run time error

I am getting pop-ups stating "runtime error 21 at 02A249D2. I am not tech savy. help

 

I found a reference to this problem on another site.

Apparently the cause of the problem is an application called NCSJAPI. This NCSJAPI32 application is registered as "Intelli Mouse Pro Version 2.0B"

I have just come from a client and cleaned up their Windows XP system using the following method;

1. Reboot and startup in Safe mode (command prompt), then go to the Windows\System32 directory and remove the 'Splm' folder.

2. Do this by running "Rmdir Splm /s", exit and then reboot computer.

3. Once back in windows open Regedit and search for all occurences of NCSJAPI32 and remove them.

 

I rebooted in safe mode and accessed the windows/system32 directory but when I try to run the "Rmdir Splm /s" I get "this system cannot find the file specified" message. Am I not doing something right? I even went to the file search and could not find "splm"

I did pull up regedit but did not find NCSJAP132 but I 'm not sure I searched that right either.

Still have the runtime error. Help

 

Help, I haven't had a responce in a couple of days. What do I need to do? :confused

 

Help

I am getting pop-ups starting with "runtime error 21 at ......" I am not tech savy. Help! By-the-way I have Windows XP. Additionally it seems to take quite a while for my internet to connect after I double click the icon.

 

Re: Help

Your description of the problem is far too vague and ambiguous for us to be of much help. We need to know exactly what the message says, and exactly what programs you're running when the error messages pop up. You can also check the Event Viewer for more info; right click My Computer > Manage > Event Viewer > System. You should check the Application section and the other sections too. What you're looking for (obviously) is any errors. Right click any errors you see and select Properties to see the details. An easy way to supply the details from the error pop ups would be to take a screen shot of the error and post it here. Read this article for info on how-to take and post screen shots.
I hope this helps! Good luck!

 

Hello,
You have a worm called "W32/Koobface.worm" by McAfee. There are quite a few references now available on how to remove it. I will post some relevant links here. You can also search for information about "ncsjapi32". You will find directions on how to disable all instances of that file in the registry and remove the hidden folder "splm" and"nScan", both in the windows/system32/ folder. I had some difficulty removing files in that "splm" directory and I has to right click on the file name and properties then advanced and security and then I checked the boxes for "deny" permission for each user seperately. I had to uncheck the box which says something about "inherit permissions" first. After removal I had to go back and delete one more instance in the registry. I also had difficulty getting my anti-virus program to start working again and to update signatures.

Here are some links:

http://forums.techguy.org/windows-95-98-me/737793-runtime-error-21-00dc49d2-ncsjapi43-3.html

http://www.howtomendit.com/answers.php?id=161427

http://www.threatexpert.com/report.aspx?uid=0f0d93a6-980b-4a05-bc5a-e98a6cf88000

http://vil.nai.com/vil/content/v_148955.htm

 

Re: Help

The reason I did that was because i tried what they said and I did not get a responce. I thouht maybe I did something wromng in the posting. Again, I am NOT tech savy, but i am sure trying. I am going back to that one to work on the next suggestion. Thank You

 

Re: Help

If you have ongoing problems with the same issue, or you require further response it is best to keep it all in the same thread, otherwise it becomes disjointed and those trying to follow the solution, or those trying to assist you, cannot follow what has already been suggested/tried if it becomes split between 2 threads.

Threads merged.

 

Thanks for your help. I am now going to the malware forum to post my logs per instructions.