Re: error message on startup 'windows can't find

BC Ellis wrote:

> I have noticed two problems in the last couple of days:
>
> 1. I get the following error message on startup "Windows can't find
> C:/windows/sys32/kernels64.exe. Make sure......" This happens on all
> three profiles set up on XP Professional.
>
> 2. I found my Daughter's desktop had a message that stated something
> like :
> Warning Spyware Detected. I could not get rid of it or change her
> desktop. I ran the MS Beta Antispyware, Spybot and my Symantec scan-
> probably overkill
> but wanted to see if any of them would correct the problem. They did
> not get
> rid of the problem so I deleted her profile. No other profiles have
> this problem.
>
You've got some nasties on that machine. The kernels64.exe is connected
with the evil Spy Sheriff malware, which is why you have the desktop
warning.

First run noahdfear's removal tool:

noahdfear's SmitFraud and SpyAxe removal tool -
http://noahdfear.geekstogo.com/click%20counter/click.php?id=8
References - http://www.bleepingcomputer.com/forums/topic36868.html
http://malwareremoval.com/plog/index.php?op=ViewArticle&articleId=48&blogId=3

Follow this by running Dave Lipman's removal tool -
Download from http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Dave's Instructions:
Execute SmitFraud.exe (Note: You must accept the default of C:\McAfee)
Choose Unzip
Choose Close

NOTE: You may have to disable your software firewall or allow WGET.EXE
to go through your firewall to enable WGET.EXE to download the needed
McAfee-related files.

Execute c:\mcafee\clean.bat (or Double-click on 'Clean Link' in c
\mcafee)

A final report in HTML format called C:\mcafee\ScanReport.HTML will be
generated. At the end of the scan, it will be displayed in your browser
(Opera, FireFox or Internet Explorer). It is suggested that you move
the report out of c:\mcafee before performing another scan.

Then continue with general malware removal -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

If this all seems daunting - and there is no shame in admitting that -
take the machine to a professional computer repair shop (not your local
version of BigStoreUSA).

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
.

Relevant Pages

  • Re: Remote Procedure Call (RPC) Service
    ... >W32.Blaster.Worm Removal Tool ... >> Windows must now restart because the Remote Procedure ... >> Windows XP Pro. ... Any advice on this error message or ...
    (microsoft.public.windowsxp.general)
  • 2 big problems!!
    ... Where do i find the MS anti-spyware / removal tool.? ... > Windows Vista - Offline Files / CSC Feature ... > 1 exsample of a error message. ...
    (microsoft.public.windowsxp.hardware)
  • Re: nt error
    ... sure you've enabled a firewall before starting, ... W32.Blaster.Worm Removal Tool ... > installed sbc global software I get an error message that ... > states "Windows NT authorization error - windows is shut ...
    (microsoft.public.windowsxp.security_admin)
  • Re: lsass.exe
    ... Which error message is it? ... W32.Sasser Removal Tool Right hand side) ... You Cannot Log On to Windows XP After Running the Out-of-Box Experience ... My friend Gabe having problem with lsass.exe after upgrade ...
    (microsoft.public.windowsxp.general)
  • Cant find C:windowsuserint32.exe
    ... Win XP...4 users / profiles ... Each time one of us "logs on", ... "Windows cannot find C:\WINDOWS\userint32.exe" ... How do I correct the problem / eliminate the error message? ...
    (microsoft.public.windowsxp.general)
Quantcast