Kern32 - Techist - Tech Forum

Go Back   Techist - Tech Forum > Computer Hardware > Monitors, Printers and Peripherals
Click Here to Login
Closed Thread
 
Thread Tools Display Modes
 
Old 06-03-2004, 11:15 PM   #1 (permalink)
Newb Techie
 
Join Date: Jun 2004
Posts: 7
Default Kern32

Hi............i am a 15 yr. old boy who has built his own computer and knows quite much about them........could you please tell me where to find and locate this worm Kern32........its not in the registry and its not in system directory


Thanks ahead of time REPLY DANGIT
__________________

ramos712 is offline  
Old 06-03-2004, 11:55 PM   #2 (permalink)
True Techie
 
Join Date: Mar 2004
Posts: 228
Send a message via Yahoo to jaun1477
Default

Windows 95/98/ME:

1. It will create the file INETD.EXE in the Windows directory and it will alter the "run=" line in the WIN.INI file (also located in the Windows directory) to read "run=inetd.exe".

2. It will then create the files KERN32.DLL and HKSDLL.DLL to the Windows\System directory, and will create the following key in the Registry:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RunOnce\kernel32= kern32.exe

Windows NT/2000:

1. It will create the files KERN32.DLL and HKSDLL.DLL to the Windows\System directory, and will create the following key in the Registry:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RunOnce\kernel32= kern32.exe

2. It will create the file INETD.EXE in the Winnt directory and will create the following registry key:

HKEY_USERS\Software\Microsoft\WindowsNT\CurrentVer sion\Windows\RUN= C:\Winnt\Inetd.exe


Removing the Worm

The worm was first discovered earlier in April, so the anti-virus software on your computer should be able to remove the infected files from your computer so long as it is completely up-to-date. If you do not currently have any anti-virus software on your computer and you are a member of the University of Maryland College Park, you can download McAfee anti-virus software here, install it on your system, and update it (complete instructions for downloading and installing, or simply updating, are available from the same download web page).

If your anti-virus software cannot fully remove the worm, follow the removal instructions on Symantec's web page at: http://www.symantec.com/avcenter/ven....13312@mm.html
__________________

__________________
EL VAQUERO
_________________
amd athlon xp 2400+
1 apacer 256mb unb pc2700 cl2.5
motherboard msi kt4av via kt400a chipset based
1 ??? 512 mb pc2700
1 agp 8x/4x (geforce 4 predator mx4408x)
2 year old 21 magnavox monitor
1 aquos sharp 15\"tv
Seagate 40gb hd
DC Output: 420Watts Total: +5V/0~42A, +12V/0~18A
+3.3V/0~26A, -5V/0~0.8A, -12V/0~1.0A, +5VSB/0~2.5A.
http://img44.photobucket.com/albums/...vantar_gif.gif
jaun1477 is offline  
Old 06-04-2004, 12:04 AM   #3 (permalink)
Newb Techie
 
Join Date: Jun 2004
Posts: 7
Default

Thanks jaun...............i got it off my computer and now i feel safe!!! lol
ramos712 is offline  
Old 06-04-2004, 02:38 AM   #4 (permalink)
True Techie
 
Join Date: Mar 2004
Posts: 228
Send a message via Yahoo to jaun1477
Default

i never asked what o/s you had but im glad its taken care
__________________
EL VAQUERO
_________________
amd athlon xp 2400+
1 apacer 256mb unb pc2700 cl2.5
motherboard msi kt4av via kt400a chipset based
1 ??? 512 mb pc2700
1 agp 8x/4x (geforce 4 predator mx4408x)
2 year old 21 magnavox monitor
1 aquos sharp 15\"tv
Seagate 40gb hd
DC Output: 420Watts Total: +5V/0~42A, +12V/0~18A
+3.3V/0~26A, -5V/0~0.8A, -12V/0~1.0A, +5VSB/0~2.5A.
http://img44.photobucket.com/albums/...vantar_gif.gif
jaun1477 is offline  
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off




Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -5. The time now is 03:00 PM.


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.