Author Topic: kernels32.exe  (Read 1682 times)

Guest.

  • Guest
kernels32.exe
« on: April 07, 2005, 02:05:49 PM »
Ok. Today I logged onto my computer, it had been working fine earlier, but then I logg on and my mouse wasn't working and my display settings were wrong (the colour's in 16bit and the screen area is 640x480). So.. I went into hardware settings and found a way to get my mouse back my re-installing the hardware (which I had not unnistalled in the first place) Then I set my intentions on changing my display properties back to normal. But no.. the computer let me select the display properties.. got me to the point where I confirmed I wanted to restart to allow the selection to carry through.. but no matter how many times I try to change the properties and restart it , it won't change.. and it often takes a while to restart after. I get this message when I try to change something using 'Advanced settings' saying there isn't enough memory to run deskcp16.dll

I then ran AVG (version 7) and it found 3 viruses:

loadclean.exe
kernels32.exe - two of them.

It healed two, leaving kernels32.exe

Now whenever I restart my computer there is one message saying: Cannot find the file C:/WINDOWS/SYSTEM/kernels32.exe (or one of its components) Make sure the path and filename are correct and that all required libaries are available. Could this be because I deleted it? I went into regedit using run on the start menu to go into the registry from some website advice. I was under the impression that it was a virus that needed to be deleted.

Also, a message comes up saying rundll something (Ill type it properly now after I restart.. short term memory loss)

Can anyone help me please? I can't change my display properties back to normal, my computer is running quite slow.. what do I do?

Thanks.

Guest

  • Guest
kernels32.exe
« Reply #1 on: April 07, 2005, 02:11:26 PM »
I just restarted.

The message came up saying: rundll has performed an illegal operation. I clicked onto details and I got this:

RUNDLL caused a general protection fault
in module MMSYSTEM.DLL at 000a:00000032.
Registers:
EAX=1bbf0000 CS=1bbf EIP=00000032 EFLGS=00000246
EBX=81cd4b1e SS=2a2f ESP=00004b1c EBP=80474b2a
ECX=00001c07 DS=1c07 ESI=00000000 FS=0000
EDX=00001bbf ES=2a2f EDI=00003986 GS=0000
Bytes at CS:EIP:
ff 1e f8 00 8b 46 f8 8b 56 fc c4 5e 08 26 89 07
Stack dump:
034c3987 1bbc003b 0000201e 4b46398f 398f2021 4b3a0004 00002a2f 00001bbf 1c173986 17f70377 4b5a013f 00000114 00c80000 39863987 01471841 4b6e3987

guest 2

  • Guest
kernels32.exe
« Reply #2 on: April 11, 2005, 12:35:37 PM »
Hi I've the same matter like you

I found this may be it will help you :

http://www.sophos.com/virusinfo/analyses/trojdloaderfc.html