BLocked Startup event

[Matias Reis]

Hi,

By mistake I blocked the startup file kernels32.exe

Now I want to unblock it, how do I do this??

Heres the log event:
" The user ..., has decided to block the startup file
c:\windows\system32\kernels32.exe from being added to the
Windows startup registry
(HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVers
ion\Run)."

Can anyone help me with this?

Thank you.

 

[Engel]

Go to Tools > Realtime Protection > View All Blocked
Events to see if its blºcked there.

 

[Matias Reis]

I've gone there, but is is not in there!!

What can I do now??

Thanks

 

[Robin Walker [MVP]]

By mistake I blocked the startup file kernels32.exe
Now I want to unblock it, how do I do this??

You do not want to unblock kernels32.exe - it is trojan malware.

MSAS was right in the first place to block it.

You probably have other malware in your system as well which is making it
behave badly.

But do NOT re-enable kernels32.exe!

 

[Drew T]

Matias,

Navigate to the registry location you mentioned,
(HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run),
-inside the right pane, right-click & select 'New' > click 'String Value' >
name the new key to your liking > now double-click your newly named key >
type in or Copy & Paste the path c:\windows\system32\kernels32.exe > exit
regedit > reboot
-Whenever your asked by Microsoft Antispyware to add the key, accept. See if
that works. Good Luck.
Drew

 

[Bill Sanderson]

Why would anyone want to intentionally add a trojan to their run keys?

--