Virus Alert – USERINT32.EXE

A file called userint32.exe will appear in your Windows\System or System32 folder. You may see it described as "Windows Service Manager". This file installs with the W32.Allim worm. This worm is a variant of SDBot that is targeted at AOL/AIM users. It sets itself up to run on system startup and can disable windows files. It can then spread to anyone in your buddy list.

We'd recommend removing this file using WinPatrol. First, kill it under Active Tasks. If files called userint32.exe-0A2F2573.pf, as.exe, proto.exe, or winimsg.exe appear on your system, kill those as well. Next, remove these files from your Startup Programs. If running WinPatrol 8.x or later; right click each file then select "Delete file on reboot".

Additional background information on this worm can be found at http://securityresponse.symantec.com/avcenter/venc/data/w32.allim.a.html.

Virus

Remove