can't remove win32:patched-KX[Tn]

Viruses and worms
1

i been reported a virus found in kernel32.dll named win32:patched-KX[Tn] trojan horse.
but i cant remove it using move/rename/delete/move to chest options. only i can do is NO ACTION.
generally it activates if i start a program i.e. browser, notepad etc.

what do i do?

thanx in advance

Farhan

2

Hi Farhan,
Locate the origin of the original file and upload it to www.virustotal.org for an online scan. This will take a few minutes, depending on internet speed and how busy the site is.
Once the file has been scanned, please post the url of the scan result here.

3

Run a boot time scan with general option “yes”
Let us know the result.

4

boot time scan is giving same result:
cannot process “…\kernel32.dll” file

Farhan

5

you should replace file kernel32.dll with the original one from the original CD or from Avast! chest. Deleting critical system file is not good idea… after that system can’t boot anymore.

6

You can also try superantispyware and malawarebytes antimalware a try.

http://www.filehippo.com/download_malwarebytes_anti_malware/

http://www.filehippo.com/download_superantispyware/

good luck.