PDA

View Full Version : Zipload32.exe


Khan
April 14th 03, 03:20 PM
Dear readers,
When ever i turn on my system, I get message

"ZipLoad32.exe has encountered a problem and needs to
close. We are sorry for the inconvenience."

Its ask me to send Microsoft an error report & have send
it many time but no use.
Its really bothering me alot.
I removed it from the start up using "msconfig" but its
still comming.
Can any one help me in fixing this error?
Thank you.

Skip Knoble
April 14th 03, 04:11 PM
Kahn: ZipLoad32.exe is a Worm call Zetno. See:
http://support.centralcommand.com/cgi-bin/command.cfg/php/enduser/std_adp.ph
p?p_refno=021018-000013

First Boot in Safe mode. Then

1) Edit your system.ini file (using Start/Run=msconfig) and remove the line
reading:
shell=Explorer.exe Zipload32.exe
And make sure that there is still a line reading: shell=Explorer.exe

2) Edit your Win.ini file and remove the line: load=Zipload32.exe

Reboot normally. Update your virus definition files and/or get a good
antivirus
program. Then do a complete scan on your whole system..

Skip Knoble, Penn State

"Khan" > wrote in message
...
> Dear readers,
> When ever i turn on my system, I get message
>
> "ZipLoad32.exe has encountered a problem and needs to
> close. We are sorry for the inconvenience."
>
> Its ask me to send Microsoft an error report & have send
> it many time but no use.
> Its really bothering me alot.
> I removed it from the start up using "msconfig" but its
> still comming.
> Can any one help me in fixing this error?
> Thank you.

Sir_George
April 14th 03, 07:36 PM
Khan,

The following information should help;

Details:
--------
Name: Worm/Zetno
Alias: None
Type: Internet Worm
Discovered: October 18, 2002
Platform: Microsoft Windows 95/98/ME/NT/2000/XP
Size: 11.541KB


Description:
------------
When Worm/Zetno is executed, the worm copies itself in the \windows\ directory under the filename "Winsysger.exe" (1.025 Kbytes). Additionally, the files "C:\Zetno.exe (11.541 Kbytes)" and "C:\Windows\System\Zipload32.exe (11.541 Kbytes)" are created new. The following modifications are done to the various files:

- C:\Windows\System.ini
shell=Explorer.exe
shell=Explorer.exe Zipload32.exe

- C:\Windows\Win.ini
run=
run=Zipload32.exe

- C:\Windows\Win.ini
load=
load=Zipload32.exe

To change the files above back to their default values;

Start>Run>Sysedit (typed in the caption box) Selectively go to the appropriate "ini" file and change the "shell, run, and load" lines to no entry: ie, remove anything after the "=" sign.

--
Sir_George


"Khan" > wrote in message ...
> Dear readers,
> When ever i turn on my system, I get message
>
> "ZipLoad32.exe has encountered a problem and needs to
> close. We are sorry for the inconvenience."
>
> Its ask me to send Microsoft an error report & have send
> it many time but no use.
> Its really bothering me alot.
> I removed it from the start up using "msconfig" but its
> still comming.
> Can any one help me in fixing this error?
> Thank you.

Google