There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
 
Tag Cloud
access audio avg avg 8 bios blue screen boot bsod computer connection cpu crash css dell desktop dma driver drivers dvd email error excel explorer firefox firefox 3 freeze gimp graphics hard drive hardware hijackthis hjt install internet internet explorer itunes keyboard laptop macro malware monitor motherboard network networking outlook outlook 2003 outlook 2007 outlook express pio problem problems router seo server slow sound sp3 spyware trojan usb video virtumonde virus vista vundo windows windows vista windows xp winxp wireless
Windows 95/98/Me
Search
Search in:
 
Advanced Search
Tech Support Guy Forums > Operating Systems > Windows 95/98/Me >
Runtime Error 21 at 00DC49D2 (ncsjapi43.exe)


HELLO AND WELCOME! Before you can post your question, you'll have to register -- it's completely free! Click here to join today! We highly recommend that you print a copy of our Guide for New Members. Enjoy!

 
Thread Tools
Shark01's Avatar
Junior Member with 6 posts.
 
Join Date: Aug 2008
Experience: Advanced
08-Aug-2008, 02:38 PM #16
JJJ999, you said you typed in: C:\system 32

You need to type in: CD "C:\WINDOWS\system32"

You left out the "CD" the "WINDOWS\" the "quotes ("")" and added a uneeded "Space" in between "system" and "32" if you really typed what you said you typed.


Typed it EXACTLY as dancoppock typed it.

It worked for me.
JJJ999's Avatar
Junior Member with 4 posts.
 
Join Date: Aug 2008
08-Aug-2008, 03:08 PM #17
Sorry about the errors in my fast typing shark, I did type exactly what dan typed, spaces, quotes, and all. After the C: it says it doesn't match internally or externally, and after the RMDIR it says that the file can't be found.
JMG777's Avatar
Junior Member with 1 posts.
 
Join Date: Aug 2008
08-Aug-2008, 06:56 PM #18
Try System Restore as Another Possible Solution to Facebook Virus
The system restore worked for me and I'm not much of a technical person. You can follow the instructions at the following link: http://support.microsoft.com/kb/304449 to restore your system to a date before the runtime error 21 issue occurred.

I was also able to do this by booting up in the "safe mode" (meant to boot up in safe mode - command prompt) and then was given the option to restore the system so I just tried it and it seems to have worked. The annoying windows are gone. Good luck.
djmellowfellow's Avatar
Junior Member with 11 posts.
 
Join Date: Aug 2008
Experience: Intermediate
09-Aug-2008, 05:29 PM #19
Problems
Hey, I've tried using HijackThis as suggested by some peops. In normal mode it shows up some files which end with the virus (ncsjapi32.exe). However, I've no idea how to use HJT in Safe/Command Prompt mode.

I've also tried Dancoppock's method but in fact I'm stumped when it gets to Safe/Command Prompt mode. I have no idea how to locate the file I want. I tried typing in many varieties of the following: CD"C:\WINDOWS\system32"
RMDIR splm /s

but every time I get a reply saying that ...is not recognized as an internal or external command... OR a reply saying that the system cannot find the path specified.

Can anyone help please?
momneedshelp's Avatar
Junior Member with 1 posts.
 
Join Date: Aug 2008
Experience: Beginner
09-Aug-2008, 11:01 PM #20
Just a quick thanks to dancoppock - My son picked up this runtime error 21 on facebook, I thought the error was related to McAfee since it wasn't working. Spent way too long working with them without results. Thanks for sharing you knowledge and skill.
kongkong's Avatar
Junior Member with 1 posts.
 
Join Date: Aug 2008
Experience: Intermediate
10-Aug-2008, 08:12 PM #21
Wink Runtime Error 21 at 00DC49D2 (ncsjapi43.exe)
JJJ999, djmellowfellow

You can try doing this...
Make sure you are on safemode with command prompt
type cd/
then cd %systemroot%\system32
then type RMDIR splm /S
danjo11's Avatar
Junior Member with 1 posts.
 
Join Date: Aug 2008
Experience: Intermediate
11-Aug-2008, 01:31 AM #22
That worked but now what...
Thanks everyone for the help. The command and safe mode worked for the error boxes. But I still cannot access certain antivirus sites like symantec. what should i do?

Thanks,

Danny
Shark01's Avatar
Junior Member with 6 posts.
 
Join Date: Aug 2008
Experience: Advanced
11-Aug-2008, 11:20 AM #23
danjo11

The virus changed some settings in the host files stored on your computer for Internet Explorer and just removing the virus does not fix that and therefore you still can not access those sites until the problem caused by the virus is fixed.

A few things to help you.

First, why the hell are you still using Internet Explorer? It is stupid, slow, and the least safe browser there is (well, actually, there are many with worse protection, but MOST viruses, malware, and other attacks specifically go for IE if any internet browser, so overall, it is the worst). Use Firefox. Better, faster, safer.

(BTW, When I saw people saying this virus was stopping them from accessing said antivirus sites, I tried them and they all loaded for me, but again, I use Firefox. I then thought "Maybe these are some stupid IE users", so I tried IE, and sure enough, those sites didn't work.)

Secondly, use Spybot Search & Destroy. It will fix things so IE can access those sites again. If you don't have Spybot, it is freeware, go get it. Update and check for errors, it will fix things. Also use the Immunization feature to better protect your computer from malware and other problems.
djmellowfellow's Avatar
Junior Member with 11 posts.
 
Join Date: Aug 2008
Experience: Intermediate
11-Aug-2008, 02:59 PM #24
Thank you Kongkong. I tried it as you suggested. When I typed in the RMDIR bit I was asked to confirm with a Y or N. I typed Y and nothing seemed to happen except a new line came up saying C:\WINDOWS\system32>

I tried it again and this time it said "The system cannot find the file specified". However, when I restarted the computer in normal mode the error boxes are no longer coming up so I think this may have fixed it! Yippee!

There are still some files on the computer according to Hijackthis - d'yu think I can safely delete these? I'll be keeping a close eye on this over the next few days. Thanks again - How did you work out how to do it?
NACW's Avatar
Junior Member with 5 posts.
 
Join Date: Aug 2008
Experience: Advanced
11-Aug-2008, 03:05 PM #25
Cool Folder Not Found
In my case the folder and files were Attrib +H and +S. This will hide the files and set them to SYSTEM FILE status. System files can not be deleted. cd c:\windows\system32\splm then type attrib -h -s *.*
this will allow you to see the files and delete them. My problem is that
the trojan blocked virus websites in IE and Firefox. I can not get to bitdefender.com for example ... Any Ideas????
Shark01's Avatar
Junior Member with 6 posts.
 
Join Date: Aug 2008
Experience: Advanced
11-Aug-2008, 04:06 PM #26
NACW

At one point this was blocking sites in IE for me. Before I completely removed the virus, I was able to (temporarily (then I did this again after removing the virus)) fix this and get the sites back in IE by using Spybot Search & Destroy. Just do a Check for Problems scan and let it fix things. (This never affected Firefox and blocked sites in Firefox for me, but Spybot also checks for Firefox problems and stuff as well as IE).

Also, you can use Spybot to Immunize your system from many things to better protect yourself from more malware (but update and immunize often).
djmellowfellow's Avatar
Junior Member with 11 posts.
 
Join Date: Aug 2008
Experience: Intermediate
12-Aug-2008, 06:39 AM #27
Some people say that if you disable system restore it removes one of the dodgey files. Then you can get the rest in safe mode with Hijackthis, MSCONFIG and REGEDIT. (see the forum at http://www.fixya.com/support/t886930...rror_21_xp_sp2)

I'm worried about disabling System Restore in case I do something wrong. But has system resore failed to work for most people anyway?

Does anyone know if this virus is dangerous?
NACW's Avatar
Junior Member with 5 posts.
 
Join Date: Aug 2008
Experience: Advanced
12-Aug-2008, 07:58 AM #28
Thought about it for a while ..... HOSTS file could be redirected to 127.0.0.1 or even 0.0.0.0 ... that is exactly what it does. It redirects any request for most antivirus web sites including bitdefender and trend micro.
THe two most needed for because of the ability to remove the virus after scan (FREE)
Search for "Host"
Edit in notepad to remove any entries like these below
( if you have spybot installed pay attention to the 127.0.0.1 they list
sites that have been found to have viruses hosted)

0.0.0.0 trendmicro.com
0.0.0.0 www.trendmicro.com
#
0.0.0.0 norton.com
0.0.0.0 www.norton.com
#
Shark01's Avatar
Junior Member with 6 posts.
 
Join Date: Aug 2008
Experience: Advanced
12-Aug-2008, 12:28 PM #29
NACW, again, Spybot does all of that for you.

So, for people that don't want to do everything by hand, use Spybot.
NACW's Avatar
Junior Member with 5 posts.
 
Join Date: Aug 2008
Experience: Advanced
12-Aug-2008, 01:49 PM #30
Host file redirect vs spybot
I tried spybot to see what it would find. It did see and list the entry for
the web site redirect. The only problem was it only saw and removed the
first line which was the IE. www.bitdefender.com the next line was bitdefender.com. spybot decided to ignore the second entry in the host file.

I never used spybot untill today so I might have missed a setting. It asked me if I wanted to fix all checkmarked items I said yes...

>>> Try to Learn somthing new everyday <<<
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are Off
Refbacks are Off

You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 01:25 AM.
Copyright © 1996 - 2008 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0
Powered by Cermak Technologies, Inc.