FISO News   Admin's Spanish Holiday Apartment Rental Offer     FISO News   Rooney, Balotelli, Torres, RVP   


Post new topic Reply to topic  [ 13 posts ] 
Author Message
 Post subject: Netbook Problem
PostPosted: 06 Mar 2010, 18:46 
Online
FISO Knight
User avatar

Joined: Thu Oct 13 2005
Posts: 12237
Location: hanging around the mod's forum
FS Record: Brassic Cup Winner 2011/12, Prediction Cup Winner 2011/12
Partner's daughter yet again, this time I receive a netbook with a continual pop-up, running an antivirus scan and telling us to buy whatever it is to solve all the problems. Clearly malware so I install SuperAntiSpyware via USB stick and clean out the 12 issues it finds.

Unfortunately in doing so it's caused new problems, rundll32.exe not found, unable to run anything easily and certainly unable to install anything new that works such as a registry cleaner that would restore the links to rundll32.exe which still sits happily in the system32 folder and is also in running processes.

I've tried a solution I found in a few different places which involves creating a reg edit file in notepad, it says it's copied the file to the registry but rundll32.exe still not found after reboot. There's a much bigger reg edit file that I've found online that I'm not sure about trying although I can't see it making anything worse.

There don't appear to be any restore points to try and as it's a netbook, no CD drive to reinstall XP. I could run a CD from the drive of one of my PCs via the network (done it before as a work around for something) but would prefer that to remain as a last resort.

Any thoughts?


Top
 Profile FPL Team Page  
 
 Post subject: Re: Netbook Problem
PostPosted: 06 Mar 2010, 20:59 
Offline
Grumpy Old Man
User avatar

Joined: Thu Nov 10 2005
Posts: 1424
Location: Southwest
FS Record: Was Improving
Have you tried the help on SuperAntiSpyware - most packages like this save the changes they make to a log file or text file so that you can undo some of the changes it makes.

Could be missing %SystemRoot%\system32 in the PATH environment variable - Control Panel->System->Advanced Tab .. under Environment Variables in System variables section there should be an entry for PATH. Does it include %SystemRoot%\system32;%SystemRoot% ? - May also be listed as C:\Windows\System32;C:\Windows


Top
 Profile WWW FPL Team Page  
 
 Post subject: Re: Netbook Problem
PostPosted: 06 Mar 2010, 21:21 
Offline
Grumpy Old Man
User avatar

Joined: Sat Nov 07 2009
Posts: 1966
Location: Fading from the Premiership race :(
what registry code did you try?

was it fix.reg with:

Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"


Top
 Profile FPL Team Page  
 
 Post subject: Re: Netbook Problem
PostPosted: 06 Mar 2010, 21:27 
Offline
Grumpy Old Man
User avatar

Joined: Sat Nov 07 2009
Posts: 1966
Location: Fading from the Premiership race :(
also, if you are able to run the XP disc over your network - you can just:

Start > Run

type D:\i386\rundll32.ex_ c:\windows\system32\rundll32.exe

Where D is the drive letter

Click Enter

Restart


Top
 Profile FPL Team Page  
 
 Post subject: Re: Netbook Problem
PostPosted: 06 Mar 2010, 21:41 
Online
FISO Knight
User avatar

Joined: Thu Oct 13 2005
Posts: 12237
Location: hanging around the mod's forum
FS Record: Brassic Cup Winner 2011/12, Prediction Cup Winner 2011/12
MarquisMark wrote:
what registry code did you try?

was it fix.reg with:

Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"


That's the one, got a pop up saying it had added it okay but still missing after start up. I'm not going to look at it again until Monday, I'll have a shot at whatever looks simplest then :-)


Top
 Profile FPL Team Page  
 
 Post subject: Re: Netbook Problem
PostPosted: 13 Mar 2010, 22:22 
Online
FISO Knight
User avatar

Joined: Thu Oct 13 2005
Posts: 12237
Location: hanging around the mod's forum
FS Record: Brassic Cup Winner 2011/12, Prediction Cup Winner 2011/12
eagle224 wrote:
Have you tried the help on SuperAntiSpyware - most packages like this save the changes they make to a log file or text file so that you can undo some of the changes it makes.

Could be missing %SystemRoot%\system32 in the PATH environment variable - Control Panel->System->Advanced Tab .. under Environment Variables in System variables section there should be an entry for PATH. Does it include %SystemRoot%\system32;%SystemRoot% ? - May also be listed as C:\Windows\System32;C:\Windows


Still struggling.

Can't answer as it won't open system "this file does not have a program associated with it for performing this action."

There's also a "blank" icon now in control panel, no idea what it used to be and too knackered to try to work it out right now.

Trying various actions from the networked hard drive, it won't let me attempt to install/ repair XP, set up starts, click on install and nothing happens.

Tried copying the rundll32 from "run", doesn't like it so did it from the dos prompt, file copied but still no joy.


Top
 Profile FPL Team Page  
 
 Post subject: Re: Netbook Problem
PostPosted: 13 Mar 2010, 22:52 
Offline
Grumpy Old Man
User avatar

Joined: Sat Nov 07 2009
Posts: 1966
Location: Fading from the Premiership race :(
maybe still a virus there than

you may have seen that anti-malwarebytes seems to be solving a lot of peoples problems these days. still not tried it yet as AVG keeps batting everything off, but most people who use it seem happy after. worth a try.

also out of interest - anything in the Domains registry keys?

HKEY_CURRENT_USER > Software > Microsoft > Windows > Current Version > Internet Settings > Zone Map > Domains

HKEY_LOCAL_MACHINE > Software > Microsoft > Windows > Current Version > Internet Settings > Zone Map > Domains


Top
 Profile FPL Team Page  
 
 Post subject: Re: Netbook Problem
PostPosted: 13 Mar 2010, 23:01 
Offline
Grumpy Old Man
User avatar

Joined: Thu Nov 10 2005
Posts: 1424
Location: Southwest
FS Record: Was Improving
MM - Do you think it worth Vid running sfc.exe /scannow? May restore any missing system DLL's, properties etc.


Top
 Profile WWW FPL Team Page  
 
 Post subject: Re: Netbook Problem
PostPosted: 13 Mar 2010, 23:45 
Offline
Grumpy Old Man
User avatar

Joined: Sat Nov 07 2009
Posts: 1966
Location: Fading from the Premiership race :(
eagle224 wrote:
MM - Do you think it worth Vid running sfc.exe /scannow? May restore any missing system DLL's, properties etc.


aye, reckon so. anythings worth a bash while we don't have a scooby whats goin on :D


Top
 Profile FPL Team Page  
 
 Post subject: Re: Netbook Problem
PostPosted: 14 Mar 2010, 17:34 
Online
FISO Knight
User avatar

Joined: Thu Oct 13 2005
Posts: 12237
Location: hanging around the mod's forum
FS Record: Brassic Cup Winner 2011/12, Prediction Cup Winner 2011/12
Just downloaded and now running Malwarebytes, it's found 2 risks so far.

I noticed in the download folder the set up for PCMighyMax2010, downloaded the same day I was given the sick netbook. A bit of a google tells me that this is a very suspect program giving hundreds of false positives when scanning the registry and distribution appears to be generally via torrent although I haven't noticed any torrent clients on the machine. The possible root of the problems or an attempt at a do it yourself fix before passing the machine on to me?


Top
 Profile FPL Team Page  
 
 Post subject: Re: Netbook Problem
PostPosted: 14 Mar 2010, 18:20 
Online
FISO Knight
User avatar

Joined: Thu Oct 13 2005
Posts: 12237
Location: hanging around the mod's forum
FS Record: Brassic Cup Winner 2011/12, Prediction Cup Winner 2011/12
That's done the trick! 11 more infections removed and it's fixed rundll32!!!

Many thanks to all those that advised :D


Top
 Profile FPL Team Page  
 
 Post subject: Re: Netbook Problem
PostPosted: 14 Mar 2010, 18:57 
Offline
Grumpy Old Man
User avatar

Joined: Sat Nov 07 2009
Posts: 1966
Location: Fading from the Premiership race :(
Malwarebytes saves the day again! Coulda been an underlying issue from before as you said re. the torrents.

Looks like its worth recommending MWB scan earlier from now on if it keeps this up.


Top
 Profile FPL Team Page  
 
 Post subject: Re: Netbook Problem
PostPosted: 14 Mar 2010, 19:33 
Online
FISO Knight
User avatar

Joined: Thu Oct 13 2005
Posts: 12237
Location: hanging around the mod's forum
FS Record: Brassic Cup Winner 2011/12, Prediction Cup Winner 2011/12
I have used it a lot in the past but stopped using it when as it has a habit of removing applications you don't want removed as they've been listed as suspect but don't actually do any harm to the system. From now on it'll be installed and stay on anything I'm attempting to fix, whatever it takes off, stays off! :-)

About to start a new thread with a different issue :-)


Top
 Profile FPL Team Page  
 
Display posts from previous:  Sort by  
Bookmark and Share
Post new topic Reply to topic  [ 13 posts ] 

All times are UTC [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to: