error in nstask32.exe after randex worm

[melinda]

Hi. Has anyone contracted the Randex E worm? I did
yesterday and now have the error "windos cannot
find 'nstask32.exe'" make sure you typed the name
correctly and then try again..... I get this message
after login to my computer
Can anybody help me with this please
Thanks!

 

[R. C. White]

Hi, Melinda.

No. I run Norton Antivirus and keep it updated, so I haven't caught any
worms - yet.

My WinXP Pro does NOT have a program called nstask32.exe, and Google gets
only 2 hits for it. Sounds nasty! Those posts show different names for the
virus, though.

I searched for that name at
http://www.symantec.com/search/
and got an instant response that starts off:
"W32.Randex.E is an Internet Relay Chat (IRC) Trojan Horse that allows its
creator to control a computer by using IRC. It is also a worm that can use
the DCOM RPC ..."

I suggest you start there, Melinda. Good luck!

RC

 

[Unknown]

Your antivirus program (Norton) is totally useless against the latest worm,
'blaster' I think it's called.

 

[Sharon F]

Hi. Has anyone contracted the Randex E worm? I did
yesterday and now have the error "windos cannot
find 'nstask32.exe'" make sure you typed the name
correctly and then try again..... I get this message
after login to my computer
Can anybody help me with this please
Thanks!

Melinda, follow the link R.C. White posted for you.

The file "nstask32.exe" is one that Randex created on your system. The worm
was removed (by your antivirus program?) but the call to run it at startup
still remains. The antivirus program cannot do that repair. You have to
step in and do it instead. The article R.C.'s link goes to gives step by
step directions for getting all of the stray commands and pieces of the
worm cleaned up.

 

[Doug Knox MS-MVP]

See www.kellys-korner-xp.com/xp_tweaks.htm, Line 258, Left column for a
removal tool that will remove any left over files (shouldn't be any if your
AV software did its job) and the registry entries that are causing the error
you're getting.