Solved

RunDLL error on start up for one user - how to remove

Posted on 2010-09-02
5
451 Views
Last Modified: 2012-06-21
Hi,
On a Dell Vista laptop with parental controls enabled, the childs user account on start up gives the following message:

RunDLL
Error Loading C:\Users\Username\AppData\Local\Temp\__c0041573.dat
The specified module could not be found.

I do not know how to stop this.

can't see anything obvious in msconfig. Ran hijack this, no nasties listed on that website which analyises it. Run CC cleaner (all of these done from a different administrator account) cleaned out everything and no problems no longer found.

Do note the issue account is standard user rather then an administrator (as used by a 12 year old)
Any input appreciated.
0
Comment
Question by:afflik1923
  • 3
  • 2
5 Comments
 
LVL 3

Expert Comment

by:karephre
ID: 33585474
By the sound of it, you have actually removed some malware but not cleaned up completely. I just had a similar problem with a client's XP machine with an "XP Antiguard" infection, post-removal.

The fact that rundll can't find the onyc.ffo file is probably a good sign.
To prevent the annoying error, restore your registry setting to the correct value here:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
this should have a value of "Explorer.exe"

(at the moment yours probably reads something like "Shell" = Explorer.exe rundll32.exe onyc.ffo hgikqnb )
0
 

Author Comment

by:afflik1923
ID: 33585780
remember it only havppens for one user. Wouldn't the registry change effect all users?
0
 

Author Comment

by:afflik1923
ID: 33585800
also note it does hve a value of just exlorer.exe already
0
 
LVL 3

Accepted Solution

by:
karephre earned 500 total points
ID: 33585904
try this
HKEY_CURRENT_USER> SOFTWARE> Microsoft> Windows> CurrentVersion> RUN

Delete anything dealing with the error location.

NOTE: it is good practices to backup your registry before removing anything.
0
 

Author Closing Comment

by:afflik1923
ID: 33586426
Brilliant!
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now