First showing up in 2005, Win32 is a malevolent Trojan virus that modifies files so it can automatically attach itself (as an .exe file) and an image or a fireworks display to your outgoing emails.
The Win32 virus is generally considered to be fairly harmless as it does not do anything to your computer or information on itself (such as deleting programs or causing it to crash); it just keeps showing you annoying pop-ups and redirects your browser to malicious websites that can inject viruses into your computer, which can then reveal your information to remote hackers. The virus does however have some downfalls; it can overload an email server if attached to too many emails simultaneously and because it gets passed around so much, it can also allow other, more dangerous viruses to attach themselves to it and penetrate your system.
The virus infects your computer by automatically attaching malware titled HAPPY99.EXE to email messages or a newsgroup. This attachment must be opened (or clicked on) in order to activate the virus. Since the virus does not show up on outgoing emails, senders are usually unaware that they have sent a virus with their email. Once the attachment is opened, a display of fireworks appears on your screen. Furthermore, two files named SKA.EXE and SKA.DLL are created in your computer’s system folder without your knowledge or consent. The first file is a copy of the virus while the second modifies an existing file on your computer called WSOCK32.DLL, changing it to WSOCK32.SKA; this is turn allows SKA.DLL to attach the HAPPY99.EXE virus to all your outgoing mails.
The good news is that the virus can be removed manually or with the use of an antispyware program; experts recommend using certified antispyware like Spyhunter to successfully resolve any and all virus/malware/spyware related issues.
Manual Removal Of The Win32 Virus
Follow the steps given below to remove the Win32 Virus manually:
Step 1 – Click the Start button, select Control Panel and click on Uninstall a Program under Programs.
Once the ‘Uninstall or change a program’ screen is displayed, scroll through the list of installed programs, look for a program titled Trojan.Win32 and double click to uninstall it.
Step 2 – Restart your system
Step 3 – Once the un-installation process is completed, close all programs. Now you must end all Win32 processes.
Do this by going to the Task Manager by pressing ALT+CTRL+DELETE or 2) Clicking Start and typing Taskmgr. Once the Task Manager window opens up, locate and stop all running processes related to the Win32 virus. You can stop the intended process by clicking on it and selecting ‘End Task’.
Step 4 – Search for and delete all of the following infected files from your system:
- windivx.dll
- stream32a.dll
- vipextqtr.dll
- ecxwp.dll
If you are unable to delete the files mentioned above, try renaming them to ‘badfile1.dll’, ‘badfile2.dll’ and so on. If your system prevents you from renaming these files, try restarting your computer in safe mode (press F8 before windows launches; navigate to ‘Run Windows in Safe Mode’ using your arrow keys and press enter) and then rename the files.
Step 5 – Now go to C: Program Files, and locate and delete VirusProtect3.8.exe (try rebooting your system in safe mode as mentioned before if you are unable to delete it). Restart your computer once you are done.
Step 6 – Once windows launches, delete the files renamed ‘badfile1.dll’ etc. in step 4.
Although the manual process is fairly simple, a much easier approach is to use a reputable antimalware program which not only detects and removes the Win32 virus from your PC, it also detects intrusions from other types of malicious software as well, guaranteeing comprehensive protection for your computer for a smooth usage experience.
