Hit by BADTRANS.b

[ecoscollege]

I can not find the New Thread Button !

I have just been hit by the BADTRANS.B. virus. I have been following Norton's instructions for removal but can not find the following registry value in kernel32.exe HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\Kernel32=kernel32.exe.

Where can I find a clean download copy of kernel32 ?

 

[Rollin' Rog]

New thread is at the top right and bottom left of the forum page.

Can you clarify your existing problem?

Kernel32.exe is the virus file and not something to replace.

Did you navigate to that key and not find the reference? Then your virus program may have deleted it.

Are you getting any error messages concerning it, such as when you run exe files?

If your problem is with editing the registry, do this:

>> from start, run regedit

>> click in order:

+ Hkey_Local_Machine
+ Software
+ Microsoft
+ Windows
+ CurrentVersion
RunOnce

>> with the RunOnce key highlighted, look for, right click on and delete

Kernel32=kernel32.exe.

in the right hand pane.

>> Close the registry editor and reboot

 

[Magoo]

Does anyone know how to remove the virus from the norton anti-virus quarantine section? Thanks.

 

[Rollin' Rog]

Have you verified that the registry or win.ini entry calling it has been removed, and then rebooted? You can also try rebooting in safe mode and deleting it.

Best to review and follow Symantec's instructions here:

http://www.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.html

http://forums.techguy.org/showthread.php?s=&threadid=59756