Advertisement

10.11.2005 at 11:31AM PDT, ID: 21591363
[x]
Attachment Details
[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

Kernels32.exe trojan disabled task manager?

Tags: manager, task, disabled
Hello,
     I am pretty sure my computer has a trojan downloader virus on it.  Yesterday a Zone Alarm window popped up asking me if I wanted to allow a program called Kernels32.exe to access the internet.
     I did not allow it access because I've never seen that program before.  When I attempted to open my task manager to see what processes were running, a message window popped up saying: Task Manager has been disabled by your administrator.  So I can't get my task manager open.  I even went straight to the task manager program file and clicked it but it still won't open.
     I am the administrator so I don't know why its saying I disabled task manager: I didn't.  I am the only person who's ever used this pc: no one else uses it.  I don't even know how to disable the task manager.
     I made another account and gave that account administrator rights also and WAS able to bring up the task manager using that account only.
     I also found the program called Kernels32.exe and deleted it.  It would not allow me to delete it while on my original account but I was able to delete it while on the new account I created in order to open task manager.
     I believe the Kernels32.exe is gone now but I still can't get into my task manager to be certain of the processes running.
     Also, my McAfee antivirus will not enable virus scan and I don't know if the trojan/virus did this.
  Also a window pops up randomly that says: Cannot find 'C:\WINDOWS\System32\kernels32.exe'. Make sure you typed the name correctly, and then try again.  To search for a file click the Start button, and then click Search.      
     This window has an OK button to click also.   I am not sure but I don't think this is a real Windows Xp window because normally I can't use mouse to drag around a real Windows XP window and a real window makes an error tone until I click OK button.  This one I can drag anywhere and it stays on my screen with no error sound.
     I'm writing this letter here on notepad so that when I do connect to internet I won't be online very long....I'll copy and paste.  I'm very afraid the Trojan might still be on here.
     Searching my computer I found some very suspicious looking notepad logs also: it appears a program was "sniffing for WAB" and "sniffing for OE" and listed my Outlook Express version...that was in the notepad files.  Or maybe this means nothing.  So I need to know how I can run my task manager without using the new account (all my info is on the old one).  How do I enable the task manager?   And how to be sure this trojan is really gone please?
     I also removed kernels32.exe from the startup because it had even put itself there so it would start when I reboot.  I hope I've given you enough info to help me.  Just ask if you need more information.  I have windowsXP home edition on a desktop pc and I have McAfee personal firewall, virus scan, and Zone Alarm firewall.  One other thing: when I try to enable my windows firewall for my dsl connection, I can't.  I click the box to checkmark it but it won't enable it.
Thanks for your time and trouble,
Karenina

   
Start your free trial to view this solution
Question Stats
Zone: Security
Question Asked By: Karenina
Solution Provided By: cooljai1
Participating Experts: 3
Solution Grade: A
Views: 550
Translate:
Loading Advertisement...
10.11.2005 at 11:56AM PDT, ID: 15063492

All comments and solutions are available to Premium Service Members only.

Start your 7-day free trial and see for yourself why Experts Exchange is the easiest and most proven technology resource in the world. Get Started

Already a member? Login to view this solution.

 
10.11.2005 at 12:00PM PDT, ID: 15063519

All comments and solutions are available to Premium Service Members only.

Start your 7-day free trial and see for yourself why Experts Exchange is the easiest and most proven technology resource in the world. Get Started

Already a member? Login to view this solution.

 
10.11.2005 at 01:24PM PDT, ID: 15064217

All comments and solutions are available to Premium Service Members only.

Start your 7-day free trial and see for yourself why Experts Exchange is the easiest and most proven technology resource in the world. Get Started

Already a member? Login to view this solution.

 
10.11.2005 at 03:53PM PDT, ID: 15065206

All comments and solutions are available to Premium Service Members only.

Start your 7-day free trial and see for yourself why Experts Exchange is the easiest and most proven technology resource in the world. Get Started

Already a member? Login to view this solution.

 
10.11.2005 at 06:23PM PDT, ID: 15065663

All comments and solutions are available to Premium Service Members only.

Start your 7-day free trial and see for yourself why Experts Exchange is the easiest and most proven technology resource in the world. Get Started

Already a member? Login to view this solution.

 
 
Loading Advertisement...
20080236-EE-VQP-29