error in nstask32.exe after randex worm

[melinda]

Hi. Has anyone contracted the Randex E worm? I did
yesterday and now have the error "windos cannot
find 'nstask32.exe'" make sure you typed the name
correctly and then try again..... I get this message
after login to my computer
Can anybody help me with this please
Thanks!

[R. C. White]

Hi, Melinda.

No. I run Norton Antivirus and keep it updated, so I haven't caught any
worms - yet.

My WinXP Pro does NOT have a program called nstask32.exe, and Google gets
only 2 hits for it. Sounds nasty! Those posts show different names for the
virus, though.

I searched for that name at
http://www.symantec.com/search/
and got an instant response that starts off:
"W32.Randex.E is an Internet Relay Chat (IRC) Trojan Horse that allows its
creator to control a computer by using IRC. It is also a worm that can use
the DCOM RPC ..."

I suggest you start there, Melinda. Good luck!

RC
--
R. C. White, CPA
San Marcos, TX

Microsoft Windows MVP

"melinda" > wrote in message
...
> Hi. Has anyone contracted the Randex E worm? I did
> yesterday and now have the error "windos cannot
> find 'nstask32.exe'" make sure you typed the name
> correctly and then try again..... I get this message
> after login to my computer
> Can anybody help me with this please
> Thanks!

[Sharon F]

On Thu, 14 Aug 2003 08:11:49 -0700, melinda wrote:

> Hi. Has anyone contracted the Randex E worm? I did
> yesterday and now have the error "windos cannot
> find 'nstask32.exe'" make sure you typed the name
> correctly and then try again..... I get this message
> after login to my computer
> Can anybody help me with this please
> Thanks!

Melinda, follow the link R.C. White posted for you.

The file "nstask32.exe" is one that Randex created on your system. The worm
was removed (by your antivirus program?) but the call to run it at startup
still remains. The antivirus program cannot do that repair. You have to
step in and do it instead. The article R.C.'s link goes to gives step by
step directions for getting all of the stray commands and pieces of the
worm cleaned up.

--
Sharon F
MS-MVP/ Windows XP - Shell/User

[Doug Knox MS-MVP]

See www.kellys-korner-xp.com/xp_tweaks.htm, Line 258, Left column for a
removal tool that will remove any left over files (shouldn't be any if your
AV software did its job) and the registry entries that are causing the error
you're getting.

--
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Associate Expert
ExpertZone - http://www.microsoft.com/windowsxp/expertzone
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"melinda" > wrote in message
...
> Hi. Has anyone contracted the Randex E worm? I did
> yesterday and now have the error "windos cannot
> find 'nstask32.exe'" make sure you typed the name
> correctly and then try again..... I get this message
> after login to my computer
> Can anybody help me with this please
> Thanks!

[Unknown]

Your antivirus program (Norton) is totally useless against the latest worm,
'blaster' I think it's called.
"R. C. White" > wrote in message
...
> Hi, Melinda.
>
> No. I run Norton Antivirus and keep it updated, so I haven't caught any
> worms - yet.
>
> My WinXP Pro does NOT have a program called nstask32.exe, and Google gets
> only 2 hits for it. Sounds nasty! Those posts show different names for
the
> virus, though.
>
> I searched for that name at
> http://www.symantec.com/search/
> and got an instant response that starts off:
> "W32.Randex.E is an Internet Relay Chat (IRC) Trojan Horse that allows its
> creator to control a computer by using IRC. It is also a worm that can use
> the DCOM RPC ..."
>
> I suggest you start there, Melinda. Good luck!
>
> RC
> --
> R. C. White, CPA
> San Marcos, TX
>
> Microsoft Windows MVP
>
> "melinda" > wrote in message
> ...
> > Hi. Has anyone contracted the Randex E worm? I did
> > yesterday and now have the error "windos cannot
> > find 'nstask32.exe'" make sure you typed the name
> > correctly and then try again..... I get this message
> > after login to my computer
> > Can anybody help me with this please
> > Thanks!
>
>

[R. C. White]

Yeah. I should have also said that Windows Update installed protection from
that (MSBlast.exe) a month ago.

We all should have at least the 3 main protections in place:

1. Firewall
2. Antivirus
3. Windows Update

Plus Ad-Aware and SpyBot for protection from pop-ups and other nuisances.

RC
--
R. C. White, CPA
San Marcos, TX

Microsoft Windows MVP

"Unknown" > wrote in message
.com...
> Your antivirus program (Norton) is totally useless against the latest
worm,
> 'blaster' I think it's called.
> "R. C. White" > wrote in message
> ...
> > Hi, Melinda.
> >
> > No. I run Norton Antivirus and keep it updated, so I haven't caught any
> > worms - yet.
> >
> > My WinXP Pro does NOT have a program called nstask32.exe, and Google
gets
> > only 2 hits for it. Sounds nasty! Those posts show different names for
> the
> > virus, though.
> >
> > I searched for that name at
> > http://www.symantec.com/search/
> > and got an instant response that starts off:
> > "W32.Randex.E is an Internet Relay Chat (IRC) Trojan Horse that allows
its
> > creator to control a computer by using IRC. It is also a worm that can
use
> > the DCOM RPC ..."
> >
> > I suggest you start there, Melinda. Good luck!
> >
> > RC
> >
> > "melinda" > wrote in message
> > ...
> > > Hi. Has anyone contracted the Randex E worm? I did
> > > yesterday and now have the error "windos cannot
> > > find 'nstask32.exe'" make sure you typed the name
> > > correctly and then try again..... I get this message
> > > after login to my computer
> > > Can anybody help me with this please
> > > Thanks!