setver32 er skadet

[danielsn]

Lurer bare på hva setver32.exe gjør. I Norman står det at den er skadet. Hvilke konsukvenser har det?

 

Mvh. Daniel

[smh]

Hos meg finner eg bare setver, som er eit dos program for å sette kva dos versjon eit dos program skal kjøre i. (Dos emulerer då den versjonen du setter).

 

Kva katalog ligger fila i?

[danielsn]

Hviss kattalog er det samme som mappe så er det system32.

[olejohnny]

Hei, kan det være en worm du hat fått!

 

http://www.trendmicro.com/vinfo/virusencyc...=WORM_SPYBOT.EP

[danielsn]

Det er nok det.

 

 

Dataen reagerer litt "rart" på internett.

 

Jeg kan koble til, men je får ikke brukt nettet ( programer, browsere osv.).

[olejohnny]

Hei, prøv manuell fjerning, se under:

 

Terminating the Malware Program

 

This procedure terminates the running malware process.

 

Open Windows Task Manager.

» On Windows NT, 2000, and XP, press

CTRL+SHIFT+ESC, then click the Processes tab.

In the list of running programs*, locate the process:

SETVER32.EXE

Select the malware process, then press either the End Task or the End Process button, depending on the version of Windows on your system.

To check if the malware process has been terminated, close Task Manager, and then open it again.

Close Task Manager.

Removing Autostart Entries from the Registry

 

Removing autostart entries from the registry prevents the malware from executing at startup.

 

Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.

In the left panel, double-click the following:

HKEY_CURRENT_USER>Software>Microsoft>Windows>

CurrentVersion>Run

In the right panel, locate and delete the entry:

Windows secure = ”setver32.exe”

In the left panel, double-click the following:

HKEY_CURRENT_USER>Software>Microsoft>Windows>

CurrentVersion>Runonce

In the right panel, locate and delete the entry:

Windows secure = ”setver32.exe”

In the left panel, double-click the following:

HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>

CurrentVersion>RunServices

In the right panel, locate and delete the entry:

Windows secure = ”setver32.exe”

In the left panel, double-click the following:

HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>

CurrentVersion>Run

In the right panel, locate and delete the entry:

Windows secure = ”setver32.exe”

In the left panel, double-click the following:

HKEY_LOCAL_MACHINE>Software>Microsoft>Windows>

CurrentVersion>RunOnce

In the right panel, locate and delete the entry:

Windows secure = ”setver32.exe”

In the left panel, double-click the following:

HKEY_LOCAL_MACHINE>System>CurrentControlSet>

Services>Windows Safety

Right click this key and select Delete in the pop-up menu. Select Yes on the confirmation dialog box.

Close Registry Editor.