I suffered a virus infection last night. It was from a file I had downloaded fron Kazaa, but unfortunately, it infected my machine before Norton had updated it's virus definitions, and alerted me to it. The virus was
W32.Kwbot.C.Worm, and it is transmitted in Kazaa and iMesh file transfers.
Click Here for more details.
This is a particularly nasty little b^£^%$&d, and it took me about 2 hours to free my machine of all infection. It creates registry entries, and corrupts what seems to be a system file, which Norton failed to be able to deal with. Apart from feeling seriously let down by Norton (I had downloaded the file at least two days before they got round to putting out an auto update), I am now left with a problem, which is this:
The file Norton had trouble handling was
C:\Windows\System32\cmd32.exe. I'm not sure if this file was there before the virus and was infected, or was actually placed there by the virus. It did try to access the web, but fortunately my firewall stopped it (at least that worked, Norton!). In the end, as the file would not delete, and kept running on boot up, I renamed it, and managed to move it to the Recycle Bin, where Norton also managed to disinfect it, but in doing so, deleted it.
I am now left with the problem that each time Windows starts, I get an error message that the file could not be found. I have looked everywhere to try to stop Windows (XP) trying to run the file at startup, but without success. Windows seems to be running fine without the cmd32.exe, so my questions are as follows:
1. Do I actually need this file?
2. Was it there before the virus infection?
3. How do I replace the file, or stop the startup error message?
4. How does SFC (System File Checker) work in XP? It's not the usual command.
Thanks for any help!
Topic: Missing File - Help! (Read 4234 times)