Help!

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

KurtVagner

Thread Starter
Joined
Sep 9, 2003
Messages
225
Well for the past week or so i have realised my comp is gettin slower.I think it may b becaos of 1 of these files.Tell me what u think n how i can get rid of them.

1/ Win32us.exe
2/ NvCplDaemon
3/RunDLL32.exe

Thank you
 
Joined
Aug 17, 2003
Messages
125
win32us.exe is a dialler to adult sites (prob costing you a fair bit on your phone bill too)

The other two are also unneccesary. To stop them from working:

start >> run >> type msconfig >> ok >> startup tab

uncheck the boxes besides their name and reboot
 
Joined
May 14, 2003
Messages
379
1/ Win32us.exe is a All-In-One-Telcom (adult content dialler) variant. It's safe to delete.

2/ NvCplDaemon: Intializes the clock and memory settings on nVidia based graphics cards.

3/RunDLL32.exe is a valid Windows application

So out of the three files you shown here. The only one you can delete safely is Win32us.exe.
 
Joined
Aug 17, 2003
Messages
125
The valid RUNDLL32.EXE is in the windows/font directory and should not appear in the startup menu - there are several other RUNDLL32.EXE's that are not neccesary and this appears to be one of them. This is what pacs-portal has to say about this particular entry:

RUNDLL32.EXE NvQtwk,NvCplDaemon
NvCplDaemon This loads the System Tray icon used to change display settings, change the clock rate and memory speed for nVidia based graphics cards. This is unnecessary since you can easily configure these settings the way you want them in the Display Properties and not have to mess with them again
 
Joined
Mar 9, 2003
Messages
4,699
Actually, Rundll32.exe is a valid Windows application called "Run a DLL as an App" and stored in the C:\Windows directory. This program is used in conjuction with others as a call to start them.

You will often see the line rundll32.exe C:\some folder\some file name.

This is a necessary part of windows.

Bottom line: DO NOT DELETE!!
 
Joined
Mar 9, 2003
Messages
4,699
BeeKeeper, I would suggest doing a Find on rundll32.exe and find out how many you actually have. Some are INVALID and planted as a result of a virus!!

The valid path should be \windows\rundll32.exe Or Winnt\rundll32.exe for NT/W2K/XP systems

As you find each one, right click and look at properties and the version tab to check version info, size, and company name.

If the company name isn't Microsoft and the other things don't check out, deep six the file!!
 
Joined
Aug 17, 2003
Messages
125
lol - it's alright mate - I don't have a prob with RUNDLL32.EXE - it's the chap at the top :)
 
Joined
Mar 9, 2003
Messages
4,699
(y)

That's the problem, it's a legit file, BUT it can be used to pull up a lot of crap.
 

KurtVagner

Thread Starter
Joined
Sep 9, 2003
Messages
225
Well. win32us keeps installing istelf :(.....i used add/remove progs if thats any use.Also what is run=?
 

KurtVagner

Thread Starter
Joined
Sep 9, 2003
Messages
225
Jus a wee nte : Win32us is not checked in my startup tho it does keep appearing time n time again :( And its infecting me with many a virus including trojan ( which the trojan remover cant find) and a few others
Well post viruses when nortan finishes its scan
 

KurtVagner

Thread Starter
Joined
Sep 9, 2003
Messages
225
Originally posted by NiteHawk:
(y)

That's the problem, it's a legit file, BUT it can be used to pull up a lot of crap.

Is this the Rundll thing? how do i check to see if its causing a problem and what do i look out for . Thank you :)
 
Joined
Aug 17, 2003
Messages
125
@Kurt -when you posted your original question, you listed 3 seperate files - the win32.us.exe is clear enough - but did you mean to list the rundll32.exe & nvcplDaemon as 1 entry rather than 2? As Nite Hawk says,it can be a legit file but when followed by another reference can be an unneccesary file or even part of a virus. As mentioned before, if it appears in your startup list, it is at best, not necessary. So uncheck for now if it's there - but do not totally remove from your system until you are sure. The one to concentrate on is the win32us.exe - this alone may be causing your problems. Try to remove it from your registry by doing the following - as with all registry work DOUBLE CHECK that you are removing the correct file as mistakes there are sometimes unrepairable. The following is instructions issued by someone here (sorry, can't remember who) on how to remove items from your registry:

REGISTRY WORK
-----------------------
Go to Start\Run and type in regedit
You see in the left pane Major Registry Keys that have a plus sign in front of them. The plus sign is how you will navigate downward in the registry.
Step 1- Navigate downward by clicking the plus signs too
+ HKEY_LOCAL_ MACHINE
+ Software
+ Microsoft
+ Windows
+ Current Version
RUN folder or RUN- folder

Note: You will notice folders called RUN and RUN-
The Run folder contains Items you see in the MSCONFIG startup tab that have their boxes checked and the Run- folder contains items you have unchecked from startup.
The combination of the two is the Startup display.

Step 2- If you have previously unchecked the box in MSCONFIG then lets go to the RUN- folder and click on it. If not then go to the RUN folder.
Step 3- In the right pane you will see a list of items you have deselected.
Step 4- Locate the items you wish to disappear out of the MSCONFIG Startup list and right click on item in the right pane. MAKE SURE IT IS THE CORRECT ONE and click Delete.
Step 5- Do same for all entries you want deleted.
Note: Once they are gone they are gone!

Step 6- All is complete now close the registry by clicking the minus sign to top then Click the registry tab up top and click Exit.

Thats it all should be as you want it.

I will add to that: sometimes, remnants of programmes remain behind for some reason - to double check if this has happened, use the find tool in regedit by:

Start >> run >> type regedit >> edit >> find >> type win32us.exe >> find next

Wait a few minutes why it does its job and you'll see if any traces of the file remain - if they do, once again DOUBLE CHECK they are the correct file, and right click and delete.

Good luck
 
Joined
Mar 9, 2003
Messages
4,699
Go to http://tomcoyote.org/hjt/ and download HiJackThis. Use Winzip to ]u]unzip[/u] it, then install and run it. To run, click the “Scan” button. When it's done the "Scan" button changes to "Save Log". Save the log file it creates (it should open in Notepad at that point). Copy and paste the results in your next post. IF you happen to be using a proxy server, please mention it in your post. Most of what it finds is harmless, so do not do anything yet. Someone will be glad to help you sort out any of the baddies that may be in there.
 

KurtVagner

Thread Starter
Joined
Sep 9, 2003
Messages
225
Hm a required .DLL file , MSVBVM60.DLL,was not found- was the message i got when tryin to run hijack this :(
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top