systask32l.exe - Dangerous
systask32l.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
Also it spreads through the KaZaA, Overnet, LimeWire and Morpheus.
Copies itself as "%Windir%\systask32l.exe" и "%Sysdir%\ln32k.exe".
Adds the value:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SysService32" = "%Windir%\systask32l.exe"
Creates text file "%Windir%\ln32k.dll".
Disables Windows File Protection, if your system runs under Windows NT/2000/XP.
The worm uses its own SMTP engine for send infected messages to all address from Windows Address Book.
Infected messages have the following characteristics:
From:
Skid Marton [@work]
Header:
I mate, there you go...
Body:
(Begin)
Lyrics below and audio track file attached. Cya !
(It's okay, it's okay. I'm gonna make it anyway.)
(End)
I've got every ingredient All I need is the courage
Cuz I ain't havin no luck with this so f*ck it
Attachment:
This_Is_How_I_Feel-Track-02.remixed.exe
Remove this worm by RegRun Startup Optimizer.