Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
i have this virus and i have norton corprate antivirus,but it wont get rid of it. does anyone know how to get this thing out ? thanks in advance

I found this download, antibenjamin.exe
use at your own risk, or wait for more info.http://www.wilders.org/downloads.htm

Bitdefender has provided this removal tool can't testify to how well it works. I haven't been blessed with benjamin yet.
http://www.bitdefender.com/download/antibenjamin.exe

Here's a link to the write up & removal instructions at Symantec
W32.Benjamin.Worm
If you use Windows ME or XP you'll also need to remove it from the Restore folder, this link will help with that
Good luck

This threat is considered a Low-Profiled risk as it is not wide-spread and has gotten media attention.
When this worm is run, it copies itself to %WINDIR%\SYSTEM\EXPLORER.SCR, where %WINDIR% is the directory Windows is installed in. Then it adds the registry key:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\
Run\SystemService=%WINDIR%\SYSTEM\EXPLORER.SCR
To spread, the worm requires that the Kazaa software is installed on the machine. It creates a directory called %WINDIR%\TEMP\SYS32, and changes the Kazaa settings so that remote users can download from this directory. Then it copies itself to that directory under many different names which other users may search for. The size of these files can vary since the worm pads them with garbage bytes. This method of spreading is comparable to the VBS/GWV worm.Presence of EXPLORER.SCR and registry key pointing to it.
Presence of %WINDIR%\TEMP\SYS32 and many files inside.Since this worm offers itself over the Kazaa network under names that users may find tempting, users who are not infected may download and run the worm from infected machines, and thus spread the worm themselves.

![]() |
w32.stator@mm virus (worm...
|
virus estrella.exe
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |