1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Error message at start up

Discussion in 'Earlier Versions of Windows' started by Butch45, Dec 23, 2001.

Thread Status:
Not open for further replies.
Advertisement
  1. Butch45

    Butch45 Thread Starter

    Joined:
    Dec 23, 2001
    Messages:
    14
    Every time I start the computer I get an error message, Rundll32 that says this program has performed an illegal operation and will be shut down. Does anyone know how to fix this? Thanks.
     
  2. SavvyLady

    SavvyLady

    Joined:
    Oct 14, 2001
    Messages:
    2,218
    what version of windows are you using?
     
  3. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Hi Butch and welcome to TSG.

    Can you give us the full error message? The problem may be with rundll32.exe itself or the program it is trying to run (for example newdotnet -- a common piece of "foistware" that needs to be removed)

    If it is newdotnet/new.net we should also probably have a look at what else you have running at startup as it is often associated with other unwanted "spyware" and "adware" which gets bundled in many installs.

    To show us, go to start, run msinfo32 and click on "software environment" and "startup programs". Then click Edit>Select All>Edit>Copy and paste the copied text in your next reply.

    Also if you haven't run an updated antivirus scan, it's a good idea to do one, as there are a few which alter rundll32.exe. You can do an online scan here if you wish:

    http://housecall.antivirus.com/pc_housecall/
     
  4. Butch45

    Butch45 Thread Starter

    Joined:
    Dec 23, 2001
    Messages:
    14
    RUNDLL32 caused an invalid page fault in
    module NEWDOTNET3_23.DLL at 0167:1000ab5e.

    America Online 5.0 Tray Icon Startup Group "E:\America Online 5.0\aoltray.exe" -check
    HP Parallel Port Test Startup Group D:\SCANJET\PrecisionScan\hpppt.exe /ICON
    Event Reminder Startup Group "C:\Program Files\Mindscape\PrintMaster\PMREMIND.EXE" /Q
    load Win.ini D:\PROGRA~1\MEDIA95\vi_grm.exe
    eZulaMain Registry (Per-User Run) D:\PROGRA~1\ezula\eZulaMain.exe
    ScanRegistry Registry (Machine Run) D:\WINDOWS\scanregw.exe /autorun
    TaskMonitor Registry (Machine Run) D:\WINDOWS\taskmon.exe
    SystemTray Registry (Machine Run) SysTray.Exe
    VortexTray Registry (Machine Run) ASP4TRAY.EXE
    LoadPowerProfile Registry (Machine Run) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    HPSCANMonitor Registry (Machine Run) D:\WINDOWS\SYSTEM\hpsjvxd.exe
    StillImageMonitor Registry (Machine Run) D:\WINDOWS\SYSTEM\STIMON.EXE
    Detect Registry (Machine Run) D:\Program Files\iNTERNET Turbo 2001\Idetect.exe /auto
    msdos423 Registry (Machine Run) c:\windows\msdos423.exe
    New.net Startup Registry (Machine Run) rundll32 D:\WINDOWS\NEWDOT~2.DLL,NewDotNetStartup
    webHancer Agent Registry (Machine Run) "D:\Program Files\webHancer\Programs\whAgent.exe"
    RealTray Registry (Machine Run) D:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    CreateCD Registry (Machine Run) D:\PROGRA~1\ADAPTEC\EASYCD~1\CREATECD\CREATECD.EXE -r
    LoadPowerProfile Registry (Machine Service) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    SchedulingAgent Registry (Machine Service) mstask.exe
    Detect Registry (Machine Service) D:\Program Files\iNTERNET Turbo 2001\Idetect.exe /auto
     
  5. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Yeah, that's the one. And you have Webhancer too. Both of these can be removed through Add/Remove programs. Ad-aware, which I'll give you a link to, is used to clean up the remnants and remove other spyware.

    But first let's start with the Trojan infection I see there:

    http://www.symantec.com/avcenter/venc/data/[email protected]

    Did you run HouseCall? It may do most of the heavy lifting. But I would print or carefully copy the manual removal instructions from the above Symantec link in case it doesn't.

    http://www.lavasoft.de/aaw/binary/whndnfix.zip

    http://www.lavasoftusa.net/

    Before removing Webhancer and Newdotnet, download and install the Ad-Aware program.

    The whndnfix.zip contains a registry repair which may be needed after removing new.net or webhancer. Hopefully you wont need it.

    You also have this: eZulaMain Registry (Per-User Run) D:\PROGRA~1\ezula\eZulaMain.exe

    I think, but I'm not sure whether Ad-Aware will fully remove it. It is Topptext in Add/Remove. See...

    http://www.cexx.org/toptext.htm

    Read the Ad-Aware getting started and FAQ pages before running it. It will detect Gator, Go!zilla and their associated advert.dll. You will have to find substitutes if you want to rid your self of their spyware components.

    Each time you remove a program through Add/Remove or run Ad-Aware, be sure to reboot afterwards.

    MS covers new.net in these two links:

    http://support.microsoft.com/default.aspx?scid=kb;en-us;q302463

    http://support.microsoft.com/default.aspx?scid=kb;EN-US;q299393
     
  6. Butch45

    Butch45 Thread Starter

    Joined:
    Dec 23, 2001
    Messages:
    14
    I tried to remove new.net through Add/remove programs but I couldn't because I kept getting the Rundll error message. I ran Ad-aware and new.net didn't show up on the list.
     
  7. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Hi Butch, sorry to hear that, but glad to see you back. New.net is no longer detected and removed by Ad-aware as they don't consider it "spyware"

    Removing newdotnet when the automatic removal fails is a very detailed process to do manually.

    I would suggest contacting [email protected] for the click by click instructions. You can also read the link below for more info. Many who attempt to follow incomplete instructions lose their internet connectivity. Having the lavasoft zip file on hand which I included above may help repair a mistake if you make one.

    In the mean time run msconfig click on the startup tab and leave newdotnet UNchecked.


    http://www.cexx.org/newnet.htm
     
  8. Butch45

    Butch45 Thread Starter

    Joined:
    Dec 23, 2001
    Messages:
    14
    I've got another question for you...

    The trojan you saw on the list of startup programs was located in C:\Windows, but Windows is no longer on the C drive. I had our drive partitioned so Windows is now on the D drive. Since the C:\Windows folder no longer exists, does that mean that the trojan is gone too? And if it is, is it safe to delete it from the Windows registry at the same time I get rid of the stuff for new.net?
     
  9. $teve

    $teve

    Joined:
    Oct 9, 2001
    Messages:
    9,396
    hi butch,go here www.moosoft.com
    download "the cleaner" update it and scan for that trojan,if any remnants of it are there,it will waste it for you.
    good luck...........and a happy new year to all:)
     
  10. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    PM from Butch reports new.net was successfully removed by reinstalling their software, per instructions from the website, then uninstalling it.

    Butch, sorry I missed your last reply about the trojan. If it is still showing in your startup list and you are not receiving any "file missing" messages, then I would have to assume it is running.

    You can probably use a trojan cleaner such as moosoft to remove it. But if that doesn't work, you can certainly delete the reference from the registry and do a Find Files for the file itself and delete it if found.
     
  11. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/62696

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice