Trojan Horse + W32.Badtrands.B@mm

Hent

www.ftp-s.subnet.dk/pub/appz/ipesetup.exe

Incolate IT.. Den fjerner den..

Prøv on-line scanner
http://housecall.antivirus.com/pc_housecall/

Removel
http://virusall.com/rembadtransb.html

http://www.claymania.com/badtrans-b-removal.html

Må man godt delete disse 2 filer?
Tager windows ikke skade af dette?

Removal on Windows 95/98/Me.
1. Restart your computer in MS-DOS mode:

In Windows 95/98 click 'Start', and choose 'Shut Down'
Select 'Restart the computer in MS-DOS mode' and click OK. The computer will now restart.
NOTE: In Windows Me restart your computer with an emergency startup floppy disk. If you do not have this, create one by clicking:
Start > Settings > Control Panel > Add/Remove Programs > |Startup Disk > Create Disk.
Put this disk into your computer and restart it.


2. When the computer has finished loading MS-DOS, you will see a command prompt:

Type "del c:\windows\system\kernel32.exe" and press return.
Type "del c:\windows\system\kdll.dll" and press return.
Type "exit" to restart Windows. In Windows Me you will have to reboot.

3. Scan with an updated antivirus scanner to make sure all infected files are removed.

Ingen af filer er Windows filer...

jeg har allerede svaret vedr. badtrans.b flere gang!! Men husk at hvis du
ikke er ekspert med registrerings database, at du nemt kan fucke den op hvis du bruger regedit. Jeg vil nok anbefale en mere brugervenlig reg-edit
program, såsom registry healer el. system mechanic for dette.

nej, du må ikke fjerne kernel32 !! Kun modificere registrerings databasen!

e 30....hvilket styresystem har du?

hvis du har 95/98:

Press "start" on the task bar
Select "Shut down..."'
Select "Restart the computer in DOS mode"

When the computer has started with a DOS prompt:
type cd \norman\dos
type NVC32X /ALD /CL /U



NT/2000/XP

Find and stop the KERNEL32.EXE process using task manager.

How to do this:

Press Ctrl-Alt-Del. Press the "Task Manager" button. Select the "Processes" window. Find the KERNEL32.EXE process, select it and click on "End Process".

Start NVC via "Start|Programs|Norman Virus Control|Norman Virus Control". Select your hard disk(s) and press "Start scan".


ME:

Windows ME does not have the option to boot to DOS directly. However, this is perfectly possible, but you have to use the emergency startup diskette that normally is supplied with your PC. If you don't have an emergency diskette, make a new one by selecting "Start|Settings|Control Panel|Add/Remove Programs|Startup Disk|Create Disk"

Once you have a startup diskette, insert it into the A: drive and restart.

The rest of the procedure is identical to the one described for Win 95/98.

The registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\Kernel32
may be deleted manually using REGEDIT. However, since the RunOnce key normally is cleared after it's been referenced, it's normally enough to reboot twice to remove it.

Virus Warnings HIGH RISK 
Jan 17: W32/Klez.E
Nov 24: W32/Badtrans.B
Sep 05: W32/Magistr.B
Jul 20: W32/SirCam
Nov 16: W32/Hybris

New viruses MEDIUM RISK 
Feb 19: W32/Yarner.A
Jan 03: W32/Maldal.E
Dec 04: W32/Goner.A
Sep 19: W32/Nimda.A
Mar 14: W32/Magistr.A

New viruses LOW RISK 
Mar 08: W32/MyLife.A

More virus information 
Virus descriptions
New virus descriptions

Lists of detected viruses
Latest virus definition files published: 2002:0308

 
 
Håber det hjælper...