Author Topic: VBS: Redlof  (Read 5854 times)

0 Members and 1 Guest are viewing this topic.

norb

  • Guest
VBS: Redlof
« on: February 29, 2004, 04:22:46 AM »
Hi,

Avast has caught this virus in my windows\system\kernel.dll file.  Repair option doesn't work and I'm hesitant to delete such a systems file.  Could anyone give advice if I could go ahead and attempt to delete the infected kernel.dll file or if not, what other action to take?  I'm running 98SE.

Thanks in advance.

MoonlightKnight

  • Guest
Re:VBS: Redlof
« Reply #1 on: February 29, 2004, 05:52:51 AM »
You don't want to delete the .dll.  You need to find a clean kernel.dll to replace the infected one.  Then change back any registry information that was changed by the virus.

Look here

http://securityresponse.symantec.com/avcenter/venc/data/vbs.redlof.a.html

Summoner Yuna

  • Guest
Re:VBS: Redlof
« Reply #2 on: March 01, 2004, 02:29:54 AM »
the .dll file should be located in one of the .cab files on the windows 98 setup CD

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11867
    • AVAST Software
Re:VBS: Redlof
« Reply #3 on: March 01, 2004, 09:55:38 AM »
There is no such file as kernel.dll in Windows installation, this file can be simply deleted.
The true Windows kernel is called kernel32.dll.

Summoner Yuna

  • Guest
Re:VBS: Redlof
« Reply #4 on: March 01, 2004, 04:30:51 PM »
Quote
The true Windows kernel is called kernel32.dll
Oh thank you for correcting me igor

norb

  • Guest
Re:VBS: Redlof
« Reply #5 on: March 02, 2004, 03:34:22 AM »
 Thanks to everyone and especially to Igor!  I've deleted the "fake" kernel.dll file and am back on track.  

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9408
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re:VBS: Redlof
« Reply #6 on: March 02, 2004, 07:07:40 AM »
There is also kernel.dll and its not a virus/worm by itself.
Check it with RAV Online or Kaspersky Single file check on www.security-ops.tk

Kernel.dll info:
DLL File: kernel or kernel.dll
DLL Name: Windows NT BASE API Client DLL (16 Bit)
Description: File that contains Windows API functions used by all Windows applications.
Part Of: Windows
System DLL: Yes
Common Errors: File Not Found, Missing File, Exception Errors

EDIT:
norb,you just deleted system file. You can download new one here ;) :
http://www.dll-files.com/dllindex/dll-files.shtml?kernel
« Last Edit: March 02, 2004, 07:08:49 AM by RejZoR »
Visit my webpage Angry Sheep Blog

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11867
    • AVAST Software
Re:VBS: Redlof
« Reply #7 on: March 02, 2004, 09:57:56 AM »
RejZor: I don't know what that kernel.dll file from dll-files.com is - but it is certainly not a system file. It was not done by Microsoft, and it is not a Windows NT BASE API Client.

Maybe there can be a kernel.dll file on Windows 3.x, I don't remember - but there is no such file on Windows 98 SE (as well as on newer systems).