Solved

RunDLL error on start up for one user - how to remove

Posted on 2010-09-02
5
469 Views
Last Modified: 2012-06-21
Hi,
On a Dell Vista laptop with parental controls enabled, the childs user account on start up gives the following message:

RunDLL
Error Loading C:\Users\Username\AppData\Local\Temp\__c0041573.dat
The specified module could not be found.

I do not know how to stop this.

can't see anything obvious in msconfig. Ran hijack this, no nasties listed on that website which analyises it. Run CC cleaner (all of these done from a different administrator account) cleaned out everything and no problems no longer found.

Do note the issue account is standard user rather then an administrator (as used by a 12 year old)
Any input appreciated.
0
Comment
Question by:afflik1923
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 3

Expert Comment

by:karephre
ID: 33585474
By the sound of it, you have actually removed some malware but not cleaned up completely. I just had a similar problem with a client's XP machine with an "XP Antiguard" infection, post-removal.

The fact that rundll can't find the onyc.ffo file is probably a good sign.
To prevent the annoying error, restore your registry setting to the correct value here:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
this should have a value of "Explorer.exe"

(at the moment yours probably reads something like "Shell" = Explorer.exe rundll32.exe onyc.ffo hgikqnb )
0
 

Author Comment

by:afflik1923
ID: 33585780
remember it only havppens for one user. Wouldn't the registry change effect all users?
0
 

Author Comment

by:afflik1923
ID: 33585800
also note it does hve a value of just exlorer.exe already
0
 
LVL 3

Accepted Solution

by:
karephre earned 500 total points
ID: 33585904
try this
HKEY_CURRENT_USER> SOFTWARE> Microsoft> Windows> CurrentVersion> RUN

Delete anything dealing with the error location.

NOTE: it is good practices to backup your registry before removing anything.
0
 

Author Closing Comment

by:afflik1923
ID: 33586426
Brilliant!
0

Featured Post

Don't Cry: How Liquid Web is Ensuring Security

WannaCry is just the start. Read how Liquid Web is protecting itself and its customers against new threats.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn how to PXE Boot both BIOS & UEFI machines with DHCP Policies and Custom Vendor Classes
This article summaries thoughts and ideas from two years of sustained use. It provides good reasoning to make the jump to Windows 10.
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question