systask32l.exe - Dangerous
systask32l.exe
Manual removal instructions:
Antivirus Report of systask32l.exe:
systask32l.exe
I-Worm.Kindal - this is the worm which spreads via the Internet as files attached to infected messages.
Also it spreads through the KaZaA, Overnet, LimeWire and Morpheus.
Copies itself as "%Windir%\systask32l.exe" и "%Sysdir%\ln32k.exe".
Adds the value:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SysService32" = "%Windir%\systask32l.exe"
Creates text file "%Windir%\ln32k.dll".
Disables Windows File Protection, if your system runs under Windows NT/2000/XP.
The worm uses its own SMTP engine for send infected messages to all address from Windows Address Book.
Infected messages have the following characteristics:
From:
Skid Marton [@work]
Header:
I mate, there you go...
Body:
(Begin)
Lyrics below and audio track file attached. Cya !
(It's okay, it's okay. I'm gonna make it anyway.)
(End)
I've got every ingredient All I need is the courage
Cuz I ain't havin no luck with this so f*ck it
Attachment:
This_Is_How_I_Feel-Track-02.remixed.exe
Remove this worm by RegRun Startup Optimizer.
| systask32l.exe | Malware |
| systask32l.exe | Dangerous |
| systask32l.exe | High Risk |
Also it spreads through the KaZaA, Overnet, LimeWire and Morpheus.
Copies itself as "%Windir%\systask32l.exe" и "%Sysdir%\ln32k.exe".
Adds the value:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SysService32" = "%Windir%\systask32l.exe"
Creates text file "%Windir%\ln32k.dll".
Disables Windows File Protection, if your system runs under Windows NT/2000/XP.
The worm uses its own SMTP engine for send infected messages to all address from Windows Address Book.
Infected messages have the following characteristics:
From:
Skid Marton [@work]
Header:
I mate, there you go...
Body:
(Begin)
Lyrics below and audio track file attached. Cya !
(It's okay, it's okay. I'm gonna make it anyway.)
(End)
I've got every ingredient All I need is the courage
Cuz I ain't havin no luck with this so f*ck it
Attachment:
This_Is_How_I_Feel-Track-02.remixed.exe
Remove this worm by RegRun Startup Optimizer.
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.