Go Back   Computer Juice > Computer Software > Virus, Spyware & Security
Register Points Site Spy New Posts Donate Unanswered Posts Members Search

>>> Get Paid to Hang Out Here! Activity = Points = Prizes. Want to Know More? <<<

Reply
 
LinkBack Thread Tools
  #1  
Old 27th Oct 2007
tmockingbird's Avatar
CJ Member
 
tmockingbird is offline
 
Join Date: 17th Oct 2007
Last Online: 25th Apr 2008 09:43 PM
Posts: 31
iTrader: (0)
tmockingbird is on a distinguished road
Default rundll32.exe error.

Every time I try to play a free online game, such as Soldier Front (IJJI), GunZ (IJJI), MapleStory (Nexon), KartRider (Nexon), etc... I get an error saying it couldn't write/read from a certain address in rundll32.exe. However, when I try to play Call Of Duty or Counter Strike I have no problems at all.
I was recently infected by some spyware, so I'm pretty sure there's a link. I tried replacing my old rundll32.exe by a clean one I downloaded (trustworthy website), but that didn't help.
Here's my hijackthis log:

Here's a picture of the registry key: http://i22.tinypic.com/10cok0l.jpg. Daemon appears to be involved, but I haven't downloaded/used any Daemon tools on this laptop at all.


Any help/advice is appreciated.

tmockingbird
Attached Files
File Type: txt tmockingbird.txt (5.9 KB, 6 views)

Last edited by evilfantasy : 27th Oct 2007 at 08:34 PM.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #2  
Old 27th Oct 2007
evilfantasy's Avatar
CJ Moderator
Intel ATi
evilfantasy is offline
Send a message via Yahoo to evilfantasy
 
Join Date: 16th Jul 2007
Last Online: 3 Hours Ago 07:29 AM
Posts: 4,914
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default rundll32.exe error.

C:\WINDOWS\system32\NvCpl.dll,NvStartup
This is loaded as a startup item. This loads the Nvidia Control Panel which is where you can tweak a ton of settings and overclock your card. Without this your drivers will be rather messed up and may or may not work properly. The normal location of this file is C:\WINDOWS\system32\NvCpl.dll.
Go to C:\Program Files\Trend Micro\HijackThis\HijackThis.exe Right click it and rename it to analyze.exe

The log does not show anything that points to malware. But we can not be fully sure without the information in This Post
__________________
.
.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #3  
Old 27th Oct 2007
tmockingbird's Avatar
CJ Member
 
tmockingbird is offline
 
Join Date: 17th Oct 2007
Last Online: 25th Apr 2008 09:43 PM
Posts: 31
iTrader: (0)
tmockingbird is on a distinguished road
Default rundll32.exe error.

Add Or Remove - Nothing
Startup Mode - Normal
House Cleaning - Cleaned using CCleaner
Spyware Scanner - Scanned using Spyware Doctor
Online Scan - Blegh, didn't do this one but used my Kaspersky instead.
Hijack This - Posted log above.

I downloaded NvCpl.dll, but it's not letting me replace it with the current one ("A file with the name you specified already exists. Specify a different name."). Should I try in Device Manager or am I on the wrong track?



Edit: device manager didn't work, downloading drivers (to repair the corrupt? file).

Last edited by tmockingbird : 27th Oct 2007 at 08:49 PM.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #4  
Old 27th Oct 2007
evilfantasy's Avatar
CJ Moderator
Intel ATi
evilfantasy is offline
Send a message via Yahoo to evilfantasy
 
Join Date: 16th Jul 2007
Last Online: 3 Hours Ago 07:29 AM
Posts: 4,914
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default rundll32.exe error.

You can look in Device Manager and see if anything is not working properly.

Try this RadarSync

It will scan your computer for out of date drivers.
__________________
.
.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #5  
Old 27th Oct 2007
tmockingbird's Avatar
CJ Member
 
tmockingbird is offline
 
Join Date: 17th Oct 2007
Last Online: 25th Apr 2008 09:43 PM
Posts: 31
iTrader: (0)
tmockingbird is on a distinguished road
Default rundll32.exe error.

I scanned using that website, and it only gave me driver updates irrelevant to my graphics drivers (ethernet controller, bluetooth and LAN network adapter). Uhm.. should I just reformat?
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #6  
Old 27th Oct 2007
evilfantasy's Avatar
CJ Moderator
Intel ATi
evilfantasy is offline
Send a message via Yahoo to evilfantasy
 
Join Date: 16th Jul 2007
Last Online: 3 Hours Ago 07:29 AM
Posts: 4,914
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default rundll32.exe error.

It is possible that the games are not compatible with your hardware.

I will PM Alex and ask him to look at this thread to see if he knows anything about this.
__________________
.
.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #7  
Old 27th Oct 2007
tmockingbird's Avatar
CJ Member
 
tmockingbird is offline
 
Join Date: 17th Oct 2007
Last Online: 25th Apr 2008 09:43 PM
Posts: 31
iTrader: (0)
tmockingbird is on a distinguished road
Default rundll32.exe error.

I've been playing all those games just fine up till now, and after that spyware/adware I got and removed, something changed.

Thanks for your help so far!
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #8  
Old 27th Oct 2007
evilfantasy's Avatar
CJ Moderator
Intel ATi
evilfantasy is offline
Send a message via Yahoo to evilfantasy
 
Join Date: 16th Jul 2007
Last Online: 3 Hours Ago 07:29 AM
Posts: 4,914
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default rundll32.exe error.

What malware was found and what did you do/use to remove it?
__________________
.
.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #9  
Old 27th Oct 2007
alex's Avatar
alex  Scotland
CJ Moderator
Intel Nvidia
alex is offline
 
Join Date: 28th Feb 2007
Last Online: 2 Weeks Ago 07:25 AM
Posts: 3,843
iTrader: (1)
alex has a reputation beyond reputealex has a reputation beyond reputealex has a reputation beyond reputealex has a reputation beyond reputealex has a reputation beyond reputealex has a reputation beyond reputealex has a reputation beyond reputealex has a reputation beyond reputealex has a reputation beyond reputealex has a reputation beyond reputealex has a reputation beyond repute
Default rundll32.exe error.

It's not driver or hardware related as your games work when not playing online.

It sounds very much like malware to me, the only problem is that there are also some legitimate uses for (and legitimate files called) rundll. What could be causing the problem is that rundll.exe is resident in the Nvidia control panel. It's used to load the system tray.

Rundll32.exe is a windows system file used to make .dll files run as a regular application so it's a bulls-eye target for intrusion attempts, calling themselves the same.

Go into task manager please > processes > tell me how many instances of this .dll you have running.
__________________
heard wow is a better contraceptive then the pill, no joke i played rs for 2-3 years and 2 weeks after i stopped i lost my virginity.

-Kanoakavirus


Computer Juice raffle
- Win PC hardware of your choice worth £500 / €680 / $1000 - Enter HERE!
__________________

My System: Zoomy

CPU(s):
E8400 @ 3.6ghz (400x9) @ 1.15v
Motherboard:
Asus P5K Premium
RAM:
2GB Dominator 8500
Graphics Card(s):
BFG 8800GT
Sound Card:
Xfi Extremegamer
Hard Drive(s):
3.35TB ext storage. 2TB int storage
Optical Drive(s):
LG GGC H20L
Case / PSU:
Enermax 720w
Cooling:
AC7
Network / Internet:
Monitor(s):
245B, 931B (Samsung)
Operating System(s):
Vista 32P

Want your system info in your signature?
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #10  
Old 27th Oct 2007
evilfantasy's Avatar
CJ Moderator
Intel ATi
evilfantasy is offline
Send a message via Yahoo to evilfantasy
 
Join Date: 16th Jul 2007
Last Online: 3 Hours Ago 07:29 AM
Posts: 4,914
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default rundll32.exe error.

Without the logs requested in the removal guide we can not see what may be wrong.
__________________
.
.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote

Please support this forum, donate towards our running costs.


Reply


Thread Tools

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
windows error robina80 Windows Operating Systems 7 15th Jun 2008 06:10 PM
error 17?!?! gaza14 Linux & Alternative OS 4 9th Apr 2008 05:08 PM
DMA-driver error, CRC error ghbnic Drives & Removable Media 6 2nd Apr 2008 07:44 PM
Windows host process (rundll32) has stopped working windows3001 Windows Operating Systems 1 22nd Jan 2008 08:38 PM
I need help with rundll32.exe nosoup4crr Windows Operating Systems 1 19th Jan 2008 06:56 PM


Copyright ©2006 - 2008 Computer Juice - Forums - Free PC Help, IT Support and Repairs.

Powered by vBulletin® Copyright ©2000 - 2008 Jelsoft Enterprises Ltd. SEO by vBSEO ©2008, Crawlability, Inc.

Page copy protected against web site content infringement by Copyscape