Over 1 million tech questions and answers.

Kernel32 Infected

Q: Kernel32 Infected

I was unable to do the online scan because my neither Mozilla nor IE works. Other problems are certain sound drivers don't work, and at times my IP seems to be released. I did a repair install which fixed some problems but compounded others and was directed here from the Sound Card forums.

Deckard's System Scanner v20070905.67
Run by Andrew on 2007-11-11 14:29:17
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
8: 2007-11-11 20:29:23 UTC - RP8 - Deckard's System Scanner Restore Point
7: 2007-11-11 17:24:26 UTC - RP7 - Software Distribution Service 3.0
6: 2007-11-11 09:00:19 UTC - RP6 - Software Distribution Service 3.0
5: 2007-11-11 03:50:13 UTC - RP5 - Installed Dell Resource CD
4: 2007-11-11 03:48:20 UTC - RP4 - Software Distribution Service 3.0


-- First Restore Point --
1: 2007-11-11 02:49:56 UTC - RP1 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Andrew.exe) ----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:34:07 PM, on 11/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\WINDOWS\system32\LxrSII1s.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\PRISMSVR.EXE
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Common Files\AOL\1126978585\ee\AOLHostManager.exe
C:\Program Files\Common Files\AOL\1126978585\ee\AOLServiceHost.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Dell Wireless\PRISMCFG.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Documents and Settings\Andrew\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Andrew.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DE
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R3 - URLSearchHook: (no name) - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - (no file)
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1126978585\ee\AOLHostManager.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [DLBUCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLBUtime.dll,[email protected]
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Wireless USB 2.0 WLAN Card Utility.lnk = ?
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 2.0\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1194749733765
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: dlbu_device - Dell - C:\WINDOWS\system32\dlbucoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Lexar Secure II (LxrSII1s) - Unknown owner - C:\WINDOWS\SYSTEM32\LxrSII1s.exe
O23 - Service: RaySat_3dsmax8 Server (mi-raysat_3dsmax8) - Unknown owner - C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
O23 - Service: mental ray 3.5 Satellite (32-bit) (mi-raysat_3dsmax9_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XI.SP4a\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XI.SP4a\RpcSandraSrv.exe

--
End of file - 10165 bytes

-- File Associations -----------------------------------------------------------

.bat - batfile - DefaultIcon - C:\WINDOWS\system32\shell32.dll,71
.inf - inffile - DefaultIcon - C:\WINDOWS\system32\shell32.dll,69
.txt - txtfile - DefaultIcon - C:\WINDOWS\system32\shell32.dll,70


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R1 omci (OMCI WDM Device Driver) - c:\windows\system32\drivers\omci.sys <Not Verified; Dell Computer Corporation; OMCI Driver>
R2 AegisP (AEGIS Protocol (IEEE 802.1x) v3.1.0.0) - c:\windows\system32\drivers\aegisp.sys <Not Verified; Meetinghouse Data Communications; AEGIS Client 3.1.0.0>
R2 LxrSII1d (Secure II Driver) - c:\windows\system32\drivers\lxrsii1d.sys
R3 DSproct - c:\program files\dellsupport\gtaction\triggers\dsproct.sys <Not Verified; Gteko Ltd.; processt>

S0 cercsr6 - c:\windows\system32\drivers\cercsr6.sys <Not Verified; Adaptec, Inc.; Dell RAID Controller>
S3 C-Dilla - c:\windows\system32\drivers\cdant.sys <Not Verified; Macrovision; Licence Management System>


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 Autodesk Licensing Service - "c:\program files\common files\autodesk shared\service\adskscsrv.exe" <Not Verified; Autodesk; Autodesk Licensing Service>
R2 C-DillaSrv - c:\windows\system32\drivers\cdantsrv.exe <Not Verified; C-Dilla Ltd; CD-Secure/CD-Compress Windows NT>
R2 LxrSII1s (Lexar Secure II) - lxrsii1s.exe
R2 mi-raysat_3dsmax8 (RaySat_3dsmax8 Server) - "c:\program files\autodesk\3dsmax8\mentalray\satellite\raysat_3dsmax8server.exe"
R2 mi-raysat_3dsmax9_32 (mental ray 3.5 Satellite (32-bit)) - "c:\program files\autodesk\3ds max 9\mentalray\satellite\raysat_3dsmax9_32server.exe"
R2 RichVideo (Cyberlink RichVideo Service(CRVS)) - "c:\program files\cyberlink\shared files\richvideo.exe" <Not Verified; ; RichVideo Module>

S4 PRISMSVC - c:\windows\system32\prismsvc.exe <Not Verified; Conexant Systems, Inc.; PRISM Wireless LAN>


-- Device Manager: Disabled ----------------------------------------------------

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: 1394 Net Adapter
Device ID: V1394\NIC1394\9107C8EE23C01
Manufacturer: Microsoft
Name: 1394 Net Adapter
PNP Device ID: V1394\NIC1394\9107C8EE23C01
Service: NIC1394

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: 1394 Net Adapter
Device ID: V1394\NIC1394\FD646C00803F1200
Manufacturer: Microsoft
Name: 1394 Net Adapter #2
PNP Device ID: V1394\NIC1394\FD646C00803F1200
Service: NIC1394

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel Acoustic Echo Canceller
Device ID: SW\{4245FF73-1DB4-11D2-86E4-98AE20524153}\1&308076E9&0&{9B365890-165F-11D0-A195-0020AFD156E4}
Manufacturer: Microsoft
Name: Microsoft Kernel Acoustic Echo Canceller
PNP Device ID: SW\{4245FF73-1DB4-11D2-86E4-98AE20524153}\1&308076E9&0&{9B365890-165F-11D0-A195-0020AFD156E4}
Service: aec

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel Audio Splitter
Device ID: SW\{2F412AB5-ED3A-4590-AB24-B0CE2AA77D3C}\1&431A56F&0&{9B365890-165F-11D0-A195-0020AFD156E4}
Manufacturer: Microsoft
Name: Microsoft Kernel Audio Splitter
PNP Device ID: SW\{2F412AB5-ED3A-4590-AB24-B0CE2AA77D3C}\1&431A56F&0&{9B365890-165F-11D0-A195-0020AFD156E4}
Service: splitter


-- Scheduled Tasks -------------------------------------------------------------

2007-10-26 15:29:04 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2005-12-18 16:26:41 344 --a------ C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 2200 series#1126977551.job


-- Files created between 2007-10-11 and 2007-11-11 -----------------------------

2007-11-11 14:33:55 0 d-------- C:\Program Files\Trend Micro
2007-11-11 14:23:59 0 d-------- C:\Program Files\SpywareBlaster
2007-11-10 21:50:14 0 d-------- C:\WINDOWS\system32\vmm32
2007-11-10 21:36:15 0 d-------- C:\WINDOWS\ServicePackFiles
2007-11-10 21:35:29 0 d-------- C:\WINDOWS\EHome
2007-11-10 20:54:04 0 d-------- C:\Program Files\AutoStreamer
2007-11-10 20:00:56 0 d-------- C:\WINDOWS\NV6001732.TMP
2007-11-10 19:40:47 0 d-------- C:\WINDOWS\setup.pss
2007-11-10 1714 0 d-------- C:\Program Files\SiSoftware
2007-11-10 13:44:40 0 d-------- C:\WINDOWS\dell
2007-10-23 18:04:27 0 d-------- C:\WINDOWS\pss
2007-10-20 23:20:16 0 d-------- C:\Documents and Settings\Jack\Application Data\CyberLink
2007-10-16 18:57:09 0 d-------- C:\ProgramData


-- Find3M Report ---------------------------------------------------------------

2007-11-11 11:56:26 99 --a------ C:\WINDOWS\?
2007-11-10 21:57:00 384 --a------ C:\WINDOWS\system32\DVCStateBkp-{00000005-00000000-00000003-00001102-00000004-20061102}.dat
2007-11-10 21:57:00 384 --a------ C:\WINDOWS\system32\DVCState-{00000005-00000000-00000003-00001102-00000004-20061102}.dat
2007-11-10 20:39:21 23444 --a------ C:\WINDOWS\system32\emptyregdb.dat


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [12/10/2005 03:06 AM]
"SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe" [11/19/2003 04:48 PM]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [04/25/2005 07:50 AM]
"CTSysVol"="C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe" [09/17/2003 09:43 AM]
"CTDVDDET"="C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE" [06/18/2003 12:00 AM]
"CTHelper"="CTHELPER.EXE" [04/09/2007 12:32 PM C:\WINDOWS\system32\CtHelper.exe]
"UpdReg"="C:\WINDOWS\UpdReg.EXE" [05/11/2000 12:00 AM]
"dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [12/06/2004 12:05 AM]
"ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [07/27/2004 03:50 PM]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [07/27/2004 03:50 PM]
"DMXLauncher"="C:\Program Files\Dell\Media Experience\DMXLauncher.exe" [01/27/2005 12:02 AM]
"HostManager"="C:\Program Files\Common Files\AOL\1126978585\ee\AOLHostManager.exe" [08/02/2005 01:33 PM]
"IntelliPoint"="C:\Program Files\Microsoft IntelliPoint\point32.exe" [03/23/2005 05:26 PM]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [12/07/2005 09:57 PM]
"LanguageShortcut"="C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" [05/18/2006 10:29 AM]
"DLBUCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLBUtime.dll" [11/09/2004 08:47 PM]
"nwiz"="nwiz.exe" [10/22/2006 12:22 PM C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="NvMCTray.dll" [12/10/2005 03:06 AM C:\WINDOWS\system32\nvmctray.dll]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [06/14/2007 07:13 PM]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [07/27/2007 05:03 PM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [03/15/2007 10:09 AM]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 06:00 AM]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [10/13/2004 10:24 AM]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.exe.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [3/4/2005 5:21:11 PM]
America Online 9.0 Tray Icon.lnk - C:\Program Files\America Online 9.0\aoltray.exe [9/10/2005 12:56:03 AM]
hp psc 2000 Series.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe [4/9/2003 4:41:38 PM]
hpoddt01.exe.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [4/9/2003 5:11:12 PM]
InterVideo WinCinema Manager.lnk - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe [1/21/2006 11:04:53 AM]
Wireless USB 2.0 WLAN Card Utility.lnk - C:\Program Files\Dell Wireless\PRISMCFG.exe [9/10/2005 12:49:00 AM]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WB]
C:\Program Files\AlienGUIse\fastload.dll 12/20/2001 10:34 PM 24576 C:\Program Files\AlienGUIse\fastload.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=wbsys.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9c36e3a6-5082-11db-911f-00038a000015}]
AutoRun\command- F:\LaunchU3.exe




-- End of Deckard's System Scanner: finished at 2007-11-11 14:35:53 ------------

RELEVANCY SCORE 200
Preferred Solution: Kernel32 Infected

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Kernel32 Infected

bump.

Read other 10 answers
RELEVANCY SCORE 51.6

As advised by the ever helpful Moderators here, may I request for assistance in helping me clean-up my PC with the said trojan/virus (kernel32.ini). I already checked the file at jotti's Online Malware Scan and below are the results:Scan taken on 03 May 2008 19:06:43 (GMT)A-Squared = Found nothingAntiVir = Found TR/Crypt.XPACK.JR.1ArcaVir = Found Trojan.Autorun.GuAvast = Found Win32:AutoRun-FVAVG Antivirus = Found Worm/Delf.DUNBitDefender = Found Trojan.Generic.47326ClamAV = Found Worm.Autorun-667CPsecure = Found W32.AutoRun.guDr.Web = Found Win32.HLLW.Autoruner.999F-Prot Antivirus = Found nothingF-Secure Anti-Virus = Found Virus.Win32.AutoRun.guFortinet = Found nothingIkarus = Found Virus.Win32.AutoRun.guKaspersky Anti-Virus = Found Virus.Win32.AutoRun.guNOD32 = Found probably unknown NewHeur_PE (probable variant)Norman Virus Control = Found nothingPanda Antivirus = Found nothingSophos Antivirus = Found Mal/SillyFDC-AVirusBuster = Found nothingVBA32 = Found Virus.Win32.AutoRun.guBefore this, i was also infected by a trojan/virus (byxxxvu.dll), which gave me a headache cleaning up. Ever since then, my PC's speed has never been the same, especially when booting up and shutting down. I wouldn't want to go through the process of reinstalling XP on my PC, but have reserved it if ever you guys will recommend it.I understand that every case here should be treated individually since some recommendations from helpers might not be suitable (or worst, disastrous) in som... Read more

A:Infected With An Autorun Trojan/virus (kernel32.ini)

Before we post a HJT log let's try fixing this here first?If you have SpyBot installed Temporarily close it before this scan,thanks.Please run S!Ri's SmitfraudFix (part 1)Please download SmitfraudFixDouble-click SmitfraudFix.exeSelect option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).Please copy/paste the content of that report into your next reply.Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.http://www.beyondlogic.org/consulting/proc...processutil.htmNEXT:Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on Download_mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the O... Read more

Read other 3 answers
RELEVANCY SCORE 51.6

Hi,
In my house, we have two laptops running Windows Vista and one laptop which is a '98 upgraded to an XP. We usually use a Belkin G+Mimo router from a Virgin Media modem connected to our Vplus box. If the router doesn't work, we simply use the network cable directly to the laptop we need.
The affected laptop is a Toshiba, I don't know the memory exactly, but I think the hard drive is around 120gb, I can't swear to it, though. The OS is Windows Vista home premium. It has built-in wireless network connectivity.
Yesterday (3rd April 2009), I performed a virus scan with avast!Antivirus 4.8 and found a Trojan Horse, which I moved to the chest because I didn't have time to look at it and it was the recommended action.
I performed the virus scan because my brother was using Club Penguin (A multiplayer game on the internet) and the screen went black with the music still playing. I ordered him to hold down the power button and turn the thing off, then when it turned back on, I started the virus scan. It was set on thorough scan and scan all local drives.
Then, later on *WAY* after it was finished, I went into the chest to look at the virus and get rid of it if possible. I deleted a virus and then I found 3 system files that were in the chest. Kernel32.dll, winsock.dll and wsock32.dll. They were and are under the System Files section in the chest.
I instantly thought that they were viruses, because I didn't notice the system files thing, and went onto av... Read more

Read other answers
RELEVANCY SCORE 51.6

I am new to this forum bare with me.
I got this computer my son in law build. He installed Windows Me, but I don't have the disk. I have my windows 98 disk which I prefer. But anyway, I did a virus scan with NOD and had 40 or more viruses, most it cleaned except kernel32.dll and notepad.exe. Unfortunately I deleted a lot of files. Notepad.exe was on which I use to view source for my web pages on my web site. When I right click to view source it comes up missing notepad.exe. When I scanned with Nod it mentioned booting in Dos which I have no clue of how to do to change the kernel32.dll and copy or something like that.
Can you tell me how to make a dos boot.
Can you tell me how to replace the kernel32.dll file
They said to go to extract from I think the system file, but when I did a search/find option 100's of zip files came up and I have no clue which file to open to extract kernel32.dll and where do I replace it. Do I have to rename it and how?

Notepad.exe I really need how do I replace it and where do I put it?
The virus was W95dupator.1503

Thanks,
Cheri
 

Read other answers
RELEVANCY SCORE 36.4

When I install some programmes, the message "GLJID.tmp - Entry Point Not Found" appears and tells me that "The Procedure Entry Point SetHandleContext could not be located in the dynamic link library KERNEL32.dll". If I then try to run the application, the CD drive "whirs" and the cursor indicates that it is thinking, but then nothing. Looking on the windows 2000 pro. task manager processes I find that the it is running and using 99% of the CPU.
So that it only appears to be running in the background, nothing appears on the Applications tab.

What does it mean?
Why can't I get the programmes to run?
What can I do about it?
 

A:KERNEL32.dll

I just answered you here: http://forums2.techguy.org/showthread.php?s=&postid=768936#post768936

Please do not double-post.

Cheers,
 

Read other 1 answers
RELEVANCY SCORE 36.4

Can anyone tell me what Kernel32.dll mean and how I can get rid of it? Kernel32.dll keeps popping up and I just don't know how to get rid of it. Help Please.
 

A:what does Kernel32.dll mean

Hi and welcome

This link will explain what the file actually is http://www.webopedia.com/TERM/K/kernel32_dll.html

However, to determine the problem....we would need more info...like what is the exact error message you receive?
Does it pop up randomly? Or when you open a certain program?
 

Read other 2 answers
RELEVANCY SCORE 36.4

Evening Partygoers,
 Just did a clean install of XP Pro. After the install I came across the Kernel32.dll error message (when I was trying install AVG and Chrome). Thinking that there may have been a mistake on the install I did another clean install. Still the same thing so I ran the repair and still nothing.
  Using Explorer was almost impossible because I was coming across another .dll error but I updated Java and that has helped tremendously. Cannot update flash player. When I go to the webpage the middle of the screen in blank and that is where I would download flashplayer (the rest of the page is there, just not the most important part).
  Have tried to install SP3, last night when I was able to get to the webpage to download and install the PC just simply rebooted itself. Tonight the webpage would just freeze.
  The main issue, at least I think so, is the Kernel32.  Like I said this is a new, clean install.
  One last quick note, the  mshtml.dll would be the error which would cause the webpage to freeze and stop responding.
  Thank you in advance for your time and advice.

A:Kernel32.dll help PLEASE!

Please download MiniToolBox  , save it to your desktop and run it.
 
Checkmark the following checkboxes:
  List last 10 Event Viewer log
  List Installed Programs
  List Users, Partitions and Memory size.
 
Click Go and paste the content into your next post.
 
Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link.
 
Louis

Read other 1 answers
RELEVANCY SCORE 36.4

I am having problems trying to reinstall a computer played backgammon game board called "Serious Backgammon. I keep getting these messages: Bg has caused an error in KERNEL32.DLL. I've also seen this same message come up when trying to open my IE. What does this mean and can someone help.

My operating system is "ME".
 

Read other answers
RELEVANCY SCORE 36.4

I'm trying to install .Net Framework 2.0 Service Pack 1 on my computer. I run Windows 2000. I keep getting a message that says "The procedure entry point HeapSetInformation could not be located in the dynamic link library KERNEL32.dll"
Is there anything I can do? I need .Net for a game, and I have no way of updating to any kind of XP.
 

A:Kernel32 Help

Hi and welcome to TSG.
Check.
http://support.microsoft.com/kb/142606
Let us know if that helps.
 

Read other 1 answers
RELEVANCY SCORE 36.4

I was downloading a program for a friend, she has windows xp. The program appeared to download, but when i went to open the program i got the error message Procedure entry point encode Pointer could not be located in the dynamic LINK LIBRARY KERNEL 32.DLL. Initially i deleted an earlier version of the program to make space for the new one. After the error msg. I tried to reload both programs (one from the disk, the other from the recycle bin). But i still got the error msg. PLEASE HELP, this isnt my computer and im afraid i messed my friends computer up> Thank you
 

A:Kernel32.dll

If you are running Windows XP and get the error message "The procedure entry point decodepointer could not be located in the dynamic link library KERNEL32.dll.", you will need to install Windows XP service pack 2 or 3.
 

Read other 1 answers
RELEVANCY SCORE 36.4

Hi,

I have just done 2 full sys scans using AVG & its stating the above.
Can somebody please help in this matter.

Thanks

Sue.

PS in the RESULT/INFECTED column it says CHANGE
 

A:kernel32.dll

Hi Sue,

This is a commonly asked question on the AVG forums ......... http://forum.grisoft.cz/freeforum/read.php?2,32539,32553#msg-32553
 

Read other 3 answers
RELEVANCY SCORE 36.4

When I install some programmes, the message "GLJID.tmp - Entry Point Not Found" appears and tells me that "The Procedure Entry Point SetHandleContext could not be located in the dynamic link library KERNEL32.dll". If I then try to run the application, the CD drive "whirs" and the cursor indicates that it is thinking, but then nothing. Looking on the windows 2000 pro. task manager processes I find that the it is running and using 99% of the CPU.
So that it only appears to be running in the background, nothing appears on the Applications tab.

What does it mean?
Why can't I get the programmes to run?
What can I do about it?
 

A:KERNEL32.dll

It may be a compatibility issue. Have a look here:

ErrMsg: Procedure Entry Point Could Not Be Located
 

Read other 1 answers
RELEVANCY SCORE 36.4

kernel32.dll general protection fault in KRNL386.exe
 

Read other answers
RELEVANCY SCORE 36.4

When I try to start Norton I get this message
Memory access violation in module Kernel32 @ 6741:71586213

I have no idea what this is about. Can someone enlighten me?

Thank you in advance for your time.
 

A:Kernel32

I found the answer. I caught the Swen virus. Used symantic tool and all is well now.
jmcmullen
 

Read other 1 answers
RELEVANCY SCORE 36.4

I've been getting a lot of trouble with my computer lately; specifically, the desktop will disappear and show nothing but my background, then reappear, but some things in the taskbar tray will be gone, including Norton. Some programs reappear, but Norton never does until I restart. First off, is this Explorer crashing?
I'll get error reports from time to time that include the file:

C:\Docume~1\ChrisL~\Locals~1\Temp\WER5.tmp.dir00\appcompat.txt

I've done a search of the appcompat.txt to no success, so I tried searching the file and found this inside of it:

EXE NAME="SYSTEM INFO" FILTER="GRABMI_FILTER_SYSTEM">
<MATCHING_FILE NAME="advapi32.dll" SIZE="558080" CHECKSUM="0x7B6E5DDA" BIN_FILE_VERSION="5.1.2600.1106"

I did a search for this line:

EXE NAME="SYSTEM INFO" FILTER="GRABMI_FILTER_SYSTEM">

And discovered that someone else has the EXACT same problem as me (seemingly).

http://www.mcse.ms/archive64-2003-12-230972.html

The file he copied and pasted resembles mine from what I can see exactly. So, I followed the lead given to him to this:

http://aumha.org/win4/a/kernel32.htm

And discovered the problem may be the kernel32.dll or something. The problem is I'm fairly computer illiterate and am not sure how to fix this problem, or even ensure that the kernel32.dll IS the problem. I'm at the end of my rope, so please, any assistance provided would be GREATLY ... Read more

A:Kernel32.dll???

Read other 13 answers
RELEVANCY SCORE 36.4

A user here has a Sony Vaio F290 with Microsift Windows 2000 Professional.
After the user logs in, at the desktop stage the folowing dialog box comes up.

The window is labelled: GUU2.tmp - entry point not found

the proceedure entry point SetHandleContext could not be located in the dymanic link library KERNEL32.DLL
Anybody knows what this is ?

Many thanks !
 

A:Kernel32.dll

Looks like they have installed a program that isn't Windows 2000 compatible and which is set to start with Windows. Have a look at this
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q300179

Best bet is to boot into safe mode and uninstall whatever it is from there. If that doesn't fix the problem, boot with the W2K CD and run the repair option to replace damaged files.
 

Read other 1 answers
RELEVANCY SCORE 36.4

After a hard drive crash and replacement, now trying to get operational again. Quicken 2000 gives me this error message when trying to
download stock prices:

QW caused an invalid page fault in
module KERNEL32.DLL at 016f:bff7a138.
Registers:
EAX=0ffffffc CS=016f EIP=bff7a138 EFLGS=00010206
EBX=04fa8b10 SS=0177 ESP=0100f3f8 EBP=0100f42c
ECX=ffffffff DS=0177 ESI=04fa8a70 FS=324f
EDX=00000001 ES=0177 EDI=1000009c GS=0000
Bytes at CS:EIP:
89 51 08 8b 53 08 8b 43 04 89 42 04 8d 93 0b 10
Stack dump:
0100f42c 04fa8a70 00df0000 00017090 bff7b31d 00df0000
04fa8a70 000000a0 00000200 0000030c 5f49c94c 00017090
04fa8a70 0100f474 bff7b962 00df0000

Already uninstalled and re-installed. Any thoughts?
 

RELEVANCY SCORE 36.4

Hello,
I have just uninstalled a demo copy of Trend Micro internet security in order to use a different anti-virus program. After the uninstall was complete and the computer rebooted, I tried to access my C: directory with "My Computer" and an error popped up that was from Windows Script Host. It read "Can not find script file C:\kernel32.dll.vbs (screen shot below).
I was able to access the C: directory when uploading a file and none of my programs seem to be affected.
I searched this error but I found nothing specific to this error.
I did a system restore to before the time I uninstalled Trend Micro but that didn't fix it.
If someone could help that would be great. Thanks
 

A:kernel32.dll.vbs

Read other 6 answers
RELEVANCY SCORE 36.4

What is kernel32.dll?

A:Kernel32.dll

The definition of Kernel32.dll is Here in our File Database. Kernel32.dll is the 32-bit dynamic link library found in the Windows operating system kernel.It handles memory management and input/output operations.

Read other 2 answers
RELEVANCY SCORE 36.4

I got Windows98SE and the newly-downloaded Sygate 5.5,which works fine and stealthy according to ShieldsUp,dslBroadband and Sygate own Tests.
Kernel32.dll is the first application to ask permission as soon as i get on line, and it shows in Connection Details in Port 138 (UDP) and 139 (TCP).I have blocked its requests on a day to day basis until now,as i am unsure whether a perennial block could pose problems of sorts.Is there a reason i shouldnt block it altogether?
thanks nanino
 

A:Kernel32.dll

Hi nanino,

This sounds like a virus. There are several that masquerade as kernel32.

Either run an uptodate virus scan with your own AV or go here and run the online scan.

Once done could you please download Hijack This! from here. Unzip, doubleclick HijackThis.exe, and hit "Scan". When the scan is finished, click "Save Log", and copy and paste it in a reply.

This will give us a rundown of what’s going on in your PC. One of us here will be glad to analyse it for you. Don’t fix anything yourself yet, as a lot of the stuff on that list will be harmless or required.

Cheers

Liam
 

Read other 3 answers
RELEVANCY SCORE 36.4

My sister's computer seems to have some sort of virus. It shows a blue screen with "kernel32" and then gets taken over by pop ups. Could anyone please help us???
 

A:kernel32??pop-ups..HELP!!

* Click here to download HJTsetup.exe.
Save HJTsetup.exe to your desktop.

Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
 

Read other 1 answers
RELEVANCY SCORE 36.4

hi, can somebody please help?i have recently been having problems with my pc starting up very slowly,i done an avg virus scan and it says that there had been a change with kernel32.dll,user32.dll,shell32.dll and ntoskrnl.exe i reformatted my pc and installed avg.when i ran a scan there were no problems before i installed anything else i installed windows updates once they were all installed i ran avg virus once again and it found the same changes i rebooted my pc and it was once again very slow starting up.can anybody please help with any advice.many thanks
 

A:kernel32.dll

The changed files are normal. It happens when you update certain parts of Windows and when the system repairs files.
 

Read other 3 answers
RELEVANCY SCORE 36.4

whats up whith this file,i am starting to get a lot of illigal operations with this little devil.any fixes for him,i run win 98 first edition[have all the windows updates]on a p2 300 128 ram.
 

A:kernel32.dll

It's the windows memory manager. You will need to post exact error messages to trouble shoot.
 

Read other 3 answers
RELEVANCY SCORE 36.4

My computer keeps throwing a KERNEL32.DLL error on random web pages and knocks me off line.

Does anyone have any ideas on how to fix this?
 

A:kernel32.dll

Try running a scan for spyware, which is one of the most common causes. Ad-aware will both detect and remove them. Read the 'getting started" and FAQ pages before running it and know how to restore from the backup it creates if necessary.

http://www.lavasoftusa.com/

Have you run an updated antivirus scan? If you don't have a scanner you can do an online one here:

http://housecall.antivirus.com/pc_housecall/

If Ad-Aware doesn't resolve the problem for you, click the "details" tab of the error messages and post the modules and addresses here.
 

Read other 2 answers
RELEVANCY SCORE 36.4

Hi I need some help
all of a sudden today my desktop changed into an html file that Says System Stopped in a black box with a horrible bright blue font in the background.
In my Systems folder I have a kernels32.exe that I imagine is the problem.
Also my Task Manager (Ctrl-Alt-Del is not working it says my administrator has blocked it)
Besides this I also keep getting a Spy Ware Cleaner some sort of program that installs itself and I keep uninstalling it and everytime I restart it pops up again. Also my Norton Antivirus detects no virus when I run a full system scan, but when I restart it pops up and finds tons of them automatically , I'm assuming these virus/trojans or whatever pop up after a program initiates them. I've downloaded the Hijack program in hopes someone can help me. I'm very good with computers and have never had a problem before, but after trying with msconfig, regedit, and safe mode I have had no success please if someone can help me would be great.

Logfile of HijackThis v1.99.1
Scan saved at 1:45:17 PM, on 6/19/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:... Read more

A:need some help with kernel32.exe and other

Hello alvarowong and Welcome to TSF it looks as though you have been hijacked. I'm not an expert at this so I will direct you here http://www.techsupportforum.com/showthread.php?t=15968 and follow instructions carefully. Good Luck!!

Read other 1 answers
RELEVANCY SCORE 36.4

I am trying to activate a linksys wireless printer and I keep receiving this error message and have no idea what to do. Any help would be appreciated.

"The procedure entry point SUnMapLS_IP_EBP_40 could not be located in the dynamic link library kernel32.dll"
Help!!!
 

A:Kernel32.dll

are you sure your computer contains the requirements of the wireless printer?

kernel32.dll is probably not the problem... I would uninstall and disconnect whatever you have loaded; recycle your computer on and off to clear.. then reconnect and reinstall software.
 

Read other 1 answers
RELEVANCY SCORE 36.4

can someone plese tell me waht KERNEL32.DLL. is, i keep gettin it in an error:

Explorer
Explorer has caused an error in KERNEL32.DLL.
Explorer will now close

if you continue to experience problem,
try restarting your computer
 

A:Kernel32.dll.

What o\s ?

What is the EXACT error message ?

http://www.generation.net/~hleboeuf/errexplo.htm#ERRKERNEL32.DLL

steam
 

Read other 3 answers
RELEVANCY SCORE 36.4

For some reason anything that I try to download or sometimes even run won't work. It comes up with this error message:

The procedure entry point EncodePointer could not be located in the dynamic link library KERNEL32.dll

Worried I may have built my computer wrong? (Building up my computer from bits and bobs )

Using Windows XP

Any help will be much appreciated. Thanks
 

A:Kernel32.dll

Oops, windows Xp pro (will that change anything?!?!)
 

Read other 3 answers
RELEVANCY SCORE 36

kernel32.ddl in internet explorer
hi guys,
i had sum spyware lately and deleted in by using adaware spyware, avg, spybot so on so on
anyway i managed to get rid of my viruses but i get this error? how can i fix it?





thank u guys

A:famous kernel32.dll

Hi and welcome to TSF

With your XP CD in a drive try typing sfc /scannow (the space after sfc is essential) in the Start>Run box and hit Enter - allow the file checker to run its course.

Please post again if this doesn't help.

Peter

Read other 1 answers
RELEVANCY SCORE 36

I keep getting errors everytime I try to open my scanner. Sometimes I'm just playing around not using a specific program and these errors will come up. Here are some examples. They are always with these 2 dll files. HELP ME PLEASE! -Tina-

ATTNDSM caused an invalid page fault in
module MFC42.DLL at 0167:5f4b39f4.
Registers:
EAX=ffffe100 CS=0167 EIP=5f4b39f4 EFLGS=00010282
EBX=00000000 SS=016f ESP=0196fe80 EBP=0196fef4
ECX=00c824f0 DS=016f ESI=0064fb88 FS=4f9f
EDX=80008e80 ES=016f EDI=0000afc8 GS=0000
Bytes at CS:EIP:
00 00 00 00 d8 71 4d 5f 02 00 00 00 00 00 00 00
Stack dump:
70012a4d 00000001 70010ddc 70032538 7000817b 0064f7fc 00c82d90 0000006c 66666670 39653937 696b3a64 65006c6c 00000000 0000006c 00000000 bff741f7
ATTNDSM caused an invalid page fault in
module KERNEL32.DLL at 0167:bff7436e.
Registers:
EAX=ffffffff CS=0167 EIP=bff7436e EFLGS=00010286
EBX=700329ac SS=016f ESP=0196fb9c EBP=0196fbc0
ECX=fffffff4 DS=016f ESI=00489ff4 FS=4f9f
EDX=00000011 ES=016f EDI=00489fe8 GS=0000
Bytes at CS:EIP:
0f c1 01 48 c2 04 00 83 01 00 6a ff 51 68 59 00
Stack dump:
5f4018f4 fffffff4 00489fe8 5f44892f 00c824f0 00489fe8 0196fbd4 5f4991d8 00000001 0196fbe0 5f4488ce 00000000 00c824f0 00c824f0 0196fe28 5f4991b8
 

Read other answers
RELEVANCY SCORE 36

Help me guys...DESPERATE!!!

I'm trying to install a program but it can't install...I've been getting this message bout some "...procedure entry point....could not be located in the dynamic link library KERNEL32.dll"

Plz help me..I dunno what to do next....

A:XP messing up with Kernel32.dll

Hello Nyde Viper


Use the System File Checker tool to scan your computer for corrupted files:
Click Start, and then click Run. In the Open box, type sfc /scannow
and then click OK.
You may be prompted to use the Windows XP installation disk.
Note the space between the c and /

Read other 5 answers
RELEVANCY SCORE 36

I have been trying to load an old game for my husband, Starfleet Command, and I have been getting an error message stating "The procedure entry point SUnMapLS_IP_EBP_20 could not be located in the dynamic link library KERNEL32.dll"

If someone could guide me to a fix for the problem I would be appreciative. The program's maker Interplay is no longer offering tech support.


thanks

A:Kernel32.dll error

Let's move this to the games section ... it will get better exposure there.

Read other 3 answers
RELEVANCY SCORE 36

when I try to open win movie maker and video explosion, both editing programs, i get error that windows has encountered a problem and the program will be shut down...in tech details of the error report that is sent to microsoft it says: Modname kernel32.dll
it only happens with these 2 programs...any advice??

Read other answers
RELEVANCY SCORE 36

got a problem, i run a program called Leaguepad, it crashes during the start-up
I've read somewhere that i need a new copy of Kernel32.dll i downloaded one but cannot replace it in any sort of mode

Leaguepad Error:
Leaguepad-
Run-time error '-2147024769 (8007007f)'
Automation error:
The Specified Procedure could not be foundClick to expand...

Microsoft Report:
AppName: leaguepad.exe
Appver: 4.0.0.4
ModName: Kernel32.dll
ModVer: 5.1.2600.0
Offset: 0000d756Click to expand...

any ideas??

Thanks

Ste
 

A:Replace Kernel32.dll

You cannot replace system files readily in XP, they are protected by System File Protection.

I don't know what the real problem is, but there are TWO different versions of kernel32.dll in XP, the second, and larger version is for XP SP2

SP2: 5.1.2600.2180

Prior: 5.1.2600.0

Which version of Windows do you have?
 

Read other 2 answers
RELEVANCY SCORE 36

Oh my god. Look at Process information of kernel32.exe If you think that is weird keep reading. It says it is part of Windows, does that mean every windows machine is a living virus? Is there a way to break kernel32.exe away from windows? Or keep it there? This is quite weird to me, I would never expect a required dll to be a virus. But, you never know...and anyway what is a a kernel? Why are they important anyway?
 

A:Kernel32.exe a virus?

Many Virii try to mimic a valid file - that can be valid and can be a virus

Why do you ask
 

Read other 3 answers
RELEVANCY SCORE 36

I keep getting a kernel32.dll error when using AIM. I have uninstalled and reinstalled a few times after clearing all folders and files related to AIM. The program loads fine but when I click on a username to message someone, I get the error report. What can I do?

A:kernel32.dll error

AOL's recommendations are:
http://www.aol.com/support/index.adp...nnect&page=078

Read other 1 answers
RELEVANCY SCORE 36

I tried to access my Word200o program yesterday and my PC said resources dangerously low and locked up. I tried uninstalling some unnecessary software with no help. Today I reinstalled Word and I get the error message: "The wkfud.exe file is linked to missing export kernel32.dll: Get CommndLicneW." The kernel file is still under my windows/system file, but don't know what to do next?
I can access all my other software programs, but not Word. Any ideas?
Mariboo
 

Read other answers
RELEVANCY SCORE 36

Can you help me get the KERNEL32 back in it's right place? This is the messege that popped up on the desktop on Windows 2000 OS:

Dark.exe – Unable to Locate DLL

The dynamic link library KERNEL32 could not be found in the specified path
C:\WINNT\system32\gkjprnpshi;.;C:\WINNT\system32;C:\WINNT\system;C\WINNT;C:WINNT\system32;C:\WINNT;C:\WINNT\System32\Wbem.
 

A:Solved: KERNEL32 DLL fix

Read other 16 answers
RELEVANCY SCORE 36

Trying to dowload Yahoo MSGR.

Receive the following error msg.

"Could not load the DLL library c:\Windows\System\Kernel32.DLL
An attempt was made to load a program with an incorrect error"

next error msg box read " One of the library files needed to run this application could not be found"

I am using Windows 98 SE 4.10.2222 and i am only cable hookup.

Any help will be most welcome!!

Many thanks.!!!!
 

A:Fix for Kernel32.DLL error msg.

Hi, I think you might try another download...first-
if the same thing happens, see below:
I am NOT sure if this will allow Yahoo to install, but it helps with programs that are written in certain computer languages that your system cannot understand...newer programming...

Here are the two downloads that may help you:

http://www.javacoolsoftware.com/downloadfaq.html

We have people over in Security forum install these downloads to be able to install SpywareBlaster, SpyBot Search and Destroy....who knows, they may be what is stopping your installation? It's down at the bottom----
the two missing file installers. Good luck! They will NOT harm anything.

This link has explanations and other places to download the files:
See the post by Primrose there.
http://www.wilderssecurity.com/archive/index.php/t-8014.html

There is a lot of information about messenger here:
http://www.wackyb.co.nz/menu/Yahoo_Beta/
 

Read other 3 answers
RELEVANCY SCORE 36

Sygate Personal Firewall keeps telling me "Kernel32" was blocked from accessing the internet. It tells me about every 20 minutes, how do I shut it up?!
 

A:Sygate, Kernel32

Read other 9 answers
RELEVANCY SCORE 36

Hi, Whenever i sign on to AIM and try to instant message someone or recieve and instant message, i get signed off and the program is ended. An error has occurred appears and when i click more info, the error has to do with kernel32.dll. When i click more info this appears...

AppName: aim.exe AppVer: 5.9.3702.0 ModName: kernel32.dll
ModVer: 5.1.2600.1106 Offset: 00016b97

and when i click on more info, this appears as part of the error report

C:\DOCUME~1\home\LOCALS~1\Temp\WER1CD.tmp.dir00\appcompat.txt

I don't know what the problem could possibly be since I've uninstalled Aim and reinstalled it and the problem is still there. The error always has shown up on aim since the first time that it occurred about a week ago. It hasn't shown up on any other programs except for one time on MSN. Besides that it hasn't shown up anywhere else besides AIM.
 

Read other answers
RELEVANCY SCORE 36

I did all 5 steps required in the sticky post at the top of this forum. Reason being that my computer was running very sluggish. It's now running much, much better. Thx to whomever was the author of that post.

Unfortunately I didn't realize that the Panda online virus scan has nasty viruses associated with it. I noticed that it started downloading files to my machine like kernel.exe and ascontrol.dll just to mention a couple. I got suspicious and stopped the scan. Then I did a google search on these suspected files. Both of them are considered bad news. Can't imagine why Panda allows this to happen and/or why they don't at least put up warning.

Anyway, I've included my hijackthis log. As follows:

--------------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 1:10:07 PM, on 9/1/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C... Read more

A:kernel32.exe and ascontrol.dll

Bump

Read other 1 answers
RELEVANCY SCORE 36

how can i terminate this error??because of this error i am unable to install TweakUI.
thanks
 

A:KERNEL32.dll Error??!

and also this message is appeare:"The produce entry point GetllDirectoryW could not be located in the dynamic link library KERNEL32.dll."
 

Read other 1 answers
RELEVANCY SCORE 36

Well when I log onto AIM it works fine for alittle awhile. A few minutes after I log on an error with Kernel32.dll pops up and AIM shuts down. I've tried to uninstall and reinstall AIM but it hasn't worked. I need help.

I've seen other people post this with other Dll error so i hope this helps:
Logfile of HijackThis v1.99.1
Scan saved at 7:51:16 PM, on 2/28/2006
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\MDM.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\WINDOWS\SYSTEM32\DRIVERS\KODAKCCS.EXE
C:\PROGRAM FILES\WINANTIVIRUS PRO 2006\FWSVC.EXE
C:\PROGRAM FILES\WINANTIVIRUS PRO 2006\WINAV.EXE
C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\CALLWAVE\IAM.EXE
C:\PROGRAM FILES\KODAK\KODAK EASYSHARE SOFTWARE\BIN\EASYSHARE.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C... Read more

A:KERNEL32.DLL Error with AIM

Read other 6 answers
RELEVANCY SCORE 36

Whenever I try to start up an up, such as MSN Messenger, Xfire, Worms World Party, I always get this error :

The procedure entry point Makecriticalsectionglobal could not be found in the dynamic link library Kernel32.dll

I've tried :

1) Going to dll-files.com to replace my dll, didn't work
2) Going to dlldump.com to replace my dll, didn't work again.
3) Replace from my own dll cache, and didn't work.

It's really annoying, can someone help me?

A:Kernel32.dll Prob

This error explains a problem with accessing kernel32.dll. It could be a problem with that dll, or it could be a problem with the way that another program tries to access the Makecriticalsectionglobal entry point.The most common cures for this "generic" error (we'd need more info to pin it down) are:1) Scan your system for malware ( free at http://safety.live.com/ )2) Visit Windows Update and obtain all the latest updates3) Update your motherboard/chipset drivers4) Update your video card driver5) Ensure that you Direct X is updated ( http://www.microsoft.com/downloads/details...6a-9b6652cd92a3 )

Read other 13 answers
RELEVANCY SCORE 36

First and foremost: Sorry if this sounds jumbled.

So, I play a game called Horizons, Empire of Istaria, which just so happens to not be "Vista Compatible." It requires net framework 1, and vista has framework 3. I followed some installation steps through their website:
http://support.istaria.com/support-c...mod_id=2&id=37

And got it to work eventually. Now, as of today, the game has stopped working. It loads its patcher and then I get a "End program" window displaying this message:
Problem Event Name: APPCRASH
Application Name: horizons.exe
Application Version: 0.0.0.0
Application Timestamp: 44a31023
Fault Module Name: kernel32.dll
Fault Module Version: 6.0.6000.16386
Fault Module Timestamp: 4549bd80
Exception Code: c0000005
Exception Offset: 00047369
OS Version: 6.0.6000.2.0.0.768.3
Locale ID: 1033
Additional Information 1: cf58
Additional Information 2: c7028b6e50da49b2b2ad57bc3b02444f
Additional Information 3: b30a
Additional Information 4: e85a8bb0e8f400f3158fc20ee62b094d

I've contacted Toshiba and windows and followed their recovery steps, with no success. I then REFORMATTED my computer and re-downloaded the game, to still get errors. Is there any way to fix this and get rid of the errors?

A:APPCRASH kernel32.dll

Quote:





Originally Posted by MaxMackey


First and foremost: Sorry if this sounds jumbled.

So, I play a game called Horizons, Empire of Istaria, which just so happens to not be "Vista Compatible." It requires net framework 1, and vista has framework 3. I followed some installation steps through their website:
http://support.istaria.com/support-c...mod_id=2&id=37

And got it to work eventually. Now, as of today, the game has stopped working. It loads its patcher and then I get a "End program" window displaying this message:
Problem Event Name: APPCRASH
Application Name: horizons.exe
Application Version: 0.0.0.0
Application Timestamp: 44a31023
Fault Module Name: kernel32.dll
Fault Module Version: 6.0.6000.16386
Fault Module Timestamp: 4549bd80
Exception Code: c0000005
Exception Offset: 00047369
OS Version: 6.0.6000.2.0.0.768.3
Locale ID: 1033
Additional Information 1: cf58
Additional Information 2: c7028b6e50da49b2b2ad57bc3b02444f
Additional Information 3: b30a
Additional Information 4: e85a8bb0e8f400f3158fc20ee62b094d

I've contacted Toshiba and windows and followed their recovery steps, with no success. I then REFORMATTED my computer and re-downloaded the game, to still get errors. Is there any way to fix this and get rid of the errors?







Hello and Welcome to the Tech Support Forum.

I followed the link that you provided in your post.... Read more

Read other 2 answers