[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

RunDLL error on start up for one user - how to remove

Posted on 2010-09-02
5
Medium Priority
?
481 Views
Last Modified: 2012-06-21
Hi,
On a Dell Vista laptop with parental controls enabled, the childs user account on start up gives the following message:

RunDLL
Error Loading C:\Users\Username\AppData\Local\Temp\__c0041573.dat
The specified module could not be found.

I do not know how to stop this.

can't see anything obvious in msconfig. Ran hijack this, no nasties listed on that website which analyises it. Run CC cleaner (all of these done from a different administrator account) cleaned out everything and no problems no longer found.

Do note the issue account is standard user rather then an administrator (as used by a 12 year old)
Any input appreciated.
0
Comment
Question by:afflik1923
  • 3
  • 2
5 Comments
 
LVL 3

Expert Comment

by:karephre
ID: 33585474
By the sound of it, you have actually removed some malware but not cleaned up completely. I just had a similar problem with a client's XP machine with an "XP Antiguard" infection, post-removal.

The fact that rundll can't find the onyc.ffo file is probably a good sign.
To prevent the annoying error, restore your registry setting to the correct value here:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
this should have a value of "Explorer.exe"

(at the moment yours probably reads something like "Shell" = Explorer.exe rundll32.exe onyc.ffo hgikqnb )
0
 

Author Comment

by:afflik1923
ID: 33585780
remember it only havppens for one user. Wouldn't the registry change effect all users?
0
 

Author Comment

by:afflik1923
ID: 33585800
also note it does hve a value of just exlorer.exe already
0
 
LVL 3

Accepted Solution

by:
karephre earned 2000 total points
ID: 33585904
try this
HKEY_CURRENT_USER> SOFTWARE> Microsoft> Windows> CurrentVersion> RUN

Delete anything dealing with the error location.

NOTE: it is good practices to backup your registry before removing anything.
0
 

Author Closing Comment

by:afflik1923
ID: 33586426
Brilliant!
0

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Know the reasons and solutions to move/import EDB to New Exchange Server. Also, find out how to recover an Exchange .edb file and to restore the file back.
The article covers five tools all IT professionals should know about, as they up productivity by a great deal!
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question