Login 
 Search | |
| |
08-Jul-2004, 03:52 PM
#1 | |||||
 RUNDLL error, please help!!! its been for months! okay well for months now i have had this RUNDLL error pop up everytime i turn on my computer. it says the application cannot find : C:\WINDOWS\System32:bahyaaf.dll and it says that is a RUNDLL error. i dont know if there is even such a thing as that bahyaaf.dll cause i tried to search for it on line and download it but i couldnt find anything even close to it.  it pops up everytime i turn on the computer and it has been for months and its annoying i really want to get rid of it. also i dont know if this is because of that error, but everytime i open a folder, whenever i close the folder, the computer freezes (doesnt freeze completely its like 'half frozen', like i cant open any new programs, and it does that thing where when i try to move my windows around it kind of cascades in the background...like you can see it move and the picture gets stuck there. also none of the icons or anything works anymore on the desktop because of that either). i downloaded that weird pc doctor or whatever but it ended up having an error within itsself so that didnt go far.  i have a windows XP, and i dont know if this might doanything, but i've stopped using internet explorer completely because it was causing so many problems and i've always hated it. so now i use opera an di have not had one internet problem but i just wanna know if that might do anything weird to my computer  anyways if anyone has a clue please please PLEASE HELP!!!!!!!! |
| |
08-Jul-2004, 04:03 PM
#2 | ||||||
|
__________________ Note: I have very limited time during weekdays to visit here, so there will be a delay in replying UK timezone Please let us know what the final solution was to any problem posted |
08-Jul-2004, 04:03 PM
#3 | ||||||
| Welcome to TSG!!  Make a folder on your hard drive, like My Documents\HJT Download Hijackthis. Unzip the file to the folder on your hard drive. Double click on Hijackthis.exe then click on the "Scan" button, then click on "Save Log". Copy and paste it back here and someone will be happy to review it. Don't make any changes until instructed to do so. |
08-Jul-2004, 11:10 PM
#4 | |||||
| hijackthis log |
09-Jul-2004, 12:22 AM
#5 | |||||
| |
09-Jul-2004, 04:43 AM
#6 | ||||||
|
__________________ Note: I have very limited time during weekdays to visit here, so there will be a delay in replying UK timezone Please let us know what the final solution was to any problem posted |
09-Jul-2004, 11:25 AM
#7 | ||||||
 Click on the link below to get lsp-fix. Run that to fix your internet connection. http://www.cexx.org/lspfix.htm Check the box that says "I know what I'm doing". Remove inetadpt.dll only that one! Reboot and delete the file. Go here http://www.thespykiller.co.uk/ and click on Downloads to get the peper trojan uninstaller. Just click on the uninst.exe and let it run. When it is finished it will just close. There will be no dialogue. Also you must be connected to the internet for the uninstaller to be effective. Reboot. Click on the link below to download CWshredder. http://www.spywareinfo.com/~merijn/files/cwshredder.zip Run the program and let it do it's thing. Make sure to click on "Fix" and not scan only. Reboot. Download Spybot http://www.spybot.us/spybotsd13.exe Click on "Search For updates" when prompted. Scan, click on fix problems. Reboot. Download AdAware http://www.lavasoftusa.com/support/download/ Before you scan with AdAware, check for updates of the reference file by clicking on "Check for updates now", connect. After the updates are installed click "Finish". Install the program and launch it. First in the main window look in the bottom right corner and click on Check for updates now and download the latest reference files. Make sure the following settings are made and on -------ON=GREEN From main window :Click Start then Activate in-depth scan (recommended) Click Use custom scanning options then click Customize and have these options selected: Under Drives and Folders put a check by Scan within archives and below that under Memory and Registry put a check by all the options there. Now click on the Tweak button in that same window. Under Scanning engine select "Unload recognized processes during scanning". Under Cleaning Engine select "Let windows remove files in use at next reboot". Click proceed to save your settings. Now to scan just click the Next button. When the scan is finished mark everything for removal and get rid of it. (Right-click the window and choose select all from the drop down menu and click Next) Reboot and post another HJT log for review. |
09-Jul-2004, 12:57 PM
#8 | |||||
| this is the new HJT log, only 1/5 of the size of it was before. and now i can open folders and close them (thank the lord cause its very hard to do things on the computer if you cant open folders) BUT, i STILL have that RUNDLL error when i start up my computer. AND now i have TWO MORE. / means next line 1.) RUNDLL / Error loading C:\WINDOWS\System32:bahyaaf.dll / The specified module could not be found. 2.) RUNDLL / Error loading C:\WINDOWS\bs3.dll / The specified module could not be found. 3.) RUNDLL / Error loading C:\WINDOWS\bsx5.dll / The specified module could not be found. and also when i ran ad-aware, it said it could not remove these things for some reason and i told it to remove it on the next start up (but when i started it up again it was still there, i ran ad aware again, hte list got smaller but heres the ones that havent been removed yet (they will bein the next start up...or so thats what it told me) Ad-Aware List of things havent been removed , scheduled to on next start up: C:\progra~1\common~1\wintools\wtoolsb.dll files/wintools/wtoolsb.dll c:/program file/tv media/tvm.exe c:/program files/tv media/tvmbho.dll c:/program files/tv media/tvmcore.dll files/wintools/wsup.exe c:/program files/common files/wintools/wtoolsa.exe files/wintools/wtoolsc.cfg files/wintools/wtoolsd.cfg files/wintools/wtoolsp.cfg files/wintools/wtoolss.cfg okay and here is the new HJT log after i did all of that: Logfile of HijackThis v1.98.0 Scan saved at 10:47:42 AM, on 7/9/2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\STOPzilla!\szntsvc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\WinTools\WToolsS.exe C:\Program Files\Ahead\InCD\InCD.exe C:\WINDOWS\system32\llass.exe C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe C:\WINDOWS\pldkyyot.exe C:\Program Files\HP\HP Software Update\HPWuSchd.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\PROGRA~1\AIM95\aim.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe C:\Program Files\CallWave\IAM.exe C:\Program Files\Common Files\WinTools\WSup.exe C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe C:\WINDOWS\System32\HPZipm12.exe C:\Program Files\Common Files\WinTools\WToolsA.exe C:\WINDOWS\system32\notepad.exe C:\Documents and Settings\JOHN WANG\Local Settings\Temp\Temporary Directory 1 for HijackThis.zip\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {707E6F76-9FFB-4920-A976-EA101271BC25} - (no file) O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: WhistleHlprObj Class - {27557cf1-a237-496d-8c8f-08f3844c6a8b} - C:\Program Files\whistlesoftware\WselServices\WhistleHelper.dll (file missing) O2 - BHO: (no name) - {4EBB6A47-C1B5-4649-97A7-EB0F85EB010F} - (no file) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll O2 - BHO: YokoMoto.Gum - {971387E1-EAA4-45F3-BA6E-A2C1857C68C2} - C:\WINDOWS\System32\Yoko.dll O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\WINDOWS\System32\StopzillaBHO.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: (no name) - {339BB23F-A864-48C0-A59F-29EA915965EC} - (no file) O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe O4 - HKLM\..\Run: [Bsx3] RunDLL32.EXE C:\WINDOWS\bs3.dll,DllRun O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [bxsx5] RunDLL32.EXE C:\WINDOWS\bsx5.dll,DllRun O4 - HKLM\..\Run: [updater] C:\Program Files\Common files\Updater\wupdater.exe O4 - HKLM\..\Run: [lar] C:\WINDOWS\system32\llass.exe O4 - HKLM\..\Run: [slmss] C:\Program Files\Common Files\slmss\slmss.exe O4 - HKLM\..\Run: [version] C:\WINDOWS\System32\version.exe O4 - HKLM\..\Run: [STOPzilla] "C:\Program Files\STOPzilla!\Stopzilla.exe" /autorun O4 - HKLM\..\Run: [YahooStock] C:\WINDOWS\i5imdy79.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe O4 - HKLM\..\Run: [aviyjyvm] C:\WINDOWS\pldkyyot.exe O4 - HKLM\..\Run: [bahyaaf] rundll32 C:\WINDOWS\System32:bahyaaf.dll,Init 1 O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe" O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [TV Media] C:\Program Files\TV Media\Tvm.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common Files\WinTools\WToolsA.exe O4 - HKLM\..\RunServices: [lar] C:\WINDOWS\system32\llass.exe O4 - HKLM\..\RunOnce: [TV Media] C:\Program Files\TV Media\Tvm.exe O4 - HKLM\..\RunOnce: [Ad-aware] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-aware.exe" "+b1" O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM95\aim.exe -cnetwait.odl O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [DealHelperDown] "C:\Documents and Settings\JOHN WANG\Local Settings\Temp\ms53.tmp" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [Utopia Angel] C:\Utopia\Angel\Angel.exe O4 - HKCU\..\Run: [msmc] C:\WINDOWS\System32\msgked.exe O4 - HKCU\..\RunOnce: [TV Media] C:\Program Files\TV Media\Tvm.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Image Transfer.lnk = ? O4 - Global Startup: Internet Answering Machine.lnk = C:\Program Files\CallWave\IAM.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: updater.lnk = C:\Program Files\Common Files\updater\wupdater.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Write a Review... - http://client.alexa.com/holiday/scri...ons/review.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll O9 - Extra button: Whistle - {220E39C3-B081-4719-AB1A-9A884DCBD05C} - C:\Program Files\WhistleSoftware\WselServices\webband.dll (file missing) O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll (file missing) O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll (file missing) O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM95\aim.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O16 - DPF: Yahoo! Chess - http://download.games.yahoo.com/game...ts/y/ct1_x.cab O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/game...s/y/potc_x.cab O16 - DPF: {16F2EA75-DF7F-4DA1-9F72-72EF6019AF79} - http://s92385319.onlinehome.us/bars/Sitehelper.cab O16 - DPF: {89D75D39-5531-47BA-9E4F-B346BA9C362C} (CWDL_DownLoadControl Class) - http://www.callwave.com/include/cab/CWDL_DownLoad.CAB O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - https://www.stopzilla.com/_download/...ler/dwnldr.cab O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - http://us.dl1.yimg.com/download.comp...bio5_1_6_0.cab O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll |
09-Jul-2004, 06:22 PM
#11 | |||||
| |
10-Jul-2004, 12:30 PM
#12 | |||||
| |
10-Jul-2004, 03:14 PM
#14 | |||||
| |
 |
| |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| |
| You Are Using:  |
Advertisements do not imply our endorsement of that product or service. All times are GMT -4. The time now is 11:08 AM. Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved. |  |
Facebook
Twitter
TechGuy.tv
TSG Mobile