If your system's been compromised to that degree, you should either do a clean install or return to factory settings. If that's not possible, you should find a reputable tech to take care of it.
Be sure to change all passwords.
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
So my husbands computer was recently hacked. We tried malware bytes, hitmanpro, TDSSkiller etc etc. when we finally found an antivirus that worked the computer turned off in the process of scanning and when it rebooted it came up with an error saying "ctfmon.exe error" something like that. The computer screen went black and wouldn't come back after startup. We were able to log in with password but after that black screen. We turned it off and went into command prompt and found out we have a missing file "kernel123.dll" which I know is very important to the computer.
We tried /verifyfile=c:/windows/system32/kernel32.dll to check if the file is corrupt or damaged and nothing happened. We tried sfc\Scanfile=d:/windows/system32/kernel123.dll nothing happens. Nothing works is there any way to fix this? Is there any way to recover that file without going back to factory settings? Because we are still concerned that the malware is still on the computer and turning it back to factory settings will crash it even more than it is :( any help or advice helps thanks!
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
If your system's been compromised to that degree, you should either do a clean install or return to factory settings. If that's not possible, you should find a reputable tech to take care of it.
Be sure to change all passwords.
This describes what Kernel32.dll does.
Answer-by-number:
5. Has hubby run the Norton Removal Tool and/or the McAfee Consumer Products Removal Tool?
...
We tried "System Repair" but it came up with an error that we didn't have permission. The hacker took all access of his computer and shut down all of his access we had tried restoring admin ship to my husband but the hacker blocked it all off everything was grayed out. We are now trying "startup repair" and right now it says it is "scanning and repairing partisan drives" it just ended the scan and took about 5min...he tried logging back in and it says "ctfmon.exe - system error" exception processing message 0xc0000005 parameters 0x7ffa9d1d1728 0x7ffa9d1d1728 0x7ffa9d1d1728
:(