Link to home
Start Free TrialLog in
Avatar of atf3doc
atf3doc

asked on

cannot open programs after malware removal

On an XP Pro SP3 machine, the error message "C:\Windows\System32\rundll32.exe. Application not found." appears whenever I try to open "Add, Remove programs" or The wireless utility, and several other programs. This began after removing an insidious piece of malware, a fake antivirus. Norton says it quarantined "oei.exe" I did a repair installation of XP..no joy. I tried to run chkdsk /r , but it won't run on restart. I tried start/run "expand D:\windows\i386\rundll32.ex_ c:\windows\system32\rundll32.exe", but it says "what program do you want to use to open expans.exe. Is there an easy fix for this or would I be better off to copy data and do a clean install? Thanks.
ASKER CERTIFIED SOLUTION
Avatar of rpggamergirl
rpggamergirl
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
atf3doc,
Do you know the actual name of the malware infection you had?
It will make it easier for us to give you specific advice.

In general, AV programs such as Norton will not take all the steps to recover your system functionality.

The Menu Options in "RogueKiller" (1-6) may help you repair this, but I suggest a multi-step approach to identify, repair, and recover.

Read through these EE Articles for details, and post the malware 'Name' if you can find it.

https://www.experts-exchange.com/A_5124.html (Stop-the-Bleeding-First-Aid-for-Malware)
https://www.experts-exchange.com/A_4922.html (Rogue-Killer-What-a-great-name)
https://www.experts-exchange.com/A_1940.html (Basic Malware Troubleshooting)
Avatar of atf3doc
atf3doc

ASKER

rpggamergirl , the first exe fix worked fine. All program functionality has been restored.

younghv, I'm going to run Malwarebytes as a check. I believe the name was "XP Antivirus 2012"
Unfortunately, I didn't write it down before I had NIS 2011 scan as a slave to another computer.

I will report back as soon as Malwarbytes is finished.
atf3doc
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of atf3doc

ASKER

Malwarebytes picked up three infected registry data items and removed them. I ran FixNCR.reg and Rkill before running MBytes. All seems to be well now. Thanks much to you both.
atf3doc