Name : kernel32.exe
Path : %SYSTEM%\kernel32.exe
[ C:\Windows\System32\kernel32.exe ]
type : Internet
Name : W32.Bandtrans.B@mm
Alias : I-Worm.BadTransII,
level : Low
Kernel32.exe is dropped
by Badtrans.B worm. It is a
modified variant of original BadTrans
worm. This encrypted worm sends infected mails to
e-mail address collected from web pages and
Windows address book. It also drops Trojan.PSW.Hooker.b
in the victims PC. The virus author can steal
username and password details using this password
as an e-mail attachment. The attachments are
embedded within the e-mail and it won't visible
to the user. When the user views the attachment
the embedded code is executed automatically and
it drops the virus. Microsoft released security
patches to close this security hole. If you haven't
installed, you can get a copy at http://www.microsoft.com/windows/ie/download/critical/Q290108/default.asp
worm attachment name will be one of the following.
The worm also decrypts
and drops KERNEL32.EXE and KDLL.DLL in the
Windows system folder. The password stealer is
activated on next startup by adding the registry.
How can I protect my
Solo has incorporated
kernel32.exe in its signature file to protect
users from this worm attack. Solo antivirus
registered users are already protected from this
worm. Make sure that you have installed
registered version of Solo Antivirus to protect
your system from all virus threats.
to remove this worm?
can check the system manually. W32.BadTrans.B@mm
worm creates the file "KERNEL32.EXE",
"KDDLL.DLL" in the Windows system
folder. The presence of these files ensures you
are infected with this worm.
If you are already
infected kernel32.exe process, download and
install security patches from the link http://www.microsoft.com/windows/ie/download/critical/Q290108/default.asp according to your
Internet Explorer version.
run Solo Antivirus and choose delete option to
remove worm components. Solo antivirus
can detect and remove W32.BadTrans.B@mm safely.
Use the following link to Download 30 day
trial version of Solo antivirus to
remove viruses from your computer.
Solo anti-virus not only
scans for all viruses, it contains a unique System
Integrity Checker to protect you from
New Internet Worms, Backdoors and
malicious VB, Java Scripts. It also
effectively removes all existing Internet Worms,
File viruses, malicious VB, Java scripts, Trojans,
Backdoors, boot sector, partition table and macro
purchase Solo antivirus using the link