W7 Library problems - Custom dynamic link libraries are being loaded for every application

How in the world do I fix sister's computer loading all libraries?  She is the only user and has administrative access.

Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.

Windows 7 Premium, all updated, Dell Inspiron 660 64 bit.

Event log shows often, these.

Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.

Thanks a lot.

Asta
LVL 27
Asta CuTechnical consultant & graphic designAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

David Johnson, CD, MVPOwnerCommented:
start off with standard troubleshooting
scan the system with malware bytes (if clean) then from an elevated command prompt
sfc /scannow
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Asta CuTechnical consultant & graphic designAuthor Commented:
The mrtRate service failed to start due to the following error and many others in event log -- will find malwarebytes and try this.  Already tried others such as
  TDSSKiller: http://www.bleepingcomputer.com/download/tdsskiller/
  RogueKiller: http://www.bleepingcomputer.com/download/roguekiller/
  AdwCleaner:  http://www.bleepingcomputer.com/download/adwcleaner/

as well as Windows Defender, McAfee Total Protection (all definition files updated) ... no problems found, yet the event log is flooded with warnings and errors.

sfc /scannow found no problems either
0
Asta CuTechnical consultant & graphic designAuthor Commented:
MalwareBytes quarantined quite a few items, PUP types called MindSpark.

McAfee now running as originally scheduled, back when completed.

Backup a problem, since Dell Dimension 660 had a backup/restore that was never used, yet runs, despite all efforts as shown in my other open Q here.

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Q_28635004.html
0
Acronis True Image 2019 just released!

Create a reliable backup. Make sure you always have dependable copies of your data so you can restore your entire system or individual files.

Asta CuTechnical consultant & graphic designAuthor Commented:
Also seeing DNS timeout events for this system for such as this
Name resolution for the name stats.g.doubleclick.net timed out after none of the configured DNS servers responded.

If memory serves me, doubleclick is just something we don't need or want, like adware or the like, but listening further.  No idea why it's even trying to load.
0
Asta CuTechnical consultant & graphic designAuthor Commented:
The mrtRate service failed to start due to the following error:
The system cannot find the file specified.

and

the same library loads as above.  How do we fix this?
0
Asta CuTechnical consultant & graphic designAuthor Commented:
Now this new and additional entry in the Event Log shown as Error

Faulting application name: IAStorUI.exe, version: 11.1.0.1006, time stamp: 0x4f29d80d
Faulting module name: KERNELBASE.dll, version: 6.1.7601.18409, time stamp: 0x53159a86
Exception code: 0xe0434f4d
Fault offset: 0x0000c42d
Faulting process id: 0x%9
Faulting application start time: 0x%10
Faulting application path: %11
Faulting module path: %12
Report Id: %13

which follows the earlier entry of

The Intel(R) Rapid Storage Technology service terminated unexpectedly.  It has done this 1 time(s).

Listening with glee.

":0)  Asta
0
Asta CuTechnical consultant & graphic designAuthor Commented:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.

Nothing lost power, shutdown was done in normal fashion after troubleshooting for weeks on Dell Backup vs. Microsoft backup.  

time to step away from this system and enjoy Sunday.

Other Qs on this system did not resolve this backup issue on this system.  Alas,
0
David Johnson, CD, MVPOwnerCommented:
mrtRate belongs to QuickBook or Quicken. Do you have either of them installed in your Computer? mrtRate is part of  Automatic update service of Quicken. You can disable the Background Automatic Service of Quicken, by following
these steps:-
1] Start Quicken.
2] On the Edit menu, point to Options and select Internet Options.
3] Select Don't use Background Downloading and click OK.
http://bit.ly/1CkcRBm
0
Asta CuTechnical consultant & graphic designAuthor Commented:
Brilliant, David.  That seems to have resolved that one item.  Many others exist for which I have another Q open..

The Intel(R) Rapid Storage Technology service terminated unexpectedly
This has been persistent since all the cleanup started.  When checking drivers, says most current there.
Found this LMS has a problem in achieving network resources .... and isn't needed, so tried to disable, but can't find it in services.  These two seem tied.

This mornings Warning:
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_MULTI-CARD&REV_1.00#20071114173400000&0#.
Same problem as before, and no idea how to fix this
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.
and this error just now -- no idea what this is either.
The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.
0
Asta CuTechnical consultant & graphic designAuthor Commented:
Sadly, as I returned to this system this evening, same errors, along with others.  This is the other Q regarding this very same question I've been troubleshooting for about a week now.

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Q_28635004.html
0
Asta CuTechnical consultant & graphic designAuthor Commented:
This problem continues, no option to do a clean install until I can review this system with my sister.  The x64 folder on the desktop has mostly 64bit info on the McAfee package.  

Still would love to know about how to check and fix the many libraries loading.
0
Asta CuTechnical consultant & graphic designAuthor Commented:
Apologies for the delay; McAfee tech support processed the complete removal and reinstallation of all related componments, etc.  The mysterious x64 folder gone, registry edits done.  I'll return to that system early next week and finalize this.

Thank you for all your help.
0
Asta CuTechnical consultant & graphic designAuthor Commented:
Most of the problems on this system, I've resolved.  The Dynamic links issue persists and that'll be another day, another Q.

However, this was a premature response on my part, because the mrt thing persists.  This version of Quicken doesn't have the options as noted in your original response above which was....

mrtRate belongs to QuickBook or Quicken. Do you have either of them installed in your Computer? mrtRate is part of  Automatic update service of Quicken. You can disable the Background Automatic Service of Quicken, by following
these steps:-
1] Start Quicken.
2] On the Edit menu, point to Options and select Internet Options.
3] Select Don't use Background Downloading and click OK.
http://bit.ly/1CkcRBm
0
Asta CuTechnical consultant & graphic designAuthor Commented:
Should I just close this and start a new one?  So many issues on this system have been resolved, and performance vastly improved.  Despite all these fixes, the same basic problems persist.  

The following are specifics in the Event log.  This may require multiple questions, or escalations.  Given all my time and research on these issues; many have the same problems.  

Timing on these events are listed in ascending order…. The most recent on top.

LMS has a problem in achieving network resources
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_MULTI-CARD&REV_1.00#20071114173400000&0#.
The mrtRate service failed to start due to the following error:
The system cannot find the file specified.
The performance counter explain text string value in the registry is not formatted correctly. The malformed string is _. The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.
The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_MULTI-CARD&REV_1.00#20071114173400000&0#.
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.
The mrtRate service failed to start due to the following error:
The system cannot find the file specified.
The performance counter explain text string value in the registry is not formatted correctly. The malformed string is _. The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.
0
Asta CuTechnical consultant & graphic designAuthor Commented:
The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

ANY IDEA about this?  Seems to be key, no?  Registry fix?
0
Asta CuTechnical consultant & graphic designAuthor Commented:
Do I just delete this and start all over?

This is marked as NEGLECTED.... I guess so
0
Asta CuTechnical consultant & graphic designAuthor Commented:
This is the one issue that I'd LOVE to understand.  Anyone there to help me modify the registry key if that need be done?

The performance counter explain text string value in the registry is not formatted correctly. The malformed string is . The first DWORD in the Data section contains the index value to the malformed string while the second and third DWORDs in the Data section contain the last valid index values.

ANY IDEA about this?  Seems to be key, no?  Registry fix?
0
Asta CuTechnical consultant & graphic designAuthor Commented:
Tried also to show all non-plug-and-play drivers to disable the mrtrate.sys driver, but is nowhere to be found.  What I did notice, though, is that she has a Quicken in use as copy 1  .... so somewhere on this system must be the other copy of this.  She thinks she was ensuring a backup, maybe.  No idea.  Perhaps that's where the mrtrate.sys driver is.  Will try loading in SAFE MODE.

She'll be back soon and I can work further on this with her (I hope).
0
Asta CuTechnical consultant & graphic designAuthor Commented:
Closing this, since we've not gotten further and thank you for your help.

Will try different approach to tackle one at a time.

Thanks.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.