Need some help with a RunDLL problem

[Shinra]

For a few weeks now I have been having this message appear. There was a problem starting C:\Users\sarah. The specified module could not be found.
It might just be a coincidence but after doing the system update, it was when it started to happen.

Would really appreciate any help on how to resolve this.
Thanks.

 

[ThrashZone]

Have you tried safe mode or Safe mode with networking ?
Totally shut down the machine/ Unplug and Hold the power button down for 30/ 45 seconds, (power drain)
Plug back in and Power up and Tap the F8 key continuously until you see a black page with white text,
Use the down arrow key to toggle to safe mode with networking/ hit the enter key.
Login as usual,

 

[Shinra]

Hi, I tried safe mode and I did not get the message come up. Still comes up when I start up as normal tho.
Thanks, Sarah.

 

[pebbly]

Hi Shinra, Have you tried the system file checker to see if you have any corrupted files on the system http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html Without knowing what the actual rundll file is thats all the help I can give , Sorry about that

 

[ThrashZone]

Clean boot,
http://support.microsoft.com/kb/929135
What exactly updated on your system ?

 

[Shinra]

Hi sorry did not reply sooner. I've been on holiday. Looking at install updates and the date they happened it was Microsoft update for Microsoft.NET framework 4 client profile there are quite a few and security update for Microsoft windows.

 

[Shinra]

And Pebbly, I would do the system file checker, but in the instructions it says about a running the CD/DVD for windows and I don't have any thing like that. The laptop never came with any :/
Sarah.

 

[VistaKing]

You don't need a Installation disc to run SFC /scannow within Windows 7 . You would need a disc if you want to run SFC /scannow outside Windows which is called offline .

The command inside Command Prompt would be

sfc /SCANNOW /OFFBOOTDIR=c:\ /OFFWINDIR=c:\windows

 

[Shinra]

I have done the sfc /scannow a few times and it said it could find no problems.

 

[VistaKing]

Did you try a virus scan ?

Run Malwarebytes

Download Link :ar: MalwareBytes

When the installation is done uncheck Enable free trial of Malwarebytes (see image below )

Update the definitions and do a Quick scan

:ar: On the Scanner tab:
Make sure the "Perform Quick Scan" option is selected.
Then click on the Scan button.
:ar: If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
:ar: The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
:ar: When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
:ar: Click OK to close the message box and continue with the removal process.
:ar: Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
:ar: Make sure that everything is checked, and click Remove Selected.
:ar: When removal is completed, a log report will open in Notepad.
:ar: The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
:ar: Copy and paste the contents of that report in your next reply and exit MBAM.

 

[Shinra]

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org
Database version: v2013.06.18.06
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16614
Sarah 'N' Daisy :: SARAHNDAISY-PC [administrator]
18/06/2013 19:53:27
mbam-log-2013-06-18 (19-53-27).txt
Scan type: Full scan (C:\|D:\|E:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 551159
Time elapsed: 1 hour(s), 41 minute(s), 42 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)

 

[VistaKing]

Do you still have the issue ?

 

[Shinra]

Yeah it still happening

 

[VistaKing]

Lets run this

Click here DDS

:ar: Click on Download Now button

:ar: When the download is complete . Drag the DDS program from the Downloads folder to your Desktop

:ar: Double click the DDS icon on the Desktop then click the Run button to run the tool.

:ar: Place a check next to attact.txt and click Start . When done, DDS will open two logs

• DDS.txt
• Attach.txt

:ar: Save two logs onto your desktop and upload them with your reply

:ar: Upload a File
Click on the Go Advanced button under the Message box . Scroll down to Additional Options then click on Manage Attachments in the Attach Files sections . Click the Browse button locate the file then click on the Open button . In the Upload File from your Computer section click on the Upload button . Wait until it finishes uploading then close the window . Then click Submit Reply .

 

[Shinra]

View attachment Attach 1.txt

View attachment DDS 1.txt

 

[VistaKing]

Click here AdwCleaner

:ar: Click on Download Now button

:ar: Save to the Desktop

:ar: Right-click on AdwCleaner.exe and choose

:ar: Click the Delete button

:ar: Upload the AdwCleaner[Sn].txt in your reply.

   Note

The log file is at C:\AdwCleaner[Sn].txt

 

[VistaKing]

Uninstall PC PITSTOP and Xfire

Use RevoUninstaller

RevoUninstaller Free Version
Download

For 32-bit OS
RevoUninstaller Pro 30-Day Trial Version
Download

For 64-Bit OS

Click on the app inside RevoUnistaller and choose uninstall
Click on Yes to agree you want to uninstall
If you get the builtin Uninstaller for the app use that and once you're done click Finish
Back inside RevoUninstaller click on Next
Let RevoUninstaller scan for left over registry keys . Click on Select All and choose Delete .
Once done click on Next.
Let the left over files and folders be locates then Click on Select All then click Delete then Next and you should be done .

Please download and install Revo Uninstaller Free
Double click Revo Uninstaller to run it.
From the list of programs double click on The Program to remove
When prompted if you want to uninstall click Yes.
Be sure the Advanced option is selected then click Next.
The program will run, If prompted again click Yes
when the built-in uninstaller is finished click on Next.
Once the program has searched for leftovers click Next.
Check/tick the bolded items only on the list then click Delete
when prompted click on Yes and then on next.
put a check on any folders that are found and select delete
when prompted select yes then on next
Once done click Finish.

   Note

If the free version of RevoUninstaller doesn't show the program you would need to download and install the 30-Day trial of RevoUninstaller Pro which will be able to remove 64-bit programs

 

[VistaKing]

• Click on the gear icon at the top (far right), then click on Internet Options
• In the Internet Options dialog box, click on the Advanced tab, then click on the Reset button.
• In the Reset Internet Explorer settings section, check the Delete personal settings box, then click on Reset.
• When Internet Explorer finishes resetting, click Close in the confirmation dialogue box and then click OK.
• Close and open Internet Explorer again.

• Click the Chrome menu button ( 3 bars ) on the browser toolbar, select Tools and then click on Extensions
• In the Extensions tab, remove (by clicking on the Recycle Bin) BrotherSoft Extreme2 B1 Toolbar, Conduit Apps and any other unknown extensions from Google Chrome.
• Click the Chrome menu button, then select Settings and click on Manage search engines in the Search section.
• In the Search Engines dialog that appears, select Google and click the Make Default button that appears in the row.
• Search for Conduit Search in the Search Engines list, and click the X that appears at the end of the row.
• Change Google Chrome homepage from search.conduit.com to its default.
• The Conduit extension has modified your Google settings to open their webpage whenever you start your browser, so we will need to revert this change.
• Click the Chrome menu button, then select Settings and click on One the New Tab page in the On Startup section.