run32dll

Discussion in 'Malware Help (A Specialist Will Reply)' started by Bishar, Sep 19, 2009.

  1. Bishar

    Bishar Private E-2

    Whenever I shut my computer down I used to receive this message. Ending program run32dll.exe. I found someone with a similar problem on this forum. I went and did all the instructions in the read me file. I came accross some problems while going through the steps.

    When I ran the malaware bytes procedure

    mbamgui.exe cannot run
    is-B6OM2.exe
    mbam.exe

    On my third attempt It ran

    When I ran MGtools

    processDLL.exe
    application failed to init properly.

    All the log files are attached. The RRlog is in the next message
     

    Attached Files:

  2. Bishar

    Bishar Private E-2

    The RRlog
     

    Attached Files:

  3. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Use windows explorer to find and delete:
    c:\windows\is-B60M2.exe

    Then uninstall MBAM , run CCleaner to remove both temps and the registry ( making sure to do the backup when prompted), then reinstall MBAM and see if it runs.

    Tell me exactly what issues you are having.
     
  4. Bishar

    Bishar Private E-2

    Thanks for the reply. I had almost given up hope on hearing from anybody.

    I had said it was run32dll.exe but it is rundll32.exe. Do I still follow the same procedure.

    Again, Thank you.
     
  5. Bishar

    Bishar Private E-2

    TimW

    I did what you told me to. The new logs are attached. When running Malaware bytes I received this message, ProcessDLL.ese, application failed to initialize properly (0xc0000135).

    Also, when I went to find the is-B...exe in my windows directory I faoun a whole list of folders titled $NTUnistalkKB..... Is this normal.

    The whole problem with the rundll32.exe started when I tried to update avast. After I tried to do this I kept getting the message, your computer may be at risk avast maybe outdated.

    Thanks for your help. Hopefully when I close my pc the rundll32.exe message won't pop up.

    Bishar
     
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Those are windows uninstall files and are normal. Let me know if you have any other issues.
     
  7. Bishar

    Bishar Private E-2

    Tim

    I still get the message ending program rundll32.exe. And my computer takes more than normal time to shut down. Is this normal?

    Thank you.

    Bishar
     
  8. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    It may be legit, or it may not. Please do a search for the rundll32.exe and tell me where it is found. All instances if more than one.

    You may need to go to msconfig and set it to selective start up and stop all non-windows (MS) files from loading and then start trouble shooting it by adding one item at a time.
     
    Last edited: Oct 4, 2009
  9. Bishar

    Bishar Private E-2

    Tim,

    I have enclosed a document listing all the occurences of rundll32.exe I found.

    Thank you for your help.

    Bishar
     

    Attached Files:

  10. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Hummm....let's do this.


    • Download this Win32kDiag(If on your desktop - Right click and choose copy / then Open my computer, click on the C drive and in the window paste it there) and save to C:\Win32kDiag.exe. You must save it here!!!!
    • Click on Start->Run, and copy-paste the following command (the bolded text) into the "Open" box, and click OK. When it's finished, there will be a log called Win32kDiag.txt on your desktop. Please attach this log

    C:\win32kdiag.exe -f -r
     
  11. Bishar

    Bishar Private E-2

    Tim,

    I did what you told me to and the file is attached.

    Thank you.

    Bishar
     

    Attached Files:

  12. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    The run32dll may well be associated with Avast. There are a few things you could do such as use selective startup through msconfig to see what if any of those processes are the cause. You could also try uninstalling Avast and see if that does it.

    You need to pursue this in the software section.


    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real-time protection. They are useful as backup scanners.They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /u
        • Notes: The space between the combofix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    5. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    6. Go to add/remove programs and uninstall HijackThis.
    7. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    8. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures in step 3 the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore ato create a new clean Restore Point.
    9. After doing the above, you should work thru the below link:
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds