loads on startup

  • Thread starter Thread starter Carl G
  • Start date Start date
C

Carl G

Hi All
Got a question here. This is on my daughters computer.
In msconfig she has 2 listings for a file called , navprotect.exe , and one
called kernal32.
Every time she boots the computer it tryies to dial the internet.
I think these files are telling it to dial someone.
I cannot disable or should i say uncheck them. I can uncheck them but
everytime i reboot they are checked again.
I did a search on the PC and came up with no such files or programs.
Also i canot bring up the windows task manager , says it was disabled by
adminestrator, how do i renable task manager ?
Thanks
 
Hello,

Maybe these aren't as fool proof.. But they work and i feel installing XP
fresh would take a lot longer and may not be as easy.

Sounds like you have the BadTrans virus as well as maybe another one.
Try downloading and running this too
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

After this has run and remove it, Try doing an online virus scan at
http://symantec.com/cgi-bin/securitycheck.cgi so we know what viruses we are
dealing with.

You may also want to purchase an antivirus program if you don't already have
one.

Regards
Paul Mckenna

mherchel said:
Hi Carl,
You're PC is infected by a virus/trojan. Check out
http://www.liutilities.com/products/wintaskspro/processlibrary/kernal32/

The best way to fix this is to backup your data onto a cd and reload it.

When you do this, upgrade the system to Service Pack 2 asap, and
download all windows updates and get some virus protection.

There are other ways to deal with it, but none are as foolproof as
above.

Good luck.

-Mike
Click to expand...
 
Thanks guys,
We run AVG free edition and it caught a trogan virus , but said it was
healed.
We also run adware 6 and spybot12.
none of them come up with any infections now.
I will try your sugestions though.
 
Isn't navprotect.exe part of Norton Antivirus (real-time protection). It can
be disabled through Norton Antivirus/Systemworks in the options
dialog(startup).
 
We don't have any Norton antivirus programs on the computer.
must be something else.
thanks for the reply
 
Homer said:
Isn't navprotect.exe part of Norton Antivirus (real-time protection). It can
be disabled through Norton Antivirus/Systemworks in the options
dialog(startup).
Click to expand...

FYI there is a new trojan that installs itself using file names that are the
same as Norton AV files.
 
Carl said:
Hi All
Got a question here. This is on my daughters computer.
In msconfig she has 2 listings for a file called , navprotect.exe , and one
called kernal32.
Every time she boots the computer it tryies to dial the internet.
I think these files are telling it to dial someone.
I cannot disable or should i say uncheck them. I can uncheck them but
everytime i reboot they are checked again.
I did a search on the PC and came up with no such files or programs.
Also i canot bring up the windows task manager , says it was disabled by
adminestrator, how do i renable task manager ?
Thanks
Click to expand...

kernal32 is part of a backdoor trojan. Navprotect.ex3 is part of a
worm. Google for both these names to get more information.
 
Carl said:
Got a question here. This is on my daughters computer.
In msconfig she has 2 listings for a file called , navprotect.exe , and one
called kernal32.
Every time she boots the computer it tryies to dial the internet.
I think these files are telling it to dial someone.
I cannot disable or should i say uncheck them. I can uncheck them but
everytime i reboot they are checked again.
Click to expand...

navprotect *might* be part of Norton Antivirus, but from the sound this
is a parasite program spoofing it. As kernal32 certainly is spoofing
kernel32 - which would *never* be loaded in this way. See
http://aumha.org/a/parasite.htm
and run the recommended check/cleanup programs.
 
Thanks guys
Thanks for all the info.By the time i got back to my daughters place this
morning, her pc had really gone downhill.
I just rebuilt the whole works today and so far everything is fine.
She has XP PRO SP2. We have everything up to date again.
Thanks again
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

upon startup I get an error loading vyfilhun.dll 8
Any link between malware and scam calls? 2
Desktop icons gone 32
Can I do things the sloppy way? Without too much risk? 35
customer fell for tech support call 10
stopping useless processes on startup 2
How do I restore Acer eRecovery to its initial state, asking to make backups 9
Modem service. How I make it available? 2

Back
Top