? re RUNDLL

sue_va

19 years ago

HP Pavilion Media Center WINXP

I shut down and after the restart I got this message.

RUNDLL

Error loading C:\Progra11\MYWEBS~1\bar\2bin\MWSBAR.Dll

The specified module could not be found.

I googled it and several options are offered.

1.PC Tools Software

2.Mighty Max

#.Hijack This!

4.PC Performance

All say to D/l a Registry Cleaner.

I've never gone into the Registry and if I have to, it would be with fear and trembling. Everything seems to be working alright. Should I just leave it alone or run the Cleaner?

Which of the above sites is best?

TIA

Sue

Sort by:Oldest

Comments (4)

randy_ca
19 years ago
Go to your Control Panel\ Add or Remove, and look for a program called "My Web Search" and remove it.

HijackThis would be best, I'm not sure the others would remove this since it's an installed program.
Anyway if you get HijackThis, read the directions on how to install, It needs it's own folder, so you'll have to create a folder somewhere to put HJT.
These are the reg keys that you'll check and fix with HJT.

R3 - URLSearchHook: (no name) - "00A6FAF6-072E-44cf-8957-5838F569A31D> - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL

O2 - BHO: MyWebSearch Search Assistant BHO - "00A6FAF1-072E-44cf-8957-5838F569A31D> - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL

O2 - BHO: mwsBar BHO - "07B18EA1-A523-4961-B6BB-170DE4475CCA> - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL

O3 - Toolbar: My &Web Search - "07B18EA9-A523-4961-B6BB-170DE4475CCA> - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL

O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe

O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe

O4 - Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE

O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE

O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZWYYYYYYYYUS

O16 - DPF: "1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB> - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/MyWebSearchInitialSetup1.0.0.8-2.cab

You won't be going into the registry yourself, also registry cleaners won't do anything, or at least not until you remove my websearch.

Lavasoft Ad-Aware or Spybot S&D may remove it, not sure.

Follow the directions at the link below under "How Do I Remove My Web Search"

Here is a link that might be useful: How Do I Remove My Web Search
sue_va
Original Author
19 years ago
randy,

"My Web Search" is not in Add/Remove.

I did some reading on it and seems like it is an IE add-on. I rarely use IE, Firefox is my default browser, so don't know why I would have it or want it.

I think I'll just leave things as they are.

Thanks,

Sue
Related Discussions
Comptuer Keeps Restarting!
Q
Comments (2)
You have some serious Trojan Virus problems. I don't know how you got a HJT log if the computer keeps restarting. I see you just joined, so let me say welcome!! Just so you know, Service Pack 2 or SP2 is available. Service packs increase the safety of your system. Also Internet Explorer v6.00 SP1 (6.00.2800.1106) is out of date. In HijackThis, put a check mark in the following and fix. O2 - BHO: (no name) - (00110011-4b0b-44d5-9718-90c88817369b) - (no file) O2 - BHO: (no name) - (11904ce8-632a-4856-a7cc-00b33fe71bd8) - (no file) O2 - BHO: (no name) - (15ACE85C-0BB1-42d1-9E32-07EB0506675A) - (no file) O2 - BHO: (no name) - (202a961f-23ae-42b1-9505-ffe3c818d717) - (no file) O2 - BHO: (no name) - (479fd0cf-5be9-4c63-8cda-b6d371c67bd5) - (no file) O2 - BHO: (no name) - (5753791b-f607-48ca-814e-91c14d081f9e) - (no file) O2 - BHO: (no name) - (7070a8f9-08a4-ca47-0ab0-1eb9e4ee1f3b) - (no file) O2 - BHO: (no name) - (746455fe-d059-47e7-af0e-140e03f5a447) - (no file) O2 - BHO: (no name) - (77701e16-9bfe-4b63-a5b4-7bd156758a37) - (no file) O2 - BHO: (no name) - (7a7e6d97-b492-4884-9abb-c31281dcc4f2) - (no file) O2 - BHO: (no name) - (860c2f6b-ca82-4282-9187-beccbb66f0af) - (no file) O2 - BHO: (no name) - (87185e78-a61b-4db3-965a-3235bbd7a622) - (no file) O2 - BHO: (no name) - (8dc8f96d-34f7-1501-a2a4-631341aa3ac1) - (no file) O2 - BHO: (no name) - (9c5875b8-93f3-429d-ff34-660b206d897a) - (no file) O2 - BHO: (no name) - (a2595f37-48d0-46a1-9b51-478591a97764) - (no file) O2 - BHO: ASGP32.ASGP - (AB268D16-3B58-482F-91EB-8D305534302F) - C:\WINDOWS\System32\asgp32.dll O2 - BHO: (no name) - (b212d577-05b7-4963-911e-4a8588160dfa) - (no file) O2 - BHO: (no name) - (cf021f40-3e14-23a5-cba2-717765721306) - (no file) O2 - BHO: (no name) - (d1ac752e-883f-4ed8-8828-b618c3a72152) - (no file) O2 - BHO: (no name) - (e2b2b5a1-b48c-4886-a318-723916a01024) - (no file) O2 - BHO: (no name) - (e3eebbe8-9cab-4c76-b26a-747e25ebb4c6) - (no file) O2 - BHO: (no name) - (e6d5237d-a6c7-4c83-a67f-f9f15586fa62) - (no file) O2 - BHO: (no name) - (fe2d25c1-c1db-4b5e-9390-af1cb5302f32) - (no file) O2 - BHO: (no name) - (FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF) - (no file) If you notice, this will be all the 02 - BHO that get checked and fixed Be sure you match these 04's, because you do have some good 04's that you need to keep. O4 - HKLM\..\Run: [Start Page] C:\WINDOWS\system32\svcnt32.exe home O4 - HKLM\..\Run: [37.tmp] C:\DOCUME~1\Owner\LOCALS~1\Temp\37.tmp.exe O4 - HKLM\..\Run: [38.tmp] C:\DOCUME~1\Owner\LOCALS~1\Temp\38.tmp.exe O4 - HKLM\..\Run: [6.tmp] C:\DOCUME~1\Owner\LOCALS~1\Temp\6.tmp.exe O4 - HKLM\..\Run: [7.tmp] C:\DOCUME~1\Owner\LOCALS~1\Temp\7.tmp.exe O4 - HKLM\..\Run: [6.tmp.exe] C:\DOCUME~1\Owner\LOCALS~1\Temp\6.tmp.exe O4 - HKLM\..\Run: [7.tmp.exe] C:\DOCUME~1\Owner\LOCALS~1\Temp\7.tmp.exe O4 - HKLM\..\Run: [A.tmp] C:\DOCUME~1\Owner\LOCALS~1\Temp\A.tmp.exe O4 - HKLM\..\Run: [A.tmp.exe] C:\DOCUME~1\Owner\LOCALS~1\Temp\A.tmp.exe O4 - HKLM\..\Run: [17.tmp] C:\DOCUME~1\Owner\LOCALS~1\Temp\17.tmp.exe O4 - HKLM\..\Run: [17.tmp.exe] C:\DOCUME~1\Owner\LOCALS~1\Temp\17.tmp.exe O4 - HKLM\..\Run: [1E.tmp] C:\DOCUME~1\Owner\LOCALS~1\Temp\1E.tmp.exe O4 - HKLM\..\Run: [glght.exe] C:\WINDOWS\System32\glght.exe O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm O21 - SSODL: ryYxujAshx - (BC9E7CA8-1634-D602-E96B-91D0A7E54126) - C:\WINDOWS\System32\qurbh.dll (file missing) O21 - SSODL: SystemCheck2 - (54645654-2225-4455-44A1-9F4543D34546) - C:\WINDOWS\System32\vbsys2.dll (file missing) You're also going to need to download and run AIMFix After you've done all this, turn off system restore - (right click my computer/ properties/ system restore tab/ put check in box) Restart computer in safe-mode by tapping F8 key on boot, then run your AVG Anti-Virus while in safe-mode. When you're done go turn system restore back on by unchecking the box. When you get it all fixed be sure and get the Microsoft updates, especially SP2.
...See More
do I need these:
Q
Comments (103)
also they will give that warning when there is a known problem with the latest version of a program that has not yet been updated or patched, that may well be the case here. They know there is an issue with the latest version but there is not yet a new patched one out yet so they still let you know that what you have currently can be a security risk. In those cases some people would choose to uninstall and wait others will just stay with what they have till the patched version is released.
...See More
Major problems via Malwarebytes
Q
Comments (15)
Here it is. I don't understand one iota of what's in this log file. Thanks, Tom Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 8:20:54 PM, on 5/14/2009 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Boot mode: Normal Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\Program Files\Plextor2000\AFSSVC.EXE C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINNT\System32\CTSvcCDA.exe C:\WINNT\System32\svchost.exe c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe C:\WINNT\System32\nvsvc32.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\system32\stisvc.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\Explorer.EXE C:\WINNT\system32\devldr32.exe C:\Program Files\Creative\SBLive2k\AudioHQ\AHQTB.EXE C:\WINNT\system32\RUNDLL32.EXE C:\WINNT\system32\LVCOMSX.EXE C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\QuickTime\qttask.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Qualcomm\Eudora\Eudora.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank O2 - BHO: HelperObject Class - (00C6482D-C502-44C8-8409-FCE54AD9C208) - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll O2 - BHO: Yahoo! Companion BHO - (02478D38-C3F9-4efb-9B51-7695ECA05670) - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - (8E718888-423F-11D2-876E-00A0C9082467) - C:\WINNT\System32\msdxm.ocx O3 - Toolbar: Yahoo! Companion - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: SnagIt - (8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3) - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [AudioHQ] C:\Program Files\Creative\SBLive2k\AudioHQ\AHQTB.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [LVCOMSX] C:\WINNT\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user') O4 - Global Startup: APC UPS Status.lnk = C:\Program Files\APC\APC PowerChute Personal Edition\Display.exe O16 - DPF: (156BF4B7-AE3A-4365-BD88-95A75AF8F09D) (HPSDDX Class) - http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab O16 - DPF: (17492023-C23A-453E-A040-C7C580BBF700) (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: (2BC66F54-93A8-11D3-BEB6-00105AA9B6AE) (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab O16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: (644E432F-49D3-41A1-8DD5-E099162EEEC5) (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O18 - Protocol: skype4com - (FFC8B962-9B40-4DFF-9458-1830C7DD7F5D) - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL mizkjs.dll O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: afssvc - Plextor Corp. - C:\Program Files\Plextor2000\AFSSVC.EXE O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINNT\System32\CTSvcCDA.exe O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe O23 - Service: Pml Driver HPH11 - HP - C:\WINNT\System32\HPHipm11.exe -- End of file - 5854 bytes
...See More
My computer won't stop 'thinking' when my desktop is up
Q
Comments (6)
Do Ctrl-Alt-Del to bring up your Task Manager, click on the Processes tab, and click once or twice on the CPU tab at the top of the listings: this will show what process is chewing up the most resources (which will probably be the culprit). Also, look at the CPU Usage line at the bottom of Task Manager and see what the % Usage is. Then report back here on what you found out.
...See More
ritaotay
19 years ago
In I. E. goto Tools, Manage Add-ons... Look for anything with My Web or MWSBAR.Dll and disable it... You do that by clicking on it once then add a dot in Disable... Be sure to check both lists under Show...

If you find anything else in there that looks suspicious you MAY want to disable them too but only do one at a time... Wait a week or two and IF you don't have any new problems try another... I'd also run a Search on the internet to see if you can find out what it is before disabling it...

Rita
sue_va
Original Author
19 years ago
Rita,

In Tools/Manage Add-ons, there is no MyWeb or MWSBAR.dll

Since it is not in Add/Remove or Manage Add-ons, looks like I've never had it, so I don't know why I get the message.

So again, I guess I'll wait and see what happens. I hope nothing does.

Thanks,

Sue

? re RUNDLL

Comments (4)

randy_ca

sue_va
Original Author

Related Discussions

ritaotay

sue_va
Original Author

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

? re RUNDLL

Comments (4)

randy_ca

sue_vaOriginal Author

Related Discussions

ritaotay

sue_vaOriginal Author

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

sue_va
Original Author

sue_va
Original Author