kernal32.exe malware

Goose · 6 Mar 2009 at 16:39

I somehow have managed to get certain malware infected on my PC. Its called kernel32.exe and is apparently something related to IRC (which i dont have installed).

Does anyone know the best way rid myself of this short of formatting my HD?

Many thanks

Ucof · 6 Mar 2009 at 16:44

www.spybot.com

Try giving it a blast of Spybot.

Goose · 6 Mar 2009 at 16:48

I've been doing a spybot scan for the last few minutes and so far its found nothing. I dont know if thats because i closed the two instances of kernel32.exe that were running through task manager.

According to some other site kernel32.exe is a floodnet virus. I'm thinking i might just format my PC to be on the safe side.

Ucof · 6 Mar 2009 at 16:53

Let Spybot do a full update, then disconnect from internet, reboot and then scan.

Let us know how you get on

Goose · 6 Mar 2009 at 17:23

I deleted all the registry entries pertaining to kernel32.exe manually and then I did as you instructed, Ucof.

Neither spybot or nod32 have found anything.

I'm still leaning towards wiping my HD and reinstalling Vista though. Im super paranoid about viruses and such.

Defenestration · 6 Mar 2009 at 18:37

You could try Prevx Edge (http://www.prevx.com/prevxedge.asp) to see if it detects anything. You will need to be connected to the Internet as Prevx analyzes remotely on Prevx's servers, as it uses a community based approach. The trial can't block malware, but will alert you to it's presence, if there is any.

Defenestration · 6 Mar 2009 at 18:38

You could also try some of the on-line virus/malware scanners, like kaspersky http://www.kaspersky.co.uk/virusscanner

Ratbag · 6 Mar 2009 at 19:22

Try Malwarebytes and superantispyware.

Goose · 6 Mar 2009 at 19:30

I've run malwarebytes aswell and it found nothing. I dont know if i'm being overly paranoid by wanting to format my HD.

SimonC · 6 Mar 2009 at 21:31

Did you run superantispyware? I've found that picks up stuff that malwarebytes sometimes doesn't.

Goose · 6 Mar 2009 at 23:43

I'll give that a go too, cheers.