DLL Error on Startup

Posted on 2009-02-11
Last Modified: 2013-11-22
Full, updated definitions scan returns no errors.

The full scan run during safe mode found no errors. BUT, there is a dll at startup message:



Error loading c:\Documents and Settings\userprofile\Local Settings\Application Data\ujenuqavefogutu.dll

The specified module could not be found.

Any thoughts?
Question by:noncexstanza
    LVL 2

    Accepted Solution

    Likely the file was removed previously by AV, but did not remove the line from the registry.

    Create a system restore point, then open regedit and search for ujenuqavefogutu.dll, delete all key's containing this string, continue searching until all have been removed.)
    LVL 27

    Expert Comment

    Click Start and then select Run.
    Locate the Startup tab.
    If you can define or locate this executable within the Startup list, uncheck it and then reboot.
    On the next log on you will see a dialog box stating that MSCONFIG was run. Check the box in the lower left corner and you will not be presented with this dialog again.

    Author Comment

    Reece400:  I backed up and then searched the registry.  Nothing was found.

    David-Howard:  I checked MSConfig in the Startup list and nothing is listed that is even remotely close to the ujenuqavefogutu.dll that is spitting out the error on startup and I checked the other tabs as well and cannot locate anything with this name.

    LVL 2

    Expert Comment

    It is possible then that there is still some malware on your system, which is attempting to load this DLL. I would then recommend using msconfig to disable all applications which you are not 100% sure of, and enable them one by one until you deterine which program is causing this message. Once determined you can then re-enable all applications but this one.
    LVL 47

    Expert Comment

    You won't find the file if it's already gone hence the error loading. The file loads with rundll32.exe so in msconfig startup you would be looking at a startup item that may have a very different name(but pointing to the file)
    just examples:
    "MSServer"   which loads under --> rundll32.exe
    "98D0CE0C16B1"  loads with rundll32.exe
    Try Hijackthis or Sysinternal's autoruns the entry should show up there.

    Download Hijackthis:
    Open Hijackthis, click "Do a system scan and save a logfile" don't fix anything yet.
    Paste the log in the "Code Snippet" or "Attach File" window.
    LVL 47

    Expert Comment

    If the file is gone, you can also just try using any scanners that also cleans up the registry, CCleaners or scanners like MBAM, SUPERAntispyware etc.
    Or we can also use Combofix in case there are still some nasties present in the system.

    Author Closing Comment

    This actually was the final solution. Thank you!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Operating system developers such as Microsoft ( and Apple have made incredible strides in virus protection over the past decade. Operating systems come packaged with built in defensive tools such as virus protection and a f…
    In a recent article here at Experts Exchange (, I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    how to add IIS SMTP to handle application/Scanner relays into office 365.

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now