RunDLL message on Startup

  • Thread starter Thread starter Zeb
  • Start date Start date
Z

Zeb

Had a major Trojan problem. I did a major clean up and a few scans for
spyscum with Lavasoft and VirusScans. Now whenever I reboot I get these 2
errors:
1/
Rundll
Error Loading c:\program~1\Emenu~1\tbextn.dll

2/
Rundll
An exception occurred while trying to run
"c:\windows\system32\sbclient.dll", dllGetVersion"

Is this crucial? I've disabled a load of stuff on the start-up menu
(msconfig) and they don't appear anymore.
But what does appear is that whenever I type a search in Google, a very
irritating grey window appear in the centre giving info on the search I've
done, it appears like an add really. I have disabled messenger in Services
(manage).
Thanks for any help on this
Z
PS. OS XP
 
Got rid of the rundll error messages.
I just kept doing a spyware scan with Microsoft antispam. On the 5th one
they finally didn't come up anymore.

But I still have that window opening up when I do a search.
It doesn't when I do a search on MSN
but it does when I do it on Google and on yahoo
Any ideas?
Thanks
 
This may be caused by spyware/malware that's gotten installed on
your system. Use Ad-Aware and/or Spybot Search & Destroy to remove it.

Ad-Aware: http://www.lavasoftusa.com/
Spybot: http://www.safer-networking.org/en/index.html
Good sites on how to install and use Spybot -
http://www.safer-networking.org/en/tutorial/index.html
http://tomcoyote.com/SPYBOT/index1.php

Also download a winsock repair tool, to have just in case cleaning up
anything found breaks it -

Winsock repair tools:
LSPFix- all versions of Windows http://www.cexx.org/lspfix.zip
Winsock2 Fix- Win98, ME
http://www.bu.edu/pcsc/internetaccess/winsock2fix.html
LavaSoft- all versions of Windows-
http://digital-solutions.co.uk/lavasoft/whndnfix.zip

More information here:
http://www.spywareinfo.com/
http://inetexplorer.mvps.org/Darnit.htm
http://www.doxdesk.com/parasite/ - runs a little script when loading page to
check for common parasites

If no joy, in IE go to Tools...Internet Options...Advanced tab, Browsing
section, uncheck "Enable third-party browser extensions", click Apply, click
Okay, reboot. If that solves your problem, then more troubleshooting is
needed to find out exactly which program, or Browser Helper Object (BHO) is
causing this problem. You don't want to leave it at that, as some BHOs are
useful or necessary - like Adobe Acrobat for reading .pdf files or an
essential component of Norton AV. Get BHODemon -
http://www.definitivesolutions.com/bhodemon.htm - read all about BHOs.
Disable all items, and then gradually replace one or two at a time to narrow
down the culprit.

Or if you have IE 6 SP-2 you can do this within the browser:
How to manage Internet Explorer add-ons in Windows XP Service Pack 2
http://support.microsoft.com/default.aspx?scid=kb;en-us;883256

If all the above fails, then the problem could be something new that the
spyware cleaners above don't have in their databases yet. In that case....
HijackThis direct download:
http://www.spywareinfo.com/~merijn/files/hijackthis.zip
Tutorial on how to use HijackThis:
http://www.spywareinfo.com/~merijn/htlogtutorial.html
Then post it's output log to the forum here for analysis and feedback by the
parasite experts:
http://www.spywareinfo.com/forums/
Or the other HijackThis Logs forums listed here:
http://www.spywareinfo.com/~merijn/forums.html

Or try this program to get some of the most nasty malware:
CWShredder direct download:
http://aumha.org/downloads/cwshredder.zip

An alternate resource for all of this and more:
http://www.aumha.org/secure.htm
 
Back
Top