RUNDLL error

G

Guest

I'm running Windows XP SP2 on my computer and I've had a few problems with
Trojans recently which I think I've got rid of using Norton. However
whenever I start my computer now I get the following error message:

RUNDLL
Error loading c:\WINDOWS\System 32\qxxtnws.dll
The speciified module could not be found

Does anyone know what this message means? Although it doesn't appear to be
doing anything at the moment I'd like to get rid of it so it doesn't cause
any problems later. The only problem I've had is explorer needing to close?
Do you think the error message relates to Internet Explorer?

Thanks
 
G

Guest

Thanks Harry, will do. I've also just seen another reply to another RUNDLL
error which suggested running msconfig and unticking the box next to the file
on the startup tab. I'll give that a try first.

Cheers

Harry Ohrn said:
Some trojans, spyware and viruses are very difficult to remove. Try posting
your problem to this forum as they have fine experts there who might be able
to help you with this
http://aumha.net/viewforum.php?f=28&sid=6cf70886a36afa6619fbd7ca4034755c


--


Harry Ohrn MS MVP [Shell\User]
www.webtree.ca/windowsxp


Lindiloo said:
I'm running Windows XP SP2 on my computer and I've had a few problems with
Trojans recently which I think I've got rid of using Norton. However
whenever I start my computer now I get the following error message:

RUNDLL
Error loading c:\WINDOWS\System 32\qxxtnws.dll
The speciified module could not be found

Does anyone know what this message means? Although it doesn't appear to
be
doing anything at the moment I'd like to get rid of it so it doesn't cause
any problems later. The only problem I've had is explorer needing to
close?
Do you think the error message relates to Internet Explorer?

Thanks
Click to expand...
Click to expand...
 
N

Newbie Coder

Lindliloo,

This is the newsgroup for XP problems so I don't see why the other user pointed
you to that other forum

-----------------------------

If you look in one of a few places (listed below) you may find where its
starting up from:

You can download this free too it will help you:

Page:

http://www.microsoft.com/technet/sysinternals/utilities/autoruns.mspx

Direct Download:

http://download.sysinternals.com/Files/Autoruns.zip


If you look of the LOGON tab under the two RUN keys you may see a link to this
file listed

Then click the WINLOGON tab to see if its listed there too

If so, you can UNTICK (UNCHECK) it, restart & see if the error has disappeared.
if so, the entry you unticked (unchecked) can be deleted

One other place that you can look is START | ALL PROGRAMS | STARTUP & see if its
listed there too. To delete anything from there is simple just right-click the
START button | EXPLORE | Navigate to the STARTUP folder & delete it

If you find the said DLL file, Quarantine it using Norton & submit to them
choosing don't strip out contents... There is another way to submit to Symantec
& its the way I always use & its to zip the file, rename the zip to
'Submission', add a encrypted password to that file (password = infected) then
e-mail the zip file to:

(e-mail address removed)

After a few mins, you will receive an e-mail back from Symantec saying your
tracking number is in the subject line of the e-mail. Later you will get a
message back saying it has been analysed by the automated process & if they
found anything a link to the virus/trojan/adware/malware/spyware on the Symantec
site which will give you either a removal tool or a way to delete it manually
with all the entries shown. Within 24-48 hours there will be virus definitions
out to protect you against this threat for the file you submitted to them
 
E

Elmo

Lindiloo said:
I'm running Windows XP SP2 on my computer and I've had a few problems with
Trojans recently which I think I've got rid of using Norton. However
whenever I start my computer now I get the following error message:

RUNDLL
Error loading c:\WINDOWS\System 32\qxxtnws.dll
The speciified module could not be found

Does anyone know what this message means? Although it doesn't appear to be
doing anything at the moment I'd like to get rid of it so it doesn't cause
any problems later. The only problem I've had is explorer needing to close?
Do you think the error message relates to Internet Explorer?

Thanks
Click to expand...

A Google Groups search showed no mention of that file, other than your
post. That suggests that some malware was removed, but the reference to
the file was not removed from the registry.

Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
type the name of the file into the search pane. Click "Find Next", and
when located, delete the reference to the file. Press F3 to continue
the search.

You can click File, Export, and save the entry to the Desktop, attach
the file to a post in this thread; someone might note whether it's safe
to delete first. If you remove it and there's a problem, double-click
the .reg file you exported to the Desktop and it'll be added to the
registry again. You can create a restore point before editing the
registry too.
 
G

Guest

Lindiloo said:
I'm running Windows XP SP2 on my computer and I've had a few problems with
Trojans recently which I think I've got rid of using Norton. However
whenever I start my computer now I get the following error message:

RUNDLL
Error loading c:\WINDOWS\System 32\qxxtnws.dll
The speciified module could not be found

Does anyone know what this message means? Although it doesn't appear to be
doing anything at the moment I'd like to get rid of it so it doesn't cause
any problems later. The only problem I've had is explorer needing to close?
Do you think the error message relates to Internet Explorer?

Thanks
Click to expand...

First thing I will try is Right click this DLL File and select properties
then there see if there are any info about it, but it doesn't seem friendly
to me!.
Then perform these cleaning steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Taps:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

2... You need to be sure your system is clean from malware and Viruses by
scanning for them
Scan for malwares from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
Run a scan from here on-line:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
http://free.grisoft.com/doc/5390/lng/us/tpl/v5
Then download these tools to see the running processes in real-time and you
can search them to make sure they are Legit.
"Process Explorer for Windows v10.21"
http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

"AutoRuns for Windows v8.61 By Mark Russinovich and Bryce Cogswell"
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Autoruns.mspx
=How to perform a clean boot procedure to prevent background programs from
interfering with a game or a program that you currently use
http://support.microsoft.com/kb/331796
HTH.
Let us know.
Regards,
nass
 
U

Uncle Grumpy

First thing I will try is Right click this DLL File and select properties
then there see if there are any info about it, but it doesn't seem friendly
to me!.
Then perform these cleaning steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start >> Control Panel >> Double click Network and Internet
Connections >> Double click Internet Options.
On the IE properties windows you will see these Taps:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256

2... You need to be sure your system is clean from malware and Viruses by
scanning for them
Scan for malwares from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
Run a scan from here on-line:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
http://free.grisoft.com/doc/5390/lng/us/tpl/v5
Then download these tools to see the running processes in real-time and you
can search them to make sure they are Legit.
"Process Explorer for Windows v10.21"
http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

"AutoRuns for Windows v8.61 By Mark Russinovich and Bryce Cogswell"
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Autoruns.mspx
=How to perform a clean boot procedure to prevent background programs from
interfering with a game or a program that you currently use
http://support.microsoft.com/kb/331796
HTH.
Let us know.
Regards,
nass
Click to expand...

If you're trying to become an XP "MVP" I wish you luck.
 
H

Harry Ohrn

True this is a group for XP problems however the problem is not an XP
problem. The file mentioned "qxxtnws.dll" is not an XP file. It is likely a
related to a tojan, spyware or some other non XP application. I pointed the
OP to arguably the best resource on the internet to get help for the
problem.
 
G

Guest

Thanks for your response. The first search brought up the following files:

(Default) REG_SZ (value not set)
ID REG_SZ 26776
Name REG_SZ qxxtnws.dll
Path REG_SZ C:\WINDOWS\system32\

And the second search brought up the following files:

(Default) REG_SZ (value not set)
Command REG_SZ rundll32.exe C:\WINDOWS\system32\qxxtnws.dll, TurnOn2
Hkey REG_SZ HKLM
Inimapping REG_SZ 0
Item REG_SZ qxxtnws
Key REG_SZ SOFTWARE\ Microsoft\ Windows\ CurrentVersion\ Run

Am I supposed to delete all these files or just the 'Name' and 'Item' files?

Thanks

Lynn
 
N

Newbie Coder

Harry,

The are spyware groups among the microsoft newsgroups too. No need to go
external

Yes, that file isn't legitimate & obviously mde up by the trojan itself & the
chances of finding it on the net are basically zero percent

By using one of the two methods I posted as the user user Norton will at least
get the file identified & correct removal instructions pointed to

On the other panel there are two things they are likely to say:

1) Use Spybot, Ad-Aware
2) Use HiJackThis

But the chances are none of those steps will work because No. 1 basically have a
few trojans in their detections & No. 2 won't identify it either

If you remember from the OP's orginal message he/she are getting a start up
error that the file isn't found. So, removing that rundll32.exe entry from one
of the startup locations would remove the error. So, there is no reason to go to
another place for the answer, is there?

--
Newbie Coder
(It's just a name)


Harry Ohrn said:
True this is a group for XP problems however the problem is not an XP
problem. The file mentioned "qxxtnws.dll" is not an XP file. It is likely a
related to a tojan, spyware or some other non XP application. I pointed the
OP to arguably the best resource on the internet to get help for the
problem.

--


Harry Ohrn MS MVP [Shell\User]
www.webtree.ca/windowsxp
Click to expand...
 
E

Elmo

Lindiloo said:
Thanks for your response. The first search brought up the following files:

(Default) REG_SZ (value not set)
ID REG_SZ 26776
Name REG_SZ qxxtnws.dll
Path REG_SZ C:\WINDOWS\system32\

And the second search brought up the following files:

(Default) REG_SZ (value not set)
Command REG_SZ rundll32.exe C:\WINDOWS\system32\qxxtnws.dll, TurnOn2
Hkey REG_SZ HKLM
Inimapping REG_SZ 0
Item REG_SZ qxxtnws
Key REG_SZ SOFTWARE\ Microsoft\ Windows\ CurrentVersion\ Run

Am I supposed to delete all these files or just the 'Name' and 'Item' files?

Thanks

Lynn
Click to expand...

Highlight the open key (folder) in the left column, export as a safety
measure, then delete the key. Do that with both of them, export, then
delete, selecting the "folder" in the left pane that contains all the
mentioned entries.
 
H

Harry Ohrn

Newbie Coder said:
Harry,

The are spyware groups among the microsoft newsgroups too. No need to go
external

Yes, that file isn't legitimate & obviously mde up by the trojan itself &
the
chances of finding it on the net are basically zero percent

By using one of the two methods I posted as the user user Norton will at
least
get the file identified & correct removal instructions pointed to

On the other panel there are two things they are likely to say:

1) Use Spybot, Ad-Aware
2) Use HiJackThis

But the chances are none of those steps will work because No. 1 basically
have a
few trojans in their detections & No. 2 won't identify it either

If you remember from the OP's orginal message he/she are getting a start
up
error that the file isn't found. So, removing that rundll32.exe entry from
one
of the startup locations would remove the error. So, there is no reason to
go to
another place for the answer, is there?
Click to expand...

Yes there are always reasons to look in more places than just one.
 
G

Guest

Many thanks to all who responded to my post below. I think I have sorted the
problem using a range of your suggestions. However I am now tackling my
daughters computer which is worse than mine - I will be posting those queries
shortly!

Lynn
 
C

codefire

Somone please help me with the same. I get the RUNDLL error
C:\windows
system32\atgban.dll
When on internet explorer I get multiple windows opening for no reason.

Thanks
 
M

Malke

codefire said:
Somone please help me with the same. I get the RUNDLL error
C:\windows
system32\atgban.dll
When on internet explorer I get multiple windows opening for no reason.
Click to expand...

Next time make a new post instead of tacking yours onto someone else's
thread.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://tinyurl.com/yoeru3 - download link and more instructions

When all else fails, get guided help. Choose one of the specialty forums
listed at the first link. Register and read its posting FAQ. PLEASE DO NOT
POST LOGS IN THE MS NEWSGROUPS.

Standard disclaimer: I can't see and test your computer myself, so these are
just suggestions based on many years of being a professional computer tech;
suggestions based on what you've written. You should not take my
suggestions as a definitive diagnosis. If you can't do the work yourself
(and there is no shame in admitting this isn't your cup of tea), take the
machine to a professional computer repair shop (not your local equivalent
of BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may be
so infested that Windows will need to be clean-installed. If possible, have
all your data backed up before you take the machine into a shop.

Malke
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

RUNDLL error question 3
Window Start-up Rundll Error 11
rundll error 1
RUNDLL Error loading ... 15
RUNDLL error and Windows Live Communications Platform error 1
start up 8
RUNDLL error 2
RUNDLL Error Message help! 5

Top