Error message at start up

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Butch45

Thread Starter
Joined
Dec 23, 2001
Messages
14
Every time I start the computer I get an error message, Rundll32 that says this program has performed an illegal operation and will be shut down. Does anyone know how to fix this? Thanks.
 
Joined
Dec 9, 2000
Messages
45,855
Hi Butch and welcome to TSG.

Can you give us the full error message? The problem may be with rundll32.exe itself or the program it is trying to run (for example newdotnet -- a common piece of "foistware" that needs to be removed)

If it is newdotnet/new.net we should also probably have a look at what else you have running at startup as it is often associated with other unwanted "spyware" and "adware" which gets bundled in many installs.

To show us, go to start, run msinfo32 and click on "software environment" and "startup programs". Then click Edit>Select All>Edit>Copy and paste the copied text in your next reply.

Also if you haven't run an updated antivirus scan, it's a good idea to do one, as there are a few which alter rundll32.exe. You can do an online scan here if you wish:

http://housecall.antivirus.com/pc_housecall/
 

Butch45

Thread Starter
Joined
Dec 23, 2001
Messages
14
RUNDLL32 caused an invalid page fault in
module NEWDOTNET3_23.DLL at 0167:1000ab5e.

America Online 5.0 Tray Icon Startup Group "E:\America Online 5.0\aoltray.exe" -check
HP Parallel Port Test Startup Group D:\SCANJET\PrecisionScan\hpppt.exe /ICON
Event Reminder Startup Group "C:\Program Files\Mindscape\PrintMaster\PMREMIND.EXE" /Q
load Win.ini D:\PROGRA~1\MEDIA95\vi_grm.exe
eZulaMain Registry (Per-User Run) D:\PROGRA~1\ezula\eZulaMain.exe
ScanRegistry Registry (Machine Run) D:\WINDOWS\scanregw.exe /autorun
TaskMonitor Registry (Machine Run) D:\WINDOWS\taskmon.exe
SystemTray Registry (Machine Run) SysTray.Exe
VortexTray Registry (Machine Run) ASP4TRAY.EXE
LoadPowerProfile Registry (Machine Run) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
HPSCANMonitor Registry (Machine Run) D:\WINDOWS\SYSTEM\hpsjvxd.exe
StillImageMonitor Registry (Machine Run) D:\WINDOWS\SYSTEM\STIMON.EXE
Detect Registry (Machine Run) D:\Program Files\iNTERNET Turbo 2001\Idetect.exe /auto
msdos423 Registry (Machine Run) c:\windows\msdos423.exe
New.net Startup Registry (Machine Run) rundll32 D:\WINDOWS\NEWDOT~2.DLL,NewDotNetStartup
webHancer Agent Registry (Machine Run) "D:\Program Files\webHancer\Programs\whAgent.exe"
RealTray Registry (Machine Run) D:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
CreateCD Registry (Machine Run) D:\PROGRA~1\ADAPTEC\EASYCD~1\CREATECD\CREATECD.EXE -r
LoadPowerProfile Registry (Machine Service) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
SchedulingAgent Registry (Machine Service) mstask.exe
Detect Registry (Machine Service) D:\Program Files\iNTERNET Turbo 2001\Idetect.exe /auto
 
Joined
Dec 9, 2000
Messages
45,855
Yeah, that's the one. And you have Webhancer too. Both of these can be removed through Add/Remove programs. Ad-aware, which I'll give you a link to, is used to clean up the remnants and remove other spyware.

But first let's start with the Trojan infection I see there:

http://www.symantec.com/avcenter/venc/data/[email protected]

Did you run HouseCall? It may do most of the heavy lifting. But I would print or carefully copy the manual removal instructions from the above Symantec link in case it doesn't.

http://www.lavasoft.de/aaw/binary/whndnfix.zip

http://www.lavasoftusa.net/

Before removing Webhancer and Newdotnet, download and install the Ad-Aware program.

The whndnfix.zip contains a registry repair which may be needed after removing new.net or webhancer. Hopefully you wont need it.

You also have this: eZulaMain Registry (Per-User Run) D:\PROGRA~1\ezula\eZulaMain.exe

I think, but I'm not sure whether Ad-Aware will fully remove it. It is Topptext in Add/Remove. See...

http://www.cexx.org/toptext.htm

Read the Ad-Aware getting started and FAQ pages before running it. It will detect Gator, Go!zilla and their associated advert.dll. You will have to find substitutes if you want to rid your self of their spyware components.

Each time you remove a program through Add/Remove or run Ad-Aware, be sure to reboot afterwards.

MS covers new.net in these two links:

http://support.microsoft.com/default.aspx?scid=kb;en-us;q302463

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q299393
 

Butch45

Thread Starter
Joined
Dec 23, 2001
Messages
14
I tried to remove new.net through Add/remove programs but I couldn't because I kept getting the Rundll error message. I ran Ad-aware and new.net didn't show up on the list.
 
Joined
Dec 9, 2000
Messages
45,855
Hi Butch, sorry to hear that, but glad to see you back. New.net is no longer detected and removed by Ad-aware as they don't consider it "spyware"

Removing newdotnet when the automatic removal fails is a very detailed process to do manually.

I would suggest contacting [email protected] for the click by click instructions. You can also read the link below for more info. Many who attempt to follow incomplete instructions lose their internet connectivity. Having the lavasoft zip file on hand which I included above may help repair a mistake if you make one.

In the mean time run msconfig click on the startup tab and leave newdotnet UNchecked.


http://www.cexx.org/newnet.htm
 

Butch45

Thread Starter
Joined
Dec 23, 2001
Messages
14
I've got another question for you...

The trojan you saw on the list of startup programs was located in C:\Windows, but Windows is no longer on the C drive. I had our drive partitioned so Windows is now on the D drive. Since the C:\Windows folder no longer exists, does that mean that the trojan is gone too? And if it is, is it safe to delete it from the Windows registry at the same time I get rid of the stuff for new.net?
 
Joined
Oct 9, 2001
Messages
9,396
hi butch,go here www.moosoft.com
download "the cleaner" update it and scan for that trojan,if any remnants of it are there,it will waste it for you.
good luck...........and a happy new year to all:)
 
Joined
Dec 9, 2000
Messages
45,855
PM from Butch reports new.net was successfully removed by reinstalling their software, per instructions from the website, then uninstalling it.

Butch, sorry I missed your last reply about the trojan. If it is still showing in your startup list and you are not receiving any "file missing" messages, then I would have to assume it is running.

You can probably use a trojan cleaner such as moosoft to remove it. But if that doesn't work, you can certainly delete the reference from the registry and do a Find Files for the file itself and delete it if found.
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top