rundll error loading

[Kevin]

Hi,
Installed MSAS it ran. Warned me of ten threats, removed
seven. Asked for reboot. Upon start I get the message box
in middle of screen as follows:
RUNDLL
error loading DOCEOC16B1
The specified module could not be found.
OK or X
select either it closes and life goes on.
Is this something to fix or ignore everytime I start up
from scatch? I do not like toleave PC turned on when not
there. I expect I'll see this error message a lot unless
there is fix out there somewhere.

thanks in advance

 

[plun]

Hi

This is something left behind after removal.

Try this:

- Download CCleaner, www.ccleaner.com and remove all temporarily junk.
Also scan for "Issues"-and perform a registry cleaning

- Download/Install Lavasofts Adaware
http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022-10399602.html?tag=list

IMPORTANT ! After install upgrade Adaware definitions with "Check for
updates".

- Restart in safe mode, press F8 during reboot just before Windows flag
screen appears.

- Scan with MSAS and Lavasoft Adaware, choose "full scans".

- Restart, if your fault message appears again, check msconfig.
Start > Run > msconfig > Startup tab and look for your "DOCEOC16B1",
uncheck this entry.

And let us know if it works.............


--
plun





Kevin expressed precisely :

 

[AndyManchesta]

It sounds like the Registry run command for this is still present which
is causing the error's on reboot because it cannot find the file.

Open Notepad and copy and paste this into it:


regedit /e HKCURun.txt
"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run"
regedit /e HKLMRun.txt
"HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run"
copy HKLMRun.txt + HKCURun.txt = Output.txt
del /q HKLMRun.txt
del /q HKCURun.txt
notepad Output.txt
del /q Output.txt


Name it export.bat and save it as type "All Files" and save it to
desktop or c:\drive

Double click export.bat and post back the contents listed in notepad


The alternative would be to use Hijack This and fix this line:

O4 - HKLM\..\Run: [98D0CE0C16B1] rundll32.exe D0CE0C16B1,D0CE0C16B1



Regards

Andy

 

[AndyManchesta]

Here's an easier option to remove that line from the
registry without needing batch scripts or Hijack This.

Open 'MSAS' goto 'Advanced tools', then 'System
Explorers', click 'Startup Programs' check the Run area's
for this '[98D0CE0C16B1]' entry, left click any found and
then from the lower right corner press 'Permanently
Remove Startup Program' then exit

Next time you reboot it then will not display the error

Regards

Andy

 

[Guest]

Thanks for the suggestion.
loaded CCleaner ran it and issues. cleaned out a lot. 900 + temp files and
327 issues. lavasofts Ad-Adware Se was already loaded - so just made update
check. It loaded a newer version. Restarted in safemode. Full scanned with
MSAS and Lavasoft Ad-adware. restarted and BLAM right there in front of me
again. Tried to locate in msconfig > startup tab. Found it. Unchecked it.
Then the viscous loop started. Window come up now telling me changes made am
starting up in specified or utility mode not normal mode. Click away you end
up on startup general tab. then around and around you go. Never getting to
start on desktop.
As i fiddled around on this issue over the last several days. I found out
Symantec (Norton) detacted this in June 2004. they give you six pages of
info. including three possible file names and lines of registry keys, values
and registry subkey created. Page 4 starts the removal instructions. Not hard
to follow until they want you to go to Registry Editor. four lines on pages
four then the entire page 5 and 9 lines on page 6. Then Navigate registry
subkey followed by delete any values in right pane if they exist then
navigate a registry key delete another right pane value. finally exiting.

If the problem can be covered by six pages of text from one source how come
the repair has to be performed manually by system owner? I think a "button"
needs to added to MSAS that will carry out repair automatically with another
firms info once authorized by user/owner/administrator hits another agree /
authorization button. This would eliminate any chance of mistyping all that
code for a common computer user like me who conciders himself an ID ten T
error. my rant for the day.

 

[Guest]

Hi Andy,
I did try this method. If you read my reply to Plun you will get the idea
where it took me.
I tried openning MSAS Advanced tools and going to Startup Programs.
Unfortunately, I could not find a way to expand the data in the pane and
nothing that was visible included the offending file number below.
I did try on normal: Start > RUN > config > startup An entry with file
number was there but it was already unchecked.

As for your second post on "regedit" your version is much shorter than
Symantec (Norton) six pages. I just know my own proof reading ability is poor
to fair from all my report writing at work before I retired at end of August.
So unwilling to attempt the Norton method of correction. As for your copy to
notepad > export rename save and post back. I lack the confidence in my
present PC skill set as I had techie support at work who did any repairs - I
would just get to sit there like a bump or get called away somewhere else
while they worked on the PC. Occasionally, a techie from head office would be
called from HO IT and they would talk you through a fix. That's when I shine
as an ID ten T error kind of guy.
I'll live with this issue for a while longer then perhaps find a local PC
shop i can take my IBM into and have them review the paper trail so to speak.

 

[Guest]

Hi Kevin

Sorry I lost track of this topic , Hope you managed to find a solution, With
the regedit part that was just a way to see what was set to run on your pc
when your machine starts,

Its probably best you didnt use it as this site broke up the lines and the
output would of included alot more than the run keys Its harmless though
as it doesnt make any changes, all it does is search the registry for the
specified keys and then outputs that to notepad and deletes the other text
files it created while searching, when its finished notepad would of opened
with the results,

Its difficult to help more on here as its complicated to explain how to
change the registry export script after this site changed the look of it by
breaking up the lines, The other method would of been to use HijackThis to
check the run keys but the use of that program isnt really appreciated on
this site either so Im stuck for ways to help more .

Email me if you want to anytime and I can post methods to fix it through
there, Just press my name when the message is opened and it should display my
email address, it would be a shame if you had to take this to a computer shop
and pay to get this fixed as its probably only a small problem but its hard
to give advise without seeing some details from your system first.

All The Best

Andy

 

[Jeremy Mquin]

Still there? This might help.....

I had the same problem and read a whole lot about it, in the end, too much information to sift through.
So, here is what I did to get rid of the problem:

1. Ran regedit (via Start-Run dialog box)
2. Searched for D0CE0C16B1 (Edit-search in Registry Editor)
3. Found: 98D0CE0C16B1 REG_SZ rundll32.exe D0CE0C6B1
4. Deleted it (right click and delete)
5. Close Regedit
6. Reboot, and the Rundll error message was gone.....


Will it work for you? Try searching the registry for this and if you see the same, try it.
Didn't seem to hurt anything as this is not a required program.

Good Luck!
JM