Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Ernell32.dll Virus


  • This topic is locked This topic is locked
2 replies to this topic

#1 Radu182

Radu182

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:02:14 PM

Posted 03 August 2010 - 07:30 PM

Well, I have the 'ernell32.dll' virus.
The symptoms are the same as in this topic: http://www.bleepingcomputer.com/forums/t/332434/ernel32dll-infection-ran-dr-web-twice-but-it-stops-halfway/
I followed your preparation guide and I've attached the logs required.
Thanks in advance for your help. smile.gif

Attached Files



BC AdBot (Login to Remove)

 


#2 Radu182

Radu182
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:02:14 PM

Posted 05 August 2010 - 08:21 AM

Update: Virus/Malware Removed! cool.gif

Programs Used (In Order)
  • AdwareAway Antimalware
  • SUPERAntiSpyware Free Edition
  • ComboFix (Professional assistance recommended before use)
Registry Keys (Manually Removed)
CODE
{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}.reg
{9CEE304E-DC6C-11D2-B561-00A0C92E6848}.reg
{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}.reg
PCIDump.reg
PDCOMP.reg
PDFRAME.reg
PDRELI.reg
PDRFRAME.reg
URLSearchHooks.reg

Note: If anyone encounters a similar problem to mine just use the programs I listed above and make sure the registry keys posted are not present on your computer. Remember to always backup your registry before deleting anything!

#3 Budapest

Budapest

    Bleepin' Cynic


  • Moderator
  • 23,573 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:14 AM

Posted 05 August 2010 - 05:19 PM

As this issue appears to be resolved I am closing the topic. Please send me (or any other Moderator) a Personal Message (PM) if you would like the topic re-opened.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users