C:\Windows\System32\kernels64.exe Startup Error

Question

After removing the Spy Sheriff malware, I now have this error at my startup everytime: C:\Windows\System32\kernels64.exe cannot be found.  I know this file is apart of the spyware virus thing, but what do I run to turn off the program that can't be found from the startup, so the message stops appearing.   Thanks.

ky331 · Answer

if you're familiar with using MSConfig [or have another startup manager (such as WinPatrol)], you might be able to fix things from there. otherwise:

Download a self-extracting copy of the latest version of HJT (HiJackThis) (version 1.99.1) from

http://downloads.malwareremoval.com/hijackthis_sfx.exe

Save it to your Desktop.

Double-click on the file hijackthis_sfx.exe file, and allow it to self-extract [by clicking on UnZip] into the suggested/default folder,

C:\Program Files\HijackThis

Use Windows Explorer to navigate your way into this folder, and then double click on HiJackThis. exe

Click on Do a System Scan and Save a LogFile

This will automatically open NotePad

Copy the entire file from NotePad: EDIT/SelectAll, EDIT/Copy

Then go to the new forum dedicated for HiJack This logs (**NOT** back here), and PASTE the results there:

http://forums.us.dell.com/supportforums/board?board.id=si_hijack

Be sure to include a detailed description of any problems/errors/warnings you are encountering.

Hopefully, one of the HJT experts will get to it as quickly as possible.

WARNING: HiJack This is a VERY POWERFUL tool. While it's completely safe for you to download, generate, and post your log (as described above), you should *NOT* attempt to do anything else (in particular, do NOT use it to delete/fix any entries) until you are advised to do so by a forum expert!! Improper use of this tool can severely damage your system.

venu_sandy · Answer

Give the Error a Break ...just open msconfig.exe in run and go to startup and unselect the entry with the name Kernels64.exe...then open regedit HKLM/software/microsoft/windows/profile/run and rmove the start up entries............it will die....in order to remove the virus...just CTRL+ALT+DEL then end the kernels64.exe...then go to \windows\system32\kernels64.exe remove it..i mean shift+del....even thought u go through this procedure ....they still consume ur bandwith

shellbell1971 · Answer

I had the exact same thing happen!  I am at wits end and need help!  This computer has occupied too much of my time and I need it fixed!!!  HELP!!! Message Edited by shellbell1971 on 01-28-2006 08:13 PM

Virus & Spyware

Was this post helpful?