Partner's daughter yet again, this time I receive a netbook with a continual pop-up, running an antivirus scan and telling us to buy whatever it is to solve all the problems. Clearly malware so I install SuperAntiSpyware via USB stick and clean out the 12 issues it finds.

Unfortunately in doing so it's caused new problems, rundll32.exe not found, unable to run anything easily and certainly unable to install anything new that works such as a registry cleaner that would restore the links to rundll32.exe which still sits happily in the system32 folder and is also in running processes.

I've tried a solution I found in a few different places which involves creating a reg edit file in notepad, it says it's copied the file to the registry but rundll32.exe still not found after reboot. There's a much bigger reg edit file that I've found online that I'm not sure about trying although I can't see it making anything worse.

There don't appear to be any restore points to try and as it's a netbook, no CD drive to reinstall XP. I could run a CD from the drive of one of my PCs via the network (done it before as a work around for something) but would prefer that to remain as a last resort.

Any thoughts?

Have you tried the help on SuperAntiSpyware - most packages like this save the changes they make to a log file or text file so that you can undo some of the changes it makes.

Could be missing %SystemRoot%\system32 in the PATH environment variable - Control Panel->System->Advanced Tab .. under Environment Variables in System variables section there should be an entry for PATH. Does it include %SystemRoot%\system32;%SystemRoot% ? - May also be listed as C:\Windows\System32;C:\Windows

what registry code did you try?

was it fix.reg with:

Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

also, if you are able to run the XP disc over your network - you can just:

Start > Run

type D:\i386\rundll32.ex_ c:\windows\system32\rundll32.exe

Where D is the drive letter

Click Enter

Restart

That's the one, got a pop up saying it had added it okay but still missing after start up. I'm not going to look at it again until Monday, I'll have a shot at whatever looks simplest then

Still struggling.

Can't answer as it won't open system "this file does not have a program associated with it for performing this action."

There's also a "blank" icon now in control panel, no idea what it used to be and too knackered to try to work it out right now.

Trying various actions from the networked hard drive, it won't let me attempt to install/ repair XP, set up starts, click on install and nothing happens.

Tried copying the rundll32 from "run", doesn't like it so did it from the dos prompt, file copied but still no joy.

maybe still a virus there than

you may have seen that anti-malwarebytes seems to be solving a lot of peoples problems these days. still not tried it yet as AVG keeps batting everything off, but most people who use it seem happy after. worth a try.

also out of interest - anything in the Domains registry keys?

HKEY_CURRENT_USER > Software > Microsoft > Windows > Current Version > Internet Settings > Zone Map > Domains

HKEY_LOCAL_MACHINE > Software > Microsoft > Windows > Current Version > Internet Settings > Zone Map > Domains

MM - Do you think it worth Vid running sfc.exe /scannow? May restore any missing system DLL's, properties etc.

aye, reckon so. anythings worth a bash while we don't have a scooby whats goin on

Just downloaded and now running Malwarebytes, it's found 2 risks so far.

I noticed in the download folder the set up for PCMighyMax2010, downloaded the same day I was given the sick netbook. A bit of a google tells me that this is a very suspect program giving hundreds of false positives when scanning the registry and distribution appears to be generally via torrent although I haven't noticed any torrent clients on the machine. The possible root of the problems or an attempt at a do it yourself fix before passing the machine on to me?

That's done the trick! 11 more infections removed and it's fixed rundll32!!!

Many thanks to all those that advised

Malwarebytes saves the day again! Coulda been an underlying issue from before as you said re. the torrents.

Looks like its worth recommending MWB scan earlier from now on if it keeps this up.

I have used it a lot in the past but stopped using it when as it has a habit of removing applications you don't want removed as they've been listed as suspect but don't actually do any harm to the system. From now on it'll be installed and stay on anything I'm attempting to fix, whatever it takes off, stays off!

About to start a new thread with a different issue