Strange .dll error message at startup

bucky · Joined: Oct 15, 2003 Posts: 159 Location: Scranton, Pa.

Hi guys,

This is about a strange error message on my friends computer.
She is running WindowsXP SP2 (laptop)
This just started yesterday out of nowhere.
When she starts her computer, an error box pops up.
This is what it says:

RUNDLL

Error loading C:\Windows\system32\eatwnuer.dll
The specified module could not be found.

I tried finding info on this dll file, found nothing. Confused

Any thoughts folks??

Thanks, Bucky

micker377 · Joined: May 27, 2005 Posts: 1059

Are you sure about the spelling? I checked and there is nothing! This is strange that there is nothing on it.

bucky · Joined: Oct 15, 2003 Posts: 159 Location: Scranton, Pa.

Yep, that's the spelling. Confused

I searched all over and found nothing. Confused

Bucky

zlim · Joined: Mar 11, 2005 Posts: 2747

Get yourself to a forum for dealing with malware. Malware is notorious for generating random 8 letter items.
You don't wnt malware sitting in
C:\Windows\system32\eatwnuer.dll

Baby_Tux · Joined: Mar 06, 2007 Posts: 1242

I guess I made another assumption I maybe shouldn't have.

I assumed that by now that BUCKY would know enough to do the "SCAN THING" (virus, trojans, malware, etc) 1st thing! - But I could be wrong. (hope not)

Error: server cannot be reached or image not available (timeout: 10 seconds).

Image URL: http://img115.exs.cx/img115/8895/signquestion3xd.gif

bucky · Joined: Oct 15, 2003 Posts: 159 Location: Scranton, Pa.

Hi Baby Tux...

Have a little faith in me LOL! Laughing

I tried everything I could think of before bothering you fine folks. Rolling Eyes

The only time it is seen is at bootup.Then you have to click OK.
I have tried the following scans already without any of them finding anything:
AdAware 2007
SpyBot S&D
F-Secure online scanner
Avg 8.0
Spyware Doctor w/anti-virus
I uninstalled Avg 8.0 before I installed Spyware Doctor (the 2 anti-virus scanners at the same time thing Wink

)
I have no idea why it started comming up and neither does she.
Like I said, I did a search for that dll file and couldn't find it anywhere.
Thanks, Bucky

Baby_Tux · Joined: Mar 06, 2007 Posts: 1242

If you are comfortable doing a "registery hack", just go in & delete all instances of it. - if not, get you a reg. fixer & that MAY get rid of it for you.

I use "FIX-IT" (a tool suite) - cost, but good.

Error: image could not be loaded. Image is not available from server

Image URL: http://img.photobucket.com/albums/v298/sealx/icons_smilies/face-laugh.png

bucky · Joined: Oct 15, 2003 Posts: 159 Location: Scranton, Pa.

Hi Baby Tux

Yes, I would be comfortable with that.
But, here is an update to something I found. Rolling Eyes

I ran A-Squared Hijack Free and it found it, but with a "REAL NAME".
The name it found is, BM577e6893
I did a Google seach on that and found nothing about it.
I did a registery search and found it (BM577e6893) in:
HKEY_LOCAL_Machine\Software\Microsoft\Windows\CurrentVersion\Run

Thanks, Bucky

Baby_Tux · Joined: Mar 06, 2007 Posts: 1242

Do a reg backup HERE'S HOW just in case then KILL IT.

Just remember to get rid of the backup when you are sure you are done so you don't reinfect your machine. Shocked

Error: image could not be loaded. Image is not available from server

Image URL: http://www.holdmyfile.com/n_images/usr/gal7223/s_img/f0002.gif

bucky · Joined: Oct 15, 2003 Posts: 159 Location: Scranton, Pa.

Hi Baby Tux,

That did it. Very Happy

Malware I suppose. Evil or Very Mad

Funny I couldn't find anything about it tho.
Thanks, Bucky

drwho07 · Joined: Nov 29, 2007 Posts: 2240 Location: Central FL, USA

Every time I've ever gotten frustrated trying to Uninstall some program, like Norton, and ripped it out by the roots, it's left something like that, which had to be removed from the registry.

In Norton's case, it was at least one reference to a .vxd file.
But sure nuff, windows gave me an error message that it couldn't find the .vxd file. Remove that reference from the registry and everything was AOK.

Y'all have a great weekend now, Y'hear?

The Doctor Cool