Unknown missing .dll messages

B

Brian Beckers

One of the computers on our network is receiving the following messages upon
startup:

Error loading C:\WINDOWS\System32\guvuvara.dll
The specified module could not be found.

Error loading C:\WINDOWS\System32\nufupubi.dll
The specified module could not be found.

I have no idea what these files are, where they came from, or why they
cannot be found.
After clicking through the messages, the computer appears to continue
startup and runs just fine.

Does anyone know what they are and how I can remove the error messages?
 
M

meerkat

Brian Beckers said:
One of the computers on our network is receiving the following
messages upon startup:

Error loading C:\WINDOWS\System32\guvuvara.dll
The specified module could not be found.

Error loading C:\WINDOWS\System32\nufupubi.dll
The specified module could not be found.

I have no idea what these files are, where they came from, or why they
cannot be found.
After clicking through the messages, the computer appears to continue
startup and runs just fine.

Does anyone know what they are and how I can remove the error
messages?

Sounds suspiciously like Malware.
Go tp www.google.com
and type in guvuvara.dll, you`ll get some hits to investigate
 
D

David H. Lipman

From: "meerkat" <[email protected]>


| Sounds suspiciously like Malware.
| Go tp www.google.com
| and type in guvuvara.dll, you`ll get some hits to investigate

| --
| bw..


Close...

Malware that was removed via anti malware and called by RUNDLL32.EXE and the line item
calling the DLL via RUNDLL32 was not removed and thus the error messages.
 
D

David H. Lipman

From: "Brian Beckers" <[email protected]>

| One of the computers on our network is receiving the following messages upon
| startup:

| Error loading C:\WINDOWS\System32\guvuvara.dll
| The specified module could not be found.

| Error loading C:\WINDOWS\System32\nufupubi.dll
| The specified module could not be found.

| I have no idea what these files are, where they came from, or why they
| cannot be found.
| After clicking through the messages, the computer appears to continue
| startup and runs just fine.

| Does anyone know what they are and how I can remove the error messages?


Execute MSCONFIG.EXE and find the line iem that loads the two DLL files and remove them be
being started.
 
P

PA Bear [MS MVP]

You've got a hijackware infection on your hands.

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

2. Run this online scan (in safe mode w/networking, if need be):
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run additional checks for hijackware, including posting your hijackthis
log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use (in
conjuction with some other utilities). HijackThis will NOT fix anything on
its own, but it will help you to both identify and remove any
hijackware/spyware with assistance from an expert. **Post your log to
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or another appropriate forum for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
 
E

Elmo

Brian said:
One of the computers on our network is receiving the following messages upon
startup:

Error loading C:\WINDOWS\System32\guvuvara.dll
The specified module could not be found.

Error loading C:\WINDOWS\System32\nufupubi.dll
The specified module could not be found.

I have no idea what these files are, where they came from, or why they
cannot be found.
After clicking through the messages, the computer appears to continue
startup and runs just fine.

Does anyone know what they are and how I can remove the error messages?

Some malware was deleted by your a/v software, but the references to the
files were not removed from the registry.

Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
type the name of the file, guvuvara.dll, into the search pane. Click
"Find Next", and when located, delete the reference to the file. Press
F3 to continue the search. Afterwards, do the same thing with the
second filename.

You can click File, Export, and save the entry to the Desktop. If you
remove it and there's a problem, double-click the .reg file you exported
to the Desktop and it'll be added to the registry again. You can create
a restore point before editing the registry too.

You could click Start, Run, type MSCONFIG, click OK, click the StartUp
tab, and deselect the item(s). When you restart the computer, you will
be warned that you're running in the Diagnostic mode; click to not alert
you again, and OK out. You won't see the message again. But I think
it's best to just remove the references from the registry.
 
T

The Real Truth MVP

Your issue is a prime example of why good registry cleaners are needed.
Don't listen to the others who say registry cleaners are "snake oil". To fix
your issue automatically, download CCleaner from here
http://www.ccleaner.com/ install it and when you run it select the registry
icon on the left to clean your registry. Let it fix all but choose to backup
when prompted. Your problem should then be fixed.
 
T

Thip

The Real Truth MVP said:
Your issue is a prime example of why good registry cleaners are needed.
Don't listen to the others who say registry cleaners are "snake oil". To
fix your issue automatically, download CCleaner from here
http://www.ccleaner.com/ install it and when you run it select the
registry icon on the left to clean your registry. Let it fix all but
choose to backup when prompted. Your problem should then be fixed.

Just a heads-up--RegSeeker is also very good and makes easy-to-restore
backups.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top