[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 482
  • Last Modified:

RunDLL error on start up for one user - how to remove

Hi,
On a Dell Vista laptop with parental controls enabled, the childs user account on start up gives the following message:

RunDLL
Error Loading C:\Users\Username\AppData\Local\Temp\__c0041573.dat
The specified module could not be found.

I do not know how to stop this.

can't see anything obvious in msconfig. Ran hijack this, no nasties listed on that website which analyises it. Run CC cleaner (all of these done from a different administrator account) cleaned out everything and no problems no longer found.

Do note the issue account is standard user rather then an administrator (as used by a 12 year old)
Any input appreciated.
0
afflik1923
Asked:
afflik1923
  • 3
  • 2
1 Solution
 
karephreIT Specialist (Server Management)Commented:
By the sound of it, you have actually removed some malware but not cleaned up completely. I just had a similar problem with a client's XP machine with an "XP Antiguard" infection, post-removal.

The fact that rundll can't find the onyc.ffo file is probably a good sign.
To prevent the annoying error, restore your registry setting to the correct value here:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
this should have a value of "Explorer.exe"

(at the moment yours probably reads something like "Shell" = Explorer.exe rundll32.exe onyc.ffo hgikqnb )
0
 
afflik1923Author Commented:
remember it only havppens for one user. Wouldn't the registry change effect all users?
0
 
afflik1923Author Commented:
also note it does hve a value of just exlorer.exe already
0
 
karephreIT Specialist (Server Management)Commented:
try this
HKEY_CURRENT_USER> SOFTWARE> Microsoft> Windows> CurrentVersion> RUN

Delete anything dealing with the error location.

NOTE: it is good practices to backup your registry before removing anything.
0
 
afflik1923Author Commented:
Brilliant!
0

Featured Post

SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now