Infected Kernel.dll

[Guest]

I got a message that show me the kernal.dll is infected from a virus scan
software, Symantec, prior doing installation, then the Symantec asked me
whether I wanted to fix it or not; however, no matter I selected yes or no,
it didn't really fix the problem, because anytime after, if I scan it, the
message will show again. Thus I don't know if I can kill the kernel.dll in
the directory of C:\WINNT\system. Otherwise, the symantec is not capable of
fixing it. The OS is a Chinese version of Windows 2000 professional. Thank
you!

 

[George Hester]

Look at the Properties and Version tab. If it shows Microsoft holds the copyright then do this. whoops I don't have a kernel.dll. I do have a kernel32.dll. You need to check here in the Run keys:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

and make sure kernel is not being called there. Also check your services here:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services subkeys. Looking for an ImagePath that points to kernel.dll. Don't remove anything here until we are sure that the kernel.dll is bogus:

http://computercops.biz/startuplist-1769.html

 

[Guest]

Thank you, George!
Let me check and tell you result later.
I didn't find the kernel.dll on any one else Windows 2000 compaters either.
Before ensurring it isn't a file I need, I will keep it. Thank you!