The CMD32.exe file

I previously hve probs caused by Blaster worm. I think I managed to get rid of it and I have taken steps to protect my PC. However, every time I boot up I now get this error message: ‘Failed to find c:\windows\system32\ cmd32.exe’. Did I accidentally delete a critical file during my recent panic attack?

You should be very glad that you’re seeing the message that Windows XP failed to find the file, as it’s a Trojan that has infected your PC, not the crucial system file it sounds like. The reason it failed to find it is that you’ve managed to remove it from your PC while you were cleaning up – and that’s a good thing.

ok thanks for you help.

You can read more about the Trojan, called Kwbot, at

http://security response.symantec.com/ avcenter/venc/data/w32.kwbot .c.worm.html.

This page has step-by-step instructions for removing the registry entries that the Trojan puts there, including the ones for starting itself up that give you the error message. Alternatively, you can download a tool that will do it for you from MVP Doug Knox’s site at

www.dougknox.com/xp/scripts_desc/xp_clean_kwbot.htm.

You don’t say what steps you’ve taken to protect yourself, but we’d suggest getting antivirus software and keeping it up to date (look for automatic updates or download new definitions manually every week), avoiding file-sharing networks, and turning on the Internet Connection Firewall.


If you still have any more problems, do feel free to post a HijackThis Log in the malware removal forum.

ok, i'll try that