dll errors need help

Hello: I am new to this board, and computers, so please forgive any dumb questions.

I found this site when i had trouble with a virus or trojan on my PC (windows 2000)

Upon start up, I get two errors RUNDLL and the message states it cannot load a file. i need to clear this upon start each time. My computer seems to run slower now (I am connected to high speed cable) i have ran Mcafee virus scan, and it does not detect this problem, and I even purchased Mcafee (before the virus infected my computer), but still have the problem. I also tried the free Spybot software, no luck

The other effect (maybe same virus???) is something has control of my internet pages. My home page automicaly resets every time to "i can find it" page, and my favorite places screen has added favorites (some very objectionable) that I can remove, but they keep re-appearing. Sometimes when i do google search, the unwanted home page comes up as a result. other times it comes up with a "ms search screen" (loaded with ads)

I read on this web site that the CW shredder software might remove this virus,(at least the missing DLL issue) but when I start the down load from this site (I tried three or four times) after about five seconds, i get the "ms search screen", so i think the virus must be smart enough to protect itself by preventing the down load of the CW shredder.

I hope this makes sense to you all, and perhaps someone can suggest a repair method to remove this stuff. Please let me know if you require more info.
i have emailed Mcafee about this, but so far no reply in two days. I think I will cancel my Mcafee and get a refund (within 30 day refund period) I emailed Mcafee that i would cancel them unless they helped, but so far no help.

any suggestions?

Thanks

Dave Menche

 

hi dave, welcome

I think your msconfig startup is trying to boot a program/virus you might have removed from your computer; but its still on your boot up sequence list and thats why you get the error..if you have windowsxp (unsure of w2000) go to RUN type msconfig and go to the startup tab look for that .dll and unclick it; apply settings and reboot. Should work.

About your 2nd problem it looks like your browser got hijacked, try using Hijackthis program to remove your problems (slightly advanced knowledge req; just post on boards)

here is link to Hijackthis > http://www.majorgeeks.com/download.php?det=3155 <

Good Luck

 

still having problems, got rid of one of the RUNDLL start up errors, by deleting some HKEYs, however when i attempted to download the anti-highjack program suggested, from this web site, in about five seconds the screen went to the unwanted home page its address is


"http://searchpage.cc/1526/"

can anyone help out, seem the virus won't even allow me to down load the fix program.

thanks dave

 

Can you use another PC to download the program... or can you boot into safe mode with networking (as long as youre not using a 56k modem or a cable/dsl modem attached directly to PC.. that is).

Heres somthing very naughty, I'm going to link directly to the file, rather than the download page. Maybe you can use that to start a download rather than having to go through the download page and get redirected.
HijackThis

 

OK tried the direct link you have, and the first time got "page cannot be displayed" Cannot find server. second attempt yielded the $%^%()( ad search page again!

this is incredable, it seems that today the virus has gotten worse. i tried spybot again, and found that it found the same bad programs it found before (and that it removed, I used the fix function for that) so thoose are back again also (many from my cookie file, which I tried to manually delete.

there is one funny file in my cookie file, it is called index, and it is the one file in the cookie folder that cannot be deleted. it's icon is different than alt he other cookies, it hase the microsoft emblem on it, the other icons all apper like a note pad of paper.

Is thie index file int he cookie folder the problem, and if so how to remove?

thanks dave

 

Hey Dave, post your email addy here and I'll send you CWShredder and HijackThis, they're both pretty small.

 

Here is my email: dmenche914@hotmail.com


I'll give it a try. i really appreciate all the help.

thanks dave

 

Did you get the email? And have you run Hijack this and do you have a log file for us to look at?

 

Alternatives

Dave, the folks at MG will help you get out of your current problem.

Some programs to think of, in the future, once you are sorted

Better alternative to msconfig,

Starter v 5.6.1.38 from http://codestuff.netfirms.com/news.shtml

To uninstall progs, better than M$ feeble attempt.

MyUninstaller from http://nirsoft.mirrorz.com/

QUOTE "The MyUninstaller utility is a standalone executable. It doesn't require any installation process or additional DLL's. Just copy the executable file to any folder you want, and run it.

After your run it, MyUninstaller loads the list of the installed applications from the Registry, and gathers information about each installation item. The loading and analyzing process might take between 5 and 15 seconds and even more, depending on your hardware, operating system, and the quantity of the installed application on your computer.
After the analyzing process is finished, MyUninstaller displays the details of all installed applications on your computer. Be aware that some columns, like version, product name, company and others, are displayed for most installed applications, but not for all of them. In rare cases, It's also possible that wrong information about an installed application will be displayed."EOQ

To guard your browser from being hijacked try

StartPage Guard http://www.pjwalczak.com/spguard/index.php

QUOTE "THE PROGRAM
StartPage Guard (SPG) protects your PC from cyberscam, by detecting and preventing any unauthorized changes to your internet browser's Start and Search pages. It is also capable of removing automatically most of known "invaders".

NOTE XP USERS: I am receiving a lot of queries regarding compatibility with Windows XP. I have received reports that SPG works fine under XP, however I have no way to verify that information personally, as I am not going to let XP on any of my computers." EOQ

=======

Hope they help in future.

Myspecs Windows 98 SE Gateway Solo 9300XL Laptop 288mb RAM (maxed out) 30gig Harrddrive Pentium P2/400 so have not tried these on other OS's. Baz

===============

 

Dave, I sent you those two files just now, keep an eye out

 

Dave, hotmail bounced that mail I sent you. Got another addy that can receive attachments?

 

If you try dmenche@comcast.com, as an email, that might work better, I think Hotmail is limited on storage space.

Also i found when trying to open photos on Yahoo (ie trying to make small photos full size) when i click on the photo, I get that dumb ad filled home page, som I cannot even open items without this appearing. I can not get to the photos even when I "x" click the ad screen
(hope you understand this, is it proper to say "closed" when left clicking on upper right "X" box to remove that screen view??

anyway, look forward to the download to kill this hijack

By the way, why did McAfee not stop this virus (or my DLL error) i had it loaded and running, just purchased it about three weeks ago.

Is McAfee worthless? I am ready to ask for a refund from them, unless someone can convince me i did something wrong. McAfees help email has not replied after three days to my request for help. My opinion is they are worthless frauds, with no paying customer support. (I am really ticked at them right now)

Are there better anti virus programs out there that would have stopped this stuff??

thanks dave

 

OK, I just tried again to your comcast (my evil cable co.) addy.

I wouldn't say McAfee is worthless, it's better than nothing, I just prefer Avast, which happens to be free.

You're probably clean of viruses, I think your problem is spyware/hijackers, antivirus programs typically don't protect from that kind of thing.

Read up on spyware and hijackers here:
http://www.majorgeeks.com/vb/forumd...1&pp=20&sort=lastpost&order=desc&daysprune=-1

 

I got a "550 Invalid Recipient" with your comcast addy Dave...

 

i am not sure what the 550 error you got is, can you explain, and then maybe I can fix itto get the download. I know very little about computers, but am learning fast.

thanks dave

 

Here's the whole error:

'User unknown' implies your address isn't being recognized by their server.

You'll prolly have to contact comcast about this.

 

Have you updated Mcaffee by the way? Otherwise it is worthless you need to keep your AV up to date or it wont protect you.

Can you not find another computer, put the programs on a floppy and then load them onto your stricken computer? They should fit on a floppy if i remember correctly.

 

Index file answer

The Index.dat file is something that is always there (it's in the temporary files too). It can become corrupted though and there's a program for it called dellater that I have used -- I think someone here at MG recommended it to me once. If that's not true someone correct me and tell Dave to ignore me. If it's worth him using (once you can send things to him) show him where to go for the download.