Link to home
Start Free TrialLog in
Avatar of Asta Cu
Asta CuFlag for United States of America

asked on

W7 Library problems - Custom dynamic link libraries are being loaded for every application

How in the world do I fix sister's computer loading all libraries?  She is the only user and has administrative access.

Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.

Windows 7 Premium, all updated, Dell Inspiron 660 64 bit.

Event log shows often, these.

Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.

Thanks a lot.

Asta
ASKER CERTIFIED SOLUTION
Avatar of David Johnson, CD
David Johnson, CD
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Asta Cu

ASKER

The mrtRate service failed to start due to the following error and many others in event log -- will find malwarebytes and try this.  Already tried others such as
  TDSSKiller: http://www.bleepingcomputer.com/download/tdsskiller/
  RogueKiller: http://www.bleepingcomputer.com/download/roguekiller/
  AdwCleaner:  http://www.bleepingcomputer.com/download/adwcleaner/

as well as Windows Defender, McAfee Total Protection (all definition files updated) ... no problems found, yet the event log is flooded with warnings and errors.

sfc /scannow found no problems either
Avatar of Asta Cu

ASKER

MalwareBytes quarantined quite a few items, PUP types called MindSpark.

McAfee now running as originally scheduled, back when completed.

Backup a problem, since Dell Dimension 660 had a backup/restore that was never used, yet runs, despite all efforts as shown in my other open Q here.

https://www.experts-exchange.com/questions/28635004/Backup-claims-to-be-running-on-W-7-but-isn't-Conflict-between-Windows-Backup-and-Restore-and-Dell-backup.html
Avatar of Asta Cu

ASKER

Also seeing DNS timeout events for this system for such as this
Name resolution for the name stats.g.doubleclick.net timed out after none of the configured DNS servers responded.

If memory serves me, doubleclick is just something we don't need or want, like adware or the like, but listening further.  No idea why it's even trying to load.
Avatar of Asta Cu

ASKER

The mrtRate service failed to start due to the following error:
The system cannot find the file specified.

and

the same library loads as above.  How do we fix this?
Avatar of Asta Cu

ASKER

Now this new and additional entry in the Event Log shown as Error

Faulting application name: IAStorUI.exe, version: 11.1.0.1006, time stamp: 0x4f29d80d
Faulting module name: KERNELBASE.dll, version: 6.1.7601.18409, time stamp: 0x53159a86
Exception code: 0xe0434f4d
Fault offset: 0x0000c42d
Faulting process id: 0x%9
Faulting application start time: 0x%10
Faulting application path: %11
Faulting module path: %12
Report Id: %13

which follows the earlier entry of

The Intel(R) Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).

Listening with glee.

":0)  Asta
Avatar of Asta Cu

ASKER

The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

Nothing lost power, shutdown was done in normal fashion after troubleshooting for weeks on Dell Backup vs. Microsoft backup.  

time to step away from this system and enjoy Sunday.

Other Qs on this system did not resolve this backup issue on this system.  Alas,
mrtRate belongs to QuickBook or Quicken. Do you have either of them installed in your Computer? mrtRate is part of  Automatic update service of Quicken. You can disable the Background Automatic Service of Quicken, by following
these steps:-
1] Start Quicken.
2] On the Edit menu, point to Options and select Internet Options.
3] Select Don't use Background Downloading and click OK.
http://bit.ly/1CkcRBm
Avatar of Asta Cu

ASKER

Brilliant, David.  That seems to have resolved that one item.  Many others exist for which I have another Q open..

The Intel(R) Rapid Storage Technology service terminated unexpectedly
This has been persistent since all the cleanup started.  When checking drivers, says most current there.
Found this LMS has a problem in achieving network resources .... and isn't needed, so tried to disable, but can't find it in services.  These two seem tied.

This mornings Warning:
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_MULTI-CARD&REV_1.00#20071114173400000&0#.
Same problem as before, and no idea how to fix this
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.
and this error just now -- no idea what this is either.
The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.
Avatar of Asta Cu

ASKER

Sadly, as I returned to this system this evening, same errors, along with others.  This is the other Q regarding this very same question I've been troubleshooting for about a week now.

https://www.experts-exchange.com/questions/28635004/Backup-claims-to-be-running-on-W-7-but-isn't-Conflict-between-Windows-Backup-and-Restore-and-Dell-backup.html
Avatar of Asta Cu

ASKER

This problem continues, no option to do a clean install until I can review this system with my sister.  The x64 folder on the desktop has mostly 64bit info on the McAfee package.  

Still would love to know about how to check and fix the many libraries loading.
Avatar of Asta Cu

ASKER

Apologies for the delay; McAfee tech support processed the complete removal and reinstallation of all related componments, etc.  The mysterious x64 folder gone, registry edits done.  I'll return to that system early next week and finalize this.

Thank you for all your help.
Avatar of Asta Cu

ASKER

Most of the problems on this system, I've resolved.  The Dynamic links issue persists and that'll be another day, another Q.

However, this was a premature response on my part, because the mrt thing persists.  This version of Quicken doesn't have the options as noted in your original response above which was....

mrtRate belongs to QuickBook or Quicken. Do you have either of them installed in your Computer? mrtRate is part of  Automatic update service of Quicken. You can disable the Background Automatic Service of Quicken, by following
these steps:-
1] Start Quicken.
2] On the Edit menu, point to Options and select Internet Options.
3] Select Don't use Background Downloading and click OK.
http://bit.ly/1CkcRBm
Avatar of Asta Cu

ASKER

Should I just close this and start a new one?  So many issues on this system have been resolved, and performance vastly improved.  Despite all these fixes, the same basic problems persist.  

The following are specifics in the Event log.  This may require multiple questions, or escalations.  Given all my time and research on these issues; many have the same problems.  

Timing on these events are listed in ascending order…. The most recent on top.

LMS has a problem in achieving network resources
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_MULTI-CARD&REV_1.00#20071114173400000&0#.
The mrtRate service failed to start due to the following error:
The system cannot find the file specified.
The performance counter explain text string value in the registry is not formatted correctly. The malformed string is _. The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_MULTI-CARD&REV_1.00#20071114173400000&0#.
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.
The mrtRate service failed to start due to the following error:
The system cannot find the file specified.
The performance counter explain text string value in the registry is not formatted correctly. The malformed string is _. The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.
Avatar of Asta Cu

ASKER

The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

ANY IDEA about this?  Seems to be key, no?  Registry fix?
Avatar of Asta Cu

ASKER

Do I just delete this and start all over?

This is marked as NEGLECTED.... I guess so
Avatar of Asta Cu

ASKER

This is the one issue that I'd LOVE to understand.  Anyone there to help me modify the registry key if that need be done?

The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

ANY IDEA about this?  Seems to be key, no?  Registry fix?
Avatar of Asta Cu

ASKER

Tried also to show all non-plug-and-play drivers to disable the mrtrate.sys driver, but is nowhere to be found.  What I did notice, though, is that she has a Quicken in use as copy 1  .... so somewhere on this system must be the other copy of this.  She thinks she was ensuring a backup, maybe.  No idea.  Perhaps that's where the mrtrate.sys driver is.  Will try loading in SAFE MODE.

She'll be back soon and I can work further on this with her (I hope).
Avatar of Asta Cu

ASKER

Closing this, since we've not gotten further and thank you for your help.

Will try different approach to tackle one at a time.

Thanks.