****************************************************************************
FIX_GONE (version 1.02)
Trend Micro, Inc.
http://www.antivirus.com
****************************************************************************


I. File List

    o  FIX_GONE.EXE     - Fix tool for WORM_GONE.A
    o  README_GONE.TXT  - This file


II. How to Use

    1.  Turn off all applications running in your system, including any
        antivirus software that may be installed, to avoid conflicts that may
        occur while the tool is scanning the system.

    2.  Copy the tool "FIX_GONE.EXE" into any folder on the hard disk.

    3.  Run the tool "FIX_GONE.EXE". You can run it from a floppy disk. The
        tool will display its actions on your system. The tool will also log
        events in a log file named "fix_gone.log" located in the same folder
        as the tool.

    4.  Enable any antivirus software that is installed and perform a manual
        scan.


III. Description

    This tool is designed to clean a system that was infected by
    WORM_GONE.A

	This tool will clean the system without having to boot using the
	boot disk or emergency rescue disk (ERD).

	The tool supports the following features:

        o   Terminates all instances of the worm in memory
        o   Deletes the file "GONE.SCR" dropped by the worm
        o   Removes the registry entry created by the worm
        o   Scans all local hard drives and removes all infected copies
            of the mIRC script file "REMOTE32.INI", and all remaining copies
            of the worm
        o   Inoculates the system


IV. Parameters

    <folder>    The folder where the tool will begin scanning. If 
                unspecified, the tool will scan all local hard drives.
         /Q     Quiet mode: Disables opening message. Removes
                virus/worm and clean infected computer.
         /F     Fast mode: skips the hard disk scanning for all
                remaining copies of the worm	
         /?     Displays help information



V. Requirements

    This tool is designed to run under Windows NT/2000 and Windows 9x/ME.

    If you are using Windows NT 4.0, you need to copy the file "PSAPI.DLL"
    to the Windows system folder, which is usually "C:\WINNT\system32". You
    may find the "PSAPI.DLL" file on the Windows NT 4.0 Setup CD in the
    following locations:

        \Support\Debug\i386\PSAPI.DLL
        \Support\Debug\Alpha\PSAPI.DLL
        \Support\Debug\MIPS\PSAPI.DLL
        \Support\Debug\PPC\PSAPI.DLL


VI. History:

    Version 1.00 - First release
    Version 1.02 - Added a logging feature and the ability to scan all local
        hard drives for remaining copies of the worm.


VII. Others
    This tool has been tested under the following platforms:
        Windows 9x
        Windows ME
        Windows NT 4.0 Workstation and Server
        Windows 2000 Professional and Server


VIII. For more information regarding these viruses, please visit our Web site
    at:

    <http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=
        WORM_GONE.A>