secur32.dll and 0xc0000185 and instability

mj44iq · 10 Feb 2014

Hi there,

I thought I had some sort of a DNS poisoning attack since every time I open omegle.com it says that I'm banned and redirects me to porn and after some googling i discovered that this was a DNS poisoning attack. I visited this thread Detected DNS cache poisoning attack. and applied the code:

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

I placed it in notepad and saved it as a .bat file and executed it. the code was executed and my computer restarted automatically. After the restart I suffered from random system freezes (temporary ones) and I keep getting the error messages "Failed to load the library secur32.dll" and "the application was unable to start correctly (0xc0000185). click ok to close the application".

these error messages mostly appear when i try to start almost every application (web browsers seem to start but they freeze after a few seconds).I'm almost sure that the said code has caused all this (since the system was normal before executing it)

Any solutions? and sorry for the long post

Jacee · 10 Feb 2014

Some secur32.dll errors could be related to a virus or other malware infection on your computer that has damaged the DLL file. It's even possible that the secur32.dll error you're seeing is related to a hostile program that's masquerading as the file.

Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.
Vista/Windows 7/8 users right-click and select Run As Administrator.
Click on the Scan button.
AdwCleaner will begin...be patient as the scan may take some time to complete.
After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
Copy and paste the contents of that logfile in your next reply.
A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

Using AdwCleaner v3: Scan & Clean:
Double click on AdwCleaner.exe to run the tool again.
Click on the Scan button.
AdwCleaner will begin to scan your computer like it did before.
After the scan has finished...

This time click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder

mj44iq · 10 Feb 2014

Hi there and thanks for the reply,

well i may have messed up a little and didn't follow your instructions precisely. I started the computer in safe mode and activated adwcleaner. I did a scan and a clean then rebooted. did another scan in normal startup mode and rebooted. on the third time it seemed that firefox and chrome stuff just stayed there so i just uninstalled both of them and then deleted their files (the ones in c:\users\%username%\appdata) by command prompt. this has eliminated the error message about secur32.dll but the 0xc0000185 and the system instability are still there (though the instability part is a bit less now)

the reports are attached to this reply. I apologize again for not following instructions precisely.

Jacee · 10 Feb 2014

# AdwCleaner v3.018 - Report created 11/02/2014 at 01:47:45
# Updated 28/01/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : M_J_44_iq - M_J_44_IQ-PC
# Running from : I:\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****

***** [ Files / Folders ] *****
File Found : C:\Windows\System32\roboot64.exe
Folder Found C:\Users\M_J_44_iq\AppData\Roaming\OpenCandy
***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho

Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.7601.17514

-\\ Mozilla Firefox v27.0 (en-US)

[ File : C:\Users\M_J_44_iq\AppData\Roaming\Mozilla\Firefox\Profiles\vdmy53dy.default\prefs.js ]
[ File : C:\Users\www\AppData\Roaming\Mozilla\Firefox\Profiles\734h7zcn.default\prefs.js ]

　

-\\ Google Chrome v32.0.1700.107

[ File : C:\Users\M_J_44_iq\AppData\Local\Google\Chrome\User Data\Default\preferences ]

　

*************************

AdwCleaner[R0].txt - [1077 octets] - [11/02/2014 01:47:45]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1137 octets] ##########

Using AdwCleaner v3: Scan & Clean:
Double click on AdwCleaner.exe to run the tool again.
Click on the Scan button.
AdwCleaner will begin to scan your computer like it did before.
After the scan has finished...

This time click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder