Update: Ultimate Links PC Tips - What is krn132.exe? How to Remove?

krn132.exe is a dangerous virus that clears your hard disk.

The technical name for krn132.2x2 is Klez Trojan.
Klez Trojan is a trojan spread by mostly email, that in lots of cases, has actually removed all files on the infected computer


When [ W32.Klez.A | at | mm ] is executed, it does the following:

It copies itself to

%System%\Krnl132.exe

NOTE: %System% is a variable. The worm locates the \Windows\System folder (by default this is C:\Windows\System or C:\Winnt\System32) and copies itself to that location.

It adds the value

krn132 %System%\krn132.exe

to the registry key

HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Run

so that it is executed when you start Windows.

The worm attempts to disable on-access virus scanners and searches local, mapped, and network drives. The worm copies itself using a random file name with a variable double extension, such as Filename.txt.exe.

In addition, the worm searches the Windows address book, which is used by Microsoft Outlook, for email addresses. The worm sends an email message to these addresses with itself as an attachment.

The email message has the following characteristics:

Subject: The subject of the email varies. It will usually be one of the following:
How are you?
Can you help me?...


View Original Content...

0 comments :