I'm getting a lot of viral emails....I caught the virus this time too... OK, here's what I did to prevent it again and it appears to work...
Do the registry edit if you like to remove runonce kernel32.exe as per instructions on the symantec site. Not really neccesary. Delete the two files kernel32.exe and kdll.dll in windows\system32 (NT) or windows\system and recreate those names as directories. Now when you receive the virus again it can't make those two files because they already exist as directories, it won't put an entry in the registry to execute kernel32.exe, and the virus itself ends up harmlessly trapped in your temp directory, where it's really no threat with nothing to call it up. This is probably specific to this particular virus because it wants to use kernel32.exe as a file name, but the principle will work with other names if you set it up.... ciao Duncan --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.264 / Virus Database: 136 - Release Date: 7/2/01 -- The silver-list is a moderated forum for discussion of colloidal silver. To join or quit silver-list or silver-digest send an e-mail message to: [email protected] -or- [email protected] with the word subscribe or unsubscribe in the SUBJECT line. To post, address your message to: [email protected] Silver-list archive: http://escribe.com/health/thesilverlist/index.html List maintainer: Mike Devour <[email protected]>
