[Raceboy]

opgepast ik heb een virus . Open geen mail van mij. Ikzelf heb het virus gekregen van patrick schreus dus het zou goed kunnen dat half de belcar al geinfecteert is.
W32/Badtrans@MM
Indications Of Infection:

- Presence of the file %WinDir%\INETD.EXE
- Presence of the file %SysDir%\KERN32.EXE
- Presence of the file %SysDir%\KERNEL32.EXE
- Email correspondence noting that you've sent them an attachment when you did not.

Manual Removal Instructions

WINDOWS 95/98/ME

Restart Windows in Safe Mode (reboot your computer, just before the large WINDOWS startup screen comes up, hit the F5 key).
Click START | RUN, type %WINDIR% and hit ENTER
Delete the INETD.EXE file (if present)

Click START | RUN, type %WINDIR%\SYSTEM and hit ENTER
Delete the following files (if they exist):

KERN32.EXE
KERNEL32.EXE
KDLL.DLL
HKSDLL.DLL

Click START | RUN, type REGEDIT and hit ENTER

Click the (+) next to HKEY_LOCAL_MACHINE

Click the (+) next to SOFTWARE

Click the (+) next to MICROSOFT

Click the (+) next to WINDOWS

Click the (+) next to CURRENTVERSION

Click the (+) next to RUNONCE

Click on KERNEL32 and hit DELETE on the keyboard

Restart the computer
WINDOWS NT/2000/XP

Type CTRL-ALT-DEL at the same time
Choose TASK MANAGER and then choose the PROCESS tab
Locate the KERNEL32.EXE process, click it, and choose END PROCESS
Click START | RUN, type %WINDIR% and hit ENTER
Delete the INETD.EXE file (if present)

Click START | RUN, type %WINDIR%\SYSTEM32 and hit ENTER
Delete the following files (if they exist):

KERN32.EXE
KERNEL32.EXE
KDLL.DLL
HKSDLL.DLL

Click START | RUN, type REGEDIT and hit ENTER

Click the (+) next to HKEY_CURRENT_USER

Click the (+) next to SOFTWARE

Click the (+) next to MICROSOFT

Click the (+) next to WINDOWS NT

Click the (+) next to WINDOWS

If INETD.EXE is found on the right panel, Double Click on RUN on the right and delete the INETD.EXE value


sorry mannen maar dit is echt wel erg

Date: 29 Nov, 2001 on 18:35