W32.Randex virus

[Vandal @ Australia]

Has anyone heard of this virus it has attached itself to
my computer and Norton AV cant get access to it. The path
is C:/windows/system32/winsock2.2.exe - does anyone know
if I can delete this above - will it affect the running
of Windows XP?
Be really nice if someone out there has come across this
before... Cheers...

 

[Cerridwen]

Has anyone heard of this virus it has attached itself to
my computer and Norton AV cant get access to it. The path
is C:/windows/system32/winsock2.2.exe - does anyone know
if I can delete this above - will it affect the running
of Windows XP?
Be really nice if someone out there has come across this
before... Cheers...

Like so many viruses/trojans (Nimda, KwBot, etc) this is another that
frightens novice users into thinking they're going to delete something
vital - and hence the virus (or in this case trojan) can continue to do its
evil doings. A trip to Symantec's website would tell you exactly how to deal
with it. There is no such executable - there is a winsock file, but it's a
..dll.

Look up the file in Symantec's virus database - there will be removal
instructions, maybe even a removal tool. I'm not a fan of NAV, but the
database is one of the most comprehensive.

 

[Plato]

Has anyone heard of this virus it has attached itself to
my computer and Norton AV cant get access to it. The path
is C:/windows/system32/winsock2.2.exe - does anyone know
if I can delete this above - will it affect the running
of Windows XP?

It's not a valid filename. I'd try to move it first to a temp folder
before I'd delete it anyway.

 

[Ken Blake, MVP]

In

Has anyone heard of this virus it has attached itself to
my computer and Norton AV cant get access to it. The path
is C:/windows/system32/winsock2.2.exe - does anyone know
if I can delete this above - will it affect the running
of Windows XP?

Read
http://securityresponse.symantec.com/avcenter/venc/data/w32.randex.gen.html

 

[Kelly]

Remove the W32.Randex Worm
http://www.kellys-korner-xp.com/regs_edits/randex.vbs