Missing DLL's

[GregNga]

Whenever I boot up my computer, I get several dialogue box's that tell me a
..DLL is missing. They are C:\Windows\System32\bewodanu.dll and
C:\Windows\System32\guhiziho.dll. After I click OK, everything seems to work
OK but it happens everytime I boot. I think this was caused by one of these
registry cleanup programs that someone downloaded onto my computer (without
my permission)

 

[Pegasus [MVP]]

Whenever I boot up my computer, I get several dialogue box's that tell me
a
.DLL is missing. They are C:\Windows\System32\bewodanu.dll and
C:\Windows\System32\guhiziho.dll. After I click OK, everything seems to
work
OK but it happens everytime I boot. I think this was caused by one of
these
registry cleanup programs that someone downloaded onto my computer
(without
my permission)

It is equally likely that these DLL references are the residue of some
cleaned-up virus infection. Run msconfig.exe, then inspect the list under
the Startup tab for suspicious items. Untick them if you don't recognise
them.

 

[nass]

Whenever I boot up my computer, I get several dialogue box's that tell me a
.DLL is missing. They are C:\Windows\System32\bewodanu.dll and
C:\Windows\System32\guhiziho.dll. After I click OK, everything seems to work
OK but it happens everytime I boot. I think this was caused by one of these
registry cleanup programs that someone downloaded onto my computer (without
my permission)

Your Anti-virus may be removed the viral infection but still in the Root
system and on the Registry, please perform the cleaning steps to make sure
nothing lurking in the background to revive the infestation back to action!.

Unexplained computer behaviour may be caused by deceptive software
http://support.microsoft.com/kb/827315

Go through these Cleaning steps:
- First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
install the free trial of Windows Live OneCare
http://onecare.live.com/standard/en-gb/default.htm

http://www.microsoft.com/mscorp/safety/technologies/onecare/default.mspx

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

You can download this tool "AutoRuns for Windows"
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
And remove the entry from here:

Locate this key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run = look in
the right pane/window and remove the entry for it
"C:\Windows\System32\bewodanu.dll"
"C:\Windows\System32\guhiziho.dll"
Run disk cleanup and defrag in safe mode. Then run this command:
sfc /scannow

If you still having trouble Download the Hijackthis and send the report to
one of
many
forums for analysis and troubleshooting or you can send it to me on my email
provided at the bottom:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)

Can you please send me a copy at (e-mail address removed) ,
remove the obvious to email me.

HTH.
nass

 

[Elmo]

Whenever I boot up my computer, I get several dialogue _boxes_ that tell me a
".DLL is missing". They are C:\Windows\System32\bewodanu.dll and
C:\Windows\System32\guhiziho.dll. After I click OK, everything seems to work
OK but it happens every time I boot. I think this was caused by one of these
registry cleanup programs that someone downloaded onto my computer (without
my permission).

It's possible some malware was deleted by your a/v software, but the
reference to the file was not removed from the registry.

Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
type the name of the file into the search pane. Click "Find Next", and
when located, delete the reference to the file. Press F3 to continue
the search.

You can click File, Export, and save the entry to the Desktop. If you
remove it and there's a problem, double-click the .reg file you exported
to the Desktop and it'll be added to the registry again. You can create
a restore point before editing the registry too.

You could click Start, Run, type MSCONFIG, click OK, click the StartUp
tab, and deselect the item(s). When you restart the computer, you will
be warned that you're running in the Diagnostic mode; click to not alert
you again, and OK out. You won't see the message again. But I think
it's best to just remove the references from the registry.

 

[Randem]

That is the perfect reason for a good registry cleaner and a competent
operator of it to remove those sorts of remenants in the registry. Someone
who knows what they are doing with registry cleaners could be helpful here
or you could take the manual approach which is even more dangeous for if you
screw up you have no backup unless you back up the registry first before
attempting to edit it by creating a restore point. One should be created in
any event...

--
Randem Systems
Your Installation Specialist
The Top Inno Setup Script Generator
http://www.randem.com/innoscript.html
Disk Read Error Press Ctl+Alt+Del to Restart
http://www.randem.com/discus/messages/9402/9406.html?1236319938

 

[Pegasus [MVP]]

That is the perfect reason for a good registry cleaner and a competent
operator of it to remove those sorts of remenants in the registry. Someone
who knows what they are doing with registry cleaners could be helpful here
or you could take the manual approach which is even more dangeous for if
you screw up you have no backup unless you back up the registry first
before attempting to edit it by creating a restore point. One should be
created in any event...

"Good registry cleaner"? Sounds like a contradiction in terms. How
would the registry cleaner know what to remove and what not to
touch? IMHO fixing up this type of problem requires the power of
human reasoning, not some automatic process that is likely to wreak
havoc, turning an irritating situation into a complete disaster.

 

[Randem]

Where did you find the words "Automatic" in anything i stated??? BTW: Human
reasoning is something that should be used in every situation, why would you
think that it should only be used in just this one???

--
Randem Systems
Your Installation Specialist
The Top Inno Setup Script Generator
http://www.randem.com/innoscript.html
Disk Read Error Press Ctl+Alt+Del to Restart
http://www.randem.com/discus/messages/9402/9406.html?1236319938

 

[Tim Meddick]

Hi Nass,
a slight error on your par, I think... You wrote "Locate this key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run"...
However, as this may well be the autorun key under which executables are
loaded at user start-up, it will never contain references to .dll files.
The best way, I think, to deal with the error message is this. Having
determined that the files are not necessary, as it pretty much seems that
they are not. Then in Regedit.exe, start a search for the offending
filenames, one at a time, and delete anything that references them. This
will stop there being an attempt to load these (nonexistent) files from now
on and no more having to answer "ok" to error messages.
--

Cheers, Tim Meddick, Peckham, London.

Whenever I boot up my computer, I get several dialogue box's that tell me
a
.DLL is missing. They are C:\Windows\System32\bewodanu.dll and
C:\Windows\System32\guhiziho.dll. After I click OK, everything seems to
work
OK but it happens everytime I boot. I think this was caused by one of
these
registry cleanup programs that someone downloaded onto my computer
(without
my permission)

Your Anti-virus may be removed the viral infection but still in the Root
system and on the Registry, please perform the cleaning steps to make sure
nothing lurking in the background to revive the infestation back to
action!.

Unexplained computer behaviour may be caused by deceptive software
http://support.microsoft.com/kb/827315

Go through these Cleaning steps:
- First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
install the free trial of Windows Live OneCare
http://onecare.live.com/standard/en-gb/default.htm

http://www.microsoft.com/mscorp/safety/technologies/onecare/default.mspx

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

You can download this tool "AutoRuns for Windows"
http://technet.microsoft.com/en-us/sysinternals/bb963902.aspx
And remove the entry from here:

Locate this key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run = look in
the right pane/window and remove the entry for it
"C:\Windows\System32\bewodanu.dll"
"C:\Windows\System32\guhiziho.dll"
Run disk cleanup and defrag in safe mode. Then run this command:
sfc /scannow

If you still having trouble Download the Hijackthis and send the report to
one of
many
forums for analysis and troubleshooting or you can send it to me on my
email
provided at the bottom:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)

Can you please send me a copy at (e-mail address removed) ,
remove the obvious to email me.

HTH.
nass

 

[nass]

Hi Nass,
a slight error on your par, I think... You wrote "Locate this key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run"...
However, as this may well be the autorun key under which executables are
loaded at user start-up, it will never contain references to .dll files.
The best way, I think, to deal with the error message is this. Having
determined that the files are not necessary, as it pretty much seems that
they are not. Then in Regedit.exe, start a search for the offending
filenames, one at a time, and delete anything that references them. This
will stop there being an attempt to load these (nonexistent) files from now
on and no more having to answer "ok" to error messages.

Hi Tim,
I agree with you on some of your input. But deleting the entry/ file from
the run on the HKEY_C_U\ will also delete the Key from the HKEY_L_M\Software
and the reset will be taken care of with the scanners and the antimalware
which will either removeor neutralize the left over !
HTH,
nass

 

[Tim Meddick]

This is exactly what I was saying but put a little better---