Iphlpapi.dll

Discussion in 'Malware Help (A Specialist Will Reply)' started by littlebobbie, Mar 13, 2006.

  1. littlebobbie

    littlebobbie Private First Class

    :mad: I am ready to do some serious injury to this computer. First off I got it second hand so I had to do some real deep clean ups on it. It is a compact Deskpro EN running 98SE with updates downloaded. I have Zone Alarm, CLEAN Up!, Ad Aware SE, and Norton System works all installed and running latest. All updates on definitions ect. I keep getting the message IPHLPAPI.DLL cannot load. Please check file. I have deleted, rebooted and it tells me it is missing, then I download new version and put it in the Windows/System file and reboot again and get the same message again, twice. Sometimes when I have dialed my connect and it connects I get a message that Explorer has encountered a fatal error and will shut down..some of my icons on the quick start menu will disappear and the background will go white and I have to click the link to restore my desk top. I have run diagnostic programs of all sorts and even one I got off this site. NONE have fixed the problems or even note there is a problem. Also while surfing sometimes I will click the next link or next button and it just sits there and does nothing... repeated clicking will sometimes after a minute or two push it onto the next screen, sometimes tellling it to open in new window will start it and then the old and the new window will both open with the new link..and I have to cancel the new window.. Any suggestions would be greatly appreciated.. I am about ready to turn this computer over to my computer illiterate daughter and I do not want her to have problems.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    Right now it does not sound like malware, but the only way for us to be sure would be to have you follow the steps below.

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

    Downloading, Installing, and Running HijackThis


    When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too (these scans are covered in steps 6 & 7 of the READ & RUN ME sticky)
    • Bitdefender
    • Panda Scan
    • HijackThis
    .
     
  3. littlebobbie

    littlebobbie Private First Class

    I am sorry I did not read enough to do all you suggested first. I have now run all the tests and it was a major headache:( the download made my computer hangup on 3 or more occasions I had to reboot and start over on some of the downloads. I ended up going to my other computer and downloading them and then burning to a disk. and they did not fix the problem of the error message on bootup of the Iphlpapi.dll not starting... The online scan from Bitdefender showed nothing. the three things found by Panda I manually deleted. The system seems to run a little faster. I could not download the Counter spy on this machine or my XP machine. It would stop at 95% and refuse to go any further. said the file did not exist. So I guess maybe I have a technical problem instead of malware? What do I check next. There are two modems on this machine. One internal and one external. I use the external because when I got the machine I could never get the internal one to work. So I use the Zoom External and it does fine. I believe the file is connected with the internal modem and do not know how to get rid of all traces of it even if I do take it out. one of the attached files is my system information. Thank you very much for helping this addlepated person try and fix this..
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You did not complete step 7 of the READ ME and attach the HijackThis log.

    I still think your problem with IPHLPAPI.DLL is not malware. You should check out the below to see if it sounds like your problem.

    http://support.microsoft.com?kbid=823256
     
  5. littlebobbie

    littlebobbie Private First Class

    :cool: finally got back...the microsoft link does not apply here. I do not have broadband nor have I tried to install one. I think maybe it is a hardware/software problem and has to do with the internal modem. It doesn't interfere with my connection with the external one and the surfing has been better since getting rid of the malware that I thought I was protected againt:rolleyes: so I do thank you very much for that.. seems to have fixed alot of things like a slow start up... so I have all the programs saved to keep a check on this machine. I attached the Hijack file..
     

    Attached Files:

  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You installed HijackThis exactly where step 7 asks you not to install....on your Desktop. Please fix this.
    C:\WINDOWS\DESKTOP\FOR CLEANING THE SYSTEM\HIJACKTHIS.EXE

    What version of DAP are you running? Earlier versions contained malware!

    Make sure viewing of hidden files is enabled (per the tutorial).

    Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    O9 - Extra button: (no name) - {AFC3FA82-AD07-45cd-8B57-983435B9899E} - (no file)
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O16 - DPF: {42040532-2221-4EF7-8F16-9779AB7AAA98} - http://download.gainpublishing.com/screenscenes/midnightlake/gainplugin_ml1setup.cab
    O16 - DPF: {F919FBD3-A96B-4679-AF26-F551439BB5FD} - http://locator1.cdn.imagesrvr.com/sites/winantispyware.com/www/download/2006/WinAntiSpyware2006FreeInstall.cab

    After clicking Fix, exit HJT.

    Now we need to Reset Web Settings:
    1. If you have an Internet Explorer icon on your Desktop, goto step 2. If not, skip to step 3.
    2. Now right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK. Then skip step 3.
    3. If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.
    Now reboot in normal mode and post a new HJT log.

    Make sure you tell me how things are working now.

    The problem you are having with that DLL is not a malware issue and may be related to the PC Mighty Max software you install. Uninstall it. Or uninstall it and reinstall it if you need it.

    The IPHLPAPI.DLL file is a Windows system file so you should also check to make sure it exists. On your system it should probably be in C:\windows\system folder as you mentioned but you must make sure you have the correct version for your OS. Get it from your Windows CD. This is not a problem for this forum though. So if you still have problems with it, try the Software Forum.
     
    Last edited: Mar 17, 2006
  7. littlebobbie

    littlebobbie Private First Class

    well I did all that you said and now I have a new error message... something to do with the Norton's... not sure which or what... I fixed that lines you said to in Hijack and that was the result... I do not have the orginal disks to this machine. But I do have 98Se disk ... I do not know how to extract from that... all are in zip files...so I looked up the Iphlapapi.dll file on line...must not got the right one:eek: cause I still have the error but reading slightly different...so I need to delete it and load another one I found... they do not mark them as to what version of Windows they come from... I had the explorer do it's error thing again..... but atleast it does take me where I need to go.
     

    Attached Files:

  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You have to explain better than that! I have no idea what your problem is based on that info. You need to give exact word for word complete error messages. Nothing we did has anything to do with Norton.
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    This is the last step I will suggest related to IPHLPAPI.DLL. If it does not help your problem, you will need to work thru it in the Software Forum.

    Locate the IPHLPAPI.DLL file and rename it to IPHLPAPI.DDD.
    Then click Start, Run, and enter command and click OK. This will open a command prompt window. In the command prompt window enter the below command. It may ask you for your Win 98 CD.

    sfc /scannow

    Did that help?
     
  10. littlebobbie

    littlebobbie Private First Class

    :D okay, I will take this to the software forum...the sfc/scannow did not help
    I did as you said and it came up with c:windows/desktop/ so I typed in the sfc/scannow...it said bad command or file name...so I took it back to c:windows/ and typed it in with same results... then I took it back to C: and got the same results... Symantec has finally answered me and wants more info. because sometimes ,not often I get the Lucallbackproxy error and that is to do with them..have not gotten it since doing all the clean up.. .thankyou very much for the help you have given...it is very much appreciated... :) OOps forgot...running latest version of free Dap..:D
     
  11. littlebobbie

    littlebobbie Private First Class

    I dont' recall exactly what the error message was...I let Win Doctor in Norton's fix it... and it did... the other message is still the same on the DLL file... Sorry to not be as precise as I should be...I am only working on 3 computers at once and I was very tired... yeah no excuse but the best I can do!
     
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    There needs to be a space between sfc and the /scannow
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds