ncfrgci.dll Missing

I've Googled this DLL and found nothing. Not found on sites with DLL libraries.

Anyone heard of this phantom file?
DLL-MISSING.jpg
bobcannAsked:
Who is Participating?
 
BCipolloneCommented:
Key locations:

Windows registry includes the following four keys:

•HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
•HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
•HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
•HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce


Also you can use process explorer to try and find what is causing that message if it happens durring any other time besides startup.

Process Explorer: http://technet.microsoft.com/en-us/sysinternals/bb896653
0
 
BCipolloneCommented:
Yea you need to go into your registry and check your run and autorun keys for any malware related startups.

Or you can us this program: http://technet.microsoft.com/en-us/sysinternals/bb963902

Also run Malwarebytes: http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
0
 
cavp76Commented:
Weird... could be a random dll name from some malware... try running HijackThis and post the log here
0
Cloud Class® Course: SQL Server Core 2016

This course will introduce you to SQL Server Core 2016, as well as teach you about SSMS, data tools, installation, server configuration, using Management Studio, and writing and executing queries.

 
bobcannAuthor Commented:
Thank you. I'll get back you guys on Monday.
0
 
Sudeep SharmaTechnical DesignerCommented:
Get a copy of Autoruns from Microsoft and search for the "dll file"

Download:
http://download.sysinternals.com/Files/Autoruns.zip

More information
http://technet.microsoft.com/en-us/sysinternals/bb963902


Remove it once found, or else if you face any difficulty working with the autoruns then you could just save the autorun entries of you system and post it here.

To save the autorun entries do the following:
Click --> File --> Save.
Name the file "filename.arn" (filename could be any name)

You might want to zip the arn file before posting it here for further analysis.

Sudeep
0
 
JonveeCommented:
Its probably due to Malware, as already suggested.  
After running Malwarebytes(already recommended), try Hitman Pro, a second opinion scanner:
Hitman Pro http://www.surfright.nl/en/hitmanpro

You could follow that with the ESET Online Scanner, a free, & powerful tool:
http://www.eset.com/online-scanner 

Regrettably HijackThis will not necessarily find anything, since more recent Malware have continued to evolve ...rootkits, for example, are not usually detected by HJT.

If still unresolved, Dr.Web CureIt! is another very capable tool:
http://www.freedrweb.com/cureit/?lng=en
0
 
bobcannAuthor Commented:
Hi guys.

I ran Malwarebytes and it crashed my system. So complete was this "bombing" that the task manager would not start. The PC had to be shutdown without exiting XP.

The other suggested software didn't find the problem. So, I ran Registry Crawler 4.5 and it found the false entry in a blink, and allowed its deletion.  I should have done this this before posting (DOH!). Thanks for the advice. Here is a link to this software. It's great!

http://registry-crawler.software.informer.com/

Thanks again.
0
 
JonveeCommented:
Okay, thanks for updating us.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.