spool32.exe - Dangerous
%windir%\spool32.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
Spool32.exe is W32.Badday.A.
W32.Badday.A is a worm that spreads through mapped and removable drives. It may also lower security settings on the compromised computer.
Related files:
%Windir%\Media\StartUp\scvhost.exe
%System%\hostdll.exe
%System%\taskfile.exe
%Windir%\spool32.exe
%SystemDrive%\HaveaBadDay.sys
%DriveLetter%\cool data.exe
%DriveLetter%\New Folder (4).exe
%DriveLetter%\dataku.exe
%DriveLetter%\data kuliah.exe
%DriveLetter%\New Folder (5).exe
%DriveLetter%\system.exe
%DriveLetter%\funny doc.exe
%CurrentFolder%\jangan dihapus .exe
%CurrentFolder%\my sweety .exe
%CurrentFolder%\foto cewek .exe
%CurrentFolder%\kekasishku .exe
%CurrentFolder%\data penting .exe
%CurrentFolder%\downlodan .exe
%CurrentFolder%\update antivir .exe
%CurrentFolder%\kumpulan program .exe
%CurrentFolder%\movie bkp .exe
%CurrentFolder%\nitip .exe
%CurrentFolder%\folder option .exe
Kill the process spool32.exe and remove spool32.exe from Windows startup.