remove ernel32.dll TR/Crypt.XPACK.Gen

Acer Aspire 3500
June 24, 2010 at 19:24:44
Specs: Windows XP, 60GB HDD 512MB DDR
Can you help how do I remove Trojan TR/Crypt.XPACK.Gen and ernel32.dll
located at c:\WINDOWS\system32\ernel32.dll
I am running windows XP
I also have problems with Luke Firewalker Avira Antivr Personal it no longer down loads updates

See More: remove ernel32.dll TR/Crypt.XPACK.Gen

June 24, 2010 at 20:02:54
Sure, use something like the Windows Task Manager, or Micro$oft's Process Explorer (formerly Winternals) to kill any alien processes/tasks. For example, in the following screenshot, all processes are legit:

Then, check how the trojan/virus is being launched. Check the Startup tab of MSConfig..

& check that it isn't being loaded as a Service. Access Services from Control Panel, Administrative Tools, Services, or from the Start Menu, Run... services.msc

Also, in extreme cases the trojan/virus is executed from the Windows Registry (and/or also). You can scan the Registry for its name (listed in the Services, or the Startup programs location), by using Regedit, or you can use a utility like Autoruns which is actually really neat. :)

All that's left for you to do now, is delete the actual files from the Hard Drive. This can be done manually and also by some utilities, like the Unlocker and/or Malwarebytes FileASSASSIN

If you're unlucky and the trojan/virus keeps returning, you will have to do one, or both of these things before repeating the procedures from above:

1. Control Panel, System, System Restore, Turn off System Restore
2. Disable WFP (Windows File Protection), for sophisticated virii, which can be achieved with the free trial of XPlite and 2000lite..

There are also automated removers, like the McAfee Stinger:

Report •
Related Solutions

Ask Question