where the gone.scr file is located (i.e. if the file were located in c:\windows\system\) then type
cd \windows\system\

Next type
attrib gone.scr

You should see the SHR attributes to the left of the filename.
These stand for System, Hidden, and Read-Only. You must remove these by typing:
attrib -s -h -r gone.scr

then delete the file by typing:
del gone.scr

(view an example to the right)


 

Now Reboot.

2000-2018 DruiD628
micah {at symbol} druid628.com

Home | Links | Geekdom | About Me | Code | Tablet (Blog)
Tech Tips | Virus