# I am a computer idiot - please help me **URL:** \ **Category:** Factual Questions\ **Created:** [November 27, 2001, 5:46pm UTC](https://boards.straightdope.com/t/i-am-a-computer-idiot-please-help-me/95541 "2001-11-27T17:46:59Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![beckwall](https://avatars.discourse-cdn.com/v4/letter/b/b487fb/32.png) [@beckwall](https://boards.straightdope.com/u/beckwall)\ **Post date:** [November 27, 2001, 5:46pm UTC](https://boards.straightdope.com/t/i-am-a-computer-idiot-please-help-me/95541/1 "2001-11-27T17:46:59Z")
I feel so dirty. W32/bad trans-B worm (or is it a virus?) is in my mail program. Yes, I scanned and that is the only file infected. I have no clue how to rid this demon from my computer. I am apparently sending out dozens of e-mails to people on my address book, and thankfully they are being rejected and returned because of virus detection. But WTF do I do now? I am not a stupid person, just incredibly unversed in the ways of the computer. HELP! ---
**Author:** ![Whack-a-Mole](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/whack-a-mole/32/141_2.png) [@Whack-a-Mole](https://boards.straightdope.com/u/Whack-a-Mole)\ **Post date:** [November 27, 2001, 5:53pm UTC](https://boards.straightdope.com/t/i-am-a-computer-idiot-please-help-me/95541/2 "2001-11-27T17:53:31Z")
This comes from Symantec’s website (the makers of Norton Antivirus). Click [here](http://securityresponse.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.html) for the specific page I got this from. > [@](#): > > To remove this worm, see the instructions for your operating system. > > Basic instructions > > Windows 95/98/Me > > 1. Restart Windows in Safe Mode > 2. Run Norton AntiVirus and delete all files that are detected as W32.Badtrans.B@mm. > 3. Remove the value that it added to the registry. > > For detailed instructions, see the sections that follow. > Windows NT/2000 > > 1. Rename the file Kernel32.exe. > 2. Remove the value added to the registry. > 3. Restart the computer. > 4. Run Norton AntiVirus and delete all files that are detected as W32.Badtrans.B@mm. > > For detailed instructions, see the sections that follow. > Detailed instructions > > To restart 95/98/Me in Safe mode: > For instructions, read the document How to restart Windows 9x or Windows Me in Safe Mode. > To Rename the file Kernel32.exe under Windows NT/2000 > > 1. Click Start, point to Find or Search, and click Files or Folders. > 2. Make sure that “Look in” is set to (C:) and that Include subfolders is checked. > 3. In the “Named” or “Search for…” box, type the following: > > Kernel32.exe > > CAUTION: Make sure that you type the full name as shown. You must rename the Kernel32.exe file, not the legitimate Windows file Kernel32.dll > > 1. Click Find Now or Search Now. > 2. Right-click the file that is displayed and then click Rename. > 3. Rename the file to Kernel32.old and press Enter. > 4. Close the Find or Search window. > To run Norton AntiVirus and delete detected files: > > CAUTION: Make sure that you are in Safe mode (Windows 95/98/Me) or have already renamed the Kernel32.exe file (Windows NT/2000). > > 1. Run LiveUpdate to make sure that you have the most recent virus definitions. > 2. Start Norton AntiVirus (NAV), and make sure that NAV is configured to scan all files. For instructions on how to do this, read the document How to configure Norton AntiVirus to scan all files. > 3. Run a full system scan. > 4. Delete all files that are detected as W32.Badtrans.B@mm. > > To edit the registry: > > CAUTION: We strongly recommend that you back up the system registry before you make any changes. Incorrect changes to the registry could result in permanent data loss or corrupted files. Please make sure that you modify only the keys that are specified. Please see the document How to back up the Windows registry before you proceed. This document is available from the Symantec Fax-on-Demand system. In the U.S. and Canada, call (541) 984-2490, select option 2, and then request document 927002. > > 1. Click Start, and click Run. The Run dialog box appears. > 2. Type regedit and then click OK. The Registry Editor opens. > 3. Navigate to the following key: > > HKEY\_LOCAL\_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce > > 1. In the right pane, delete the following value: > > Kernel32 kernel32.exe > > 1. Click Registry, and then click Exit. ---
**Author:** ![beckwall](https://avatars.discourse-cdn.com/v4/letter/b/b487fb/32.png) [@beckwall](https://boards.straightdope.com/u/beckwall)\ **Post date:** [November 28, 2001, 5:19pm UTC](https://boards.straightdope.com/t/i-am-a-computer-idiot-please-help-me/95541/3 "2001-11-28T17:19:46Z")
Sheesh, what a friggin’ mess. Thanks for the help, Mole. I did follow your instructions, and I think I might have fixed it. But now everything is running real slow, moving from my home page to SDMB took forever. Does that sound like I am still infected somewhere? Or has it done permanent damage to my computer? At least it is not disconnecting every few minutes, as was the case yesterday before I de-bugged. I don’t know why anyone gets their jollies from doing this to others, actually I do know - because it makes us pissed off and helpless. Anyway, thanks again. I hope that no one else here at SDMB has to deal with this. Yuck.