Jump to content
Sign in to follow this  
Nathan09

Cannot run hijack this, Malwarebytes; rundll32 error

Recommended Posts

:(I am a very careful user but now I have a few sudden yet persistent malware issues similar to what is described at http://www.malwarebytes.org/forums/index.p...amp;hl=rundll32. The post did not advise to follow the instructions there and I am creating a new topic. Any help will be highly appreciated. I have XP Pro SP2 and the virus definition file for Norton was up to 9/3/09.

It seemed I was able to get rid of Windows Police Pro and Advanced Virus Remover. But the following symptoms are still present: 1) There is a startup error message: rundll32: cannot load tapi.info

2) cannot run hijackThis, Malwarebytes ever after reinstallation.

3) I cannot run Norton Anti-virus manually. However the real-time monitor still works and the scheduled scan did run today and got rid of 248 instances of Trojan.vundo

4) There is a file called suviraju at Windows\system32 and it gets recreated right after I deleted it

5) There are two registry entries also getting recreated a few seconds after deletion: ...Windows\currentVersion\runonce\yodohusidi and the value is rundll32: Windows\system32\nobibipo.dll; and ...Windows\currentVersion\runonce\gayisevon and the value is rundll32: Windows\system32\vokizofe.dll

6) my dllcache directory is missing

7) Many Google search results are redirected to malware purchase sites.

8) Having IE popups from time to time.

Luckily my network is working today. It did not work yesterday (IPConfig displays IP addresses but I could not make an Internet connection). Yesterday, the virus/malware disabled my taskmanager and regedit. No exe files could be run. After many, many hours of struggling, most exe files are fine now, but not hijackThis, Malwarebytes, NAV, etc. I can boot to Safemode with network but not to pure Safemode - the computer is in a domain and I don't have the Administrator password of the local domain. I do have full admin right to the box.

Share this post


Link to post
Share on other sites

Please follow the directions below and someone will assist you as soon as they can.

Scan and post logs - read note at bottom in green

If you're having Malware related issues with your computer that you're unable to resolve.

  1. Please read and follow the instructions provided here: I'm infected - What do I do now?
  2. If needed please post your logs in a NEW topic here: Malware Removal - HijackThis Logs
  3. When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested.

  • Please do not post any logs in the General forum. We do not work on any logs posted in the General forum.
  • Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you.
  • Using these other tools often makes the cleanup task more difficult and time consuming.
  • If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved.
  • Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback.
  • There are often many others that require asistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review

  • NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.