rundll32.exe cannot find it???

Discussion in 'Malware Help (A Specialist Will Reply)' started by redbird7, Mar 15, 2005.

  1. redbird7

    redbird7 Private E-2

    After fighting a browser hijacker I must have deleted this file. Does anyone know where to find it on the web to download? :confused:
     
  2. Turcoloco

    Turcoloco MajorGeek

    Did you do a search for it? How do you know it is missing, is there a Windows startup error message coming up? If so it could be due to an invalid registry startup entry that belonged to the spyware...since the infection no longer exist, the startup entry points to an invalid file.

    It would help greately if you could provide more info on what kinda infection you had, what you did to get rid of it and how you came to assume the above file is missing... ;)
     
  3. redbird7

    redbird7 Private E-2

    I cannot open up any of the files in Control panel. It states that it cannot find rundll32.exe. I had a about/blank infection associated with a "sp" in my startup files.
     
  4. TheOldThug

    TheOldThug First Sergeant

    I am not sure if it is included in this D/L, but you might try it.
    Visual Basic
     
  5. Turcoloco

    Turcoloco MajorGeek

    I personally haven't had this problem with any of the systems I worked on but I have asked some of the knowledgeable Spyware gurus for help.
    For the moment, I suggest you download HijackThis v1.99.1 and run it then attach the saved log file to your next post using 'manage attachments' option.

    2 important things about HijackThis:

    1) Create a new folder named HJT in C:\Program Files and unzip the contents of the downloaded file there (C:\Program Files\HJT)

    2) Close all browser windows, Internet Explorer or Firefox or any other, doesn't matter close them all!

    But I strongly suggest you read thru these stickies prior to running HijackThis:

    http://forums.majorgeeks.com/showthread.php?t=38772

    and

    http://forums.majorgeeks.com/showthread.php?t=38752

    It may seem like a lot to read but to get rid of the infection and recover your system you have to know and apply all applicable steps. ;)
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    What OS are we talking about? I assume WinXP.

    Sounds to me like you may have had the type of about:blank hijack that shows a file like se.dll and you had a rundll32.exe command that was reloading the file at startup. If you deleted rundll32.exe from C:\windows\system32 , it obviously stops the hijacker from loading but causes problems as you can see.

    If using WinXP (or Win2K), you need to look in your c:\i386 or c:\windows\i386 folder and copy the rundll32.exe file from there to your c:\windows\system32 folder.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds