New User? Need help? Click here to register for free! Registering removes the advertisements.

Computer Cops
image image image image image image image image
Donations
If you found this site helpful, please donate to help keep it online
Don't want to use PayPal? Try our physical address
image
Prime Choice
· Head Lines
· Advisories (All)
· Dnld of the Week!
· CCSP News Ltrs
· Find a Cure!

· Ian T's (AR 24)
· Marcia's (CO8)
· Bill G's (CO12)
· Paul's (AR 5)
· Robin's (AR 2)

· Ian T's Archive
· Marcia's Archive
· Bill G's Archive
· Paul's Archive
· Robin's Archive
image
Security Central
· Home
· Wireless
· Bookmarks
· CLSID
· Columbia
· Community
· Downloads
· Encyclopedia
· Feedback (send)
· Forums
· Gallery
· Giveaways
· HijackThis
· Journal
· Members List
· My Downloads
· PremChat
· Premium
· Private Messages
· Proxomitron
· Quizz
· RegChat
· Reviews
· Google Search
· Sections
· Software
· Statistics
· Stories Archive
· Submit News
· Surveys
· Top
· Topics
· Web Links
· Your Account
image
CCSP Toolkit
· Email Virus Scan
· UDP Port Scanner
· TCP Port Scanner
· Trojan TCP Scan
· Reveal Your IP
· Algorithms
· Whois
· nmap port scanner
· IPs Banned [?]
image
Survey
How much can you give to keep Computer Cops online?

$10 up to $25 per year?
$25 up to $50 per year?
$10 up to $25 per month?
$25 up to $50 per month?
More than $50 per year?
More than $50 per month?
One time only?
Other (please comment)



Results
Polls

Votes: 1170
Comments: 21
image
Translate
English German French
Italian Portuguese Spanish
Chinese Greek Russian
image
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Login to check your private messagesLogin to check your private messages   LoginLogin   Your Favorite ForumsFavForums 

Help : Windows cannot find 'rundll32.exe' and more

 
Post new topic   Reply to topic       Computer Cops Forum Index -> General Security
View previous topic :: View next topic  
Author Message
body_soap

Cadet
Cadet



Joined: May 29, 2004
Posts: 5
Location: Uk

PostPosted: Sat May 29, 2004 12:25 pm    Post subject: Help : Windows cannot find 'rundll32.exe' and more
Reply with quote

Please help me in having serious trouble with windows Xp (who isnt) but something is really screwed up with my system whenever i try to open stuff i always get a damn
Windows cannot find 'whatever i clicked'
This was happening when i try to open shortcuts but even if i go to the source on my hard drive some things still wont open

I am also getting
Windows cannot find 'rundll32.exe'
when i try to open system from the control panel and important windows settings and stuff......dont know whats going on.....i checked that it was there and it was, double clicked it and i got the same Windows cannot find 'rundll32.exe' message even though it is right there???

I'm thinking this must be a virus or something like that and if anyone can help it would be very much appreciated i really dont know what to do
Back to top
View users profile Send private message
archimedes
Warnings : 1

Lieutenant
Lieutenant



Joined: May 21, 2004
Posts: 155
Location: USA

PostPosted: Sat May 29, 2004 3:08 pm    Post subject:
Reply with quote

Hi body soap,
this comes straight from microsoft so lets try this first.
1. Put the Windows XP CD ROM disk in the CD ROM drive.
2. Click Start, and then click Run.
3. Type expand X:\i386\rundll32.ex_ c:\windows\rundll32.exe in the Open box, where X is the letter of your CD ROM Drive.
4. Restart the computer.
try this first.
let me know how it went, and good luck

_________________
best tools:winpatrol, spywareblaster, spywareguard,zone alarm, hijackthis, crapcleaner, Ad-Aware, SpyBotSD, Jet Audio.
Back to top
View users profile Send private message Yahoo Messenger
body_soap

Cadet
Cadet



Joined: May 29, 2004
Posts: 5
Location: Uk

PostPosted: Sun May 30, 2004 8:09 am    Post subject: Ok
Reply with quote

Hi Archimedes

I dont think i have the disk, I've been looking for it and cant find it Mad

But i do have another computer thats working properly and i just copyed the rundll32.exe from that PC and pasted it in the window\system32 folder but nothing changed......still the same Windows cannot find 'rundll32.exe' error message. As i said before in my last post even if i click on it it still brings up an error this time
Windows cannot find 'C:\WINDOWS\system32\rundll.exe' etc....

I also noticed another error message of the same nature when i clicked on those shortcuts on the toolbar (you know the one with the start button) but this time it said
Windows cannot find 'C:\Program Files\Internet Explorer\IEXPLORE.EXE' etc....

The thing is i know that stuff is there just for some odd reason windows does not think it is there!

Any thoughts?
Back to top
View users profile Send private message
body_soap

Cadet
Cadet



Joined: May 29, 2004
Posts: 5
Location: Uk

PostPosted: Wed Jun 02, 2004 12:07 pm    Post subject: Somebody......anybody....
Reply with quote

Yeah......i dont know if this helps but i downloaded HJT.....maybe that would help you identify my problem
Here is the log

Logfile of HijackThis v1.97.7
Scan saved at 5:00:09 PM, on 6/2/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\PROGRA~1\ANTI-V~1\Grisoft\AVG6\avgcc32.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://popnav.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.seekseek.com/quicksearch.asp...sion_id=18
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - (no file)
O1 - Hosts: indows.
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: DefaultSearch.SeekSeek - {5074851C-F67A-488E-A9C9-C244573F4068} - C:\WINDOWS\ieasst.dll
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.1601.0\en-us\msntb.dll
O3 - Toolbar: DashBar Toolbar - {CC90CDA0-74A0-45b4-80EF-D89CA8C249B8} - C:\Program Files\DashBar\DashBar15.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [GSICONEXE] gsicon.exe
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Documents and Settings\James\My Documents\Nick\Programs\Tweaker\Intalled here\RivaTuner\RivaTuner.exe" /S
O4 - HKLM\..\Run: [SM1BG] C:\WINDOWS\SM1BG.EXE
O4 - HKLM\..\Run: [slmss] C:\Program Files\Common Files\slmss\slmss.exe
O4 - HKLM\..\Run: [Mwsvm] C:\WINDOWS\mwsvm.exe
O4 - HKLM\..\Run: [fash] C:\WINDOWS\fash.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft Office\Office\1033\OLFSNT40.EXE
O4 - Global Startup: BT Broadband Help.lnk = C:\Program Files\BT Broadband\Help\bin\matcli.exe
O4 - Global Startup: PrecisionTime.lnk = C:\Program Files\PrecisionTime\PrecisionTime.exe
O4 - Global Startup: winupdate32.exe
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shoc...tor/sw.cab
O16 - DPF: {26E8361F-BCE7-4F75-A347-98C88B418322} - http://dst.trafficsyndicate.com/Dnl/T_76/QDow.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200...taller.exe
O16 - DPF: {4B6015E7-3ABB-45DC-96B7-55A843751F28} (IntRuboskizo2 Class) - http://www.contenidospc.com/ruboskizo2.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me...Client.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/4h/...taller.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shoc...wflash.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F4D24258-19EF-4DBF-9DBA-D55C4E0CAAFB}: NameServer = 194.74.65.69 194.72.9.38

I'm not familar wiht HJT but that log looks pretty screwed up to me

Any thoughts on how to clean this mofo up?
Back to top
View users profile Send private message
body_soap

Cadet
Cadet



Joined: May 29, 2004
Posts: 5
Location: Uk

PostPosted: Mon Jun 07, 2004 12:34 pm    Post subject: Soooo.......stumped you all eh?
Reply with quote

No one got a clue or you all cant be bothered helping me?

Maybe i should move this topic into the HJT section......yeah.....wish i knew how to do that...... Crying or Very sad ........
Back to top
View users profile Send private message
body_soap

Cadet
Cadet



Joined: May 29, 2004
Posts: 5
Location: Uk

PostPosted: Mon Jun 07, 2004 12:35 pm    Post subject: Soooo.......stumped you all eh?
Reply with quote

No one got a clue or you all cant be bothered helping me?

Maybe i should move this topic into the HJT section......yeah.....wish i knew how to do that...... Crying or Very sad ........
Back to top
View users profile Send private message
weegeordie

Cadet
Cadet



Joined: Jun 21, 2004
Posts: 2
Location: Canada

PostPosted: Mon Jun 21, 2004 5:41 pm    Post subject:
Reply with quote

Did anyone figure this one out? I've got a very similar problem with a WinXP Pro system.
Back to top
View users profile Send private message Visit posters website
weegeordie

Cadet
Cadet



Joined: Jun 21, 2004
Posts: 2
Location: Canada

PostPosted: Tue Jun 22, 2004 8:32 pm    Post subject:
Reply with quote

I found a solution for my WinXP problem. Download the fixswen.inf file, highlight and select Install.

http://vil.nai.com/vil/averttools.asp
Back to top
View users profile Send private message Visit posters website
Blast

News Admin
News Admin
Premium Member
Premium Member


Joined: Sep 20, 2003
Posts: 1832
Location: A Kiwi in Sydney, Australia

PostPosted: Tue Jun 22, 2004 9:29 pm    Post subject:
Reply with quote

Hi there,

I just caught sight of this thread and your log. I will get someone down here to have a look at it for you. In the meantime can you rerun HiJack Tis and post up a current log. I see a couple of issue that you will have to deal with and a current log will give us an up to date look

cheers...

_________________
Blast
---------------------------
"Timing is the essential factor in the success of any raindance"
---------------------------
Back to top
View users profile Send private message Send email Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       Computer Cops Forum Index -> General Security All times are GMT - 5 Hours
Page 1 of 1

 
 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB 2.0.8a © 2001 phpBB Group

Version 2.0.6 of PHP-Nuke Port by Tom Nitzschner © 2002 www.toms-home.com
Version 2.2 by Paul Laudanski © 2003-2004 Computer Cops