rundll32 questions.

quiller1024

New Member
I have done a extensive search. I have been living with rundll32 errors for a while on my video files, I upgraded from xp to vista. It has not caused any real problems. However a few months ago I seemed to lost ability to deal with windows personalization. Can not change anything in windows color, theme or icon's said admin had turned off.. I was logged in as admin. I could live with this also as I could change my background and had set the colors to what I liked...

Well now things are worse... two days ago the rundll32 errors started to happen a lot, Firefox crashed completely, would not run.. windows problem reporting told me to upgrade... would crash with rundll32 error. My recyle bin went away, and can not replace, change icon's causes rundll32 error. Yesterday vista would no start.. took two times of repairing with upgrade disk and now seems to be fine. Went to cmd.com in run to do a file check..... got the error NTVDM.exe and command com will not load. NOw in personalize change color get rundll32 error. Checked event log they all seem to be the same error.

For changing windows appearance:

Product
Windows host process (Rundll32)
Problem
Stopped working
Date
10/20/2008 11:11 PM
Status
Report Sent
Problem signature
Problem Event Name: APPCRASH
Application Name: rundll32.exe
Application Version: 6.0.6000.16386
Application Timestamp: 4549b0e1
Fault Module Name: kernel32.dll
Fault Module Version: 6.0.6000.16386
Fault Module Timestamp: 4549bd80
Exception Code: e06d7363
Exception Offset: 0001b09e
OS Version: 6.0.6000.2.0.0.768.2
Locale ID: 1033
Additional Information 1: 7cca
Additional Information 2: 0866007e90831cf9b687c3820f4a82e7
Additional Information 3: 8ddb
Additional Information 4: fb3b805ab0d627a3dc3f5c83b5a354d0
Extra information about the problem
Bucket ID: 357159594

For Firefox:

Product
Windows host process (Rundll32)
Problem
Stopped working
Date
10/16/2008 7:22 PM
Status
Report Sent
Problem signature
Problem Event Name: APPCRASH
Application Name: rundll32.exe
Application Version: 6.0.6000.16386
Application Timestamp: 4549b0e1
Fault Module Name: kernel32.dll
Fault Module Version: 6.0.6000.16386
Fault Module Timestamp: 4549bd80
Exception Code: e06d7363
Exception Offset: 0001b09e
OS Version: 6.0.6000.2.0.0.768.2
Locale ID: 1033
Additional Information 1: b1e0
Additional Information 2: 75626a9ac684dc0f4d8fe6ea40295fdf
Additional Information 3: eb43
Additional Information 4: 97cbedf0bc039680e795a530347dcd23
Extra information about the problem
Bucket ID: 357159594


For cmd.com

Product
NTVDM.EXE
Problem
Stopped working
Date
10/20/2008 11:51 PM
Status
Report Sent
Problem signature
Problem Event Name: APPCRASH
Application Name: ntvdm.exe
Application Version: 6.0.6000.16386
Application Timestamp: 4549adf0
Fault Module Name: kernel32.dll
Fault Module Version: 6.0.6000.16386
Fault Module Timestamp: 4549bd80
Exception Code: c0000005
Exception Offset: 0001b09e
OS Version: 6.0.6000.2.0.0.768.2
Locale ID: 1033
Additional Information 1: 4781
Additional Information 2: 227ebb8759bf5e3c985f67d2edabcbdd
Additional Information 3: 0656
Additional Information 4: fe4ec5a308a1ffcd50df3dcef10456c2
Extra information about the problem
Bucket ID: 344300361


Please note constanlty run AVG antivirus and keep it updated....I am hesitant about using registery cleaners... my main concern is that over the past two days it seems vista has not been starting regularly and the cd has been hesitant to repair and let it start.. so much that I don't want to turn it off... when it does start it is calling vista a restored version. I also am concerned because I seem to be unsure just how to reinstall. Do I install it back with out using the key, then reinstall back the second time with the key ? It will not let me do any thing if I try and install and input the key now.

 

My Computer

First, are you fully updated with Windows Updates.
Some earlier issues that caused rundll32 errors were fixed with updates.
2nd, what are your full system specs?
3rd, when you need to reinstall in the future, you don't have to enter the key right away, in fact I suggest you don't as doing that will tie your hardware to that particular OS key and major hardware changes down the road may invalidate your OS. After the install you can go to control panel/system and activate Vista there.
 

My Computer

System One

  • Manufacturer/Model
    Personal Build
    CPU
    Intel E6750 Core 2 Duo
    Motherboard
    Asus Commando MoBo (P965/ICH8R)
    Memory
    4G's Crucial Ballistix Tracer DDR2 PC26400 RAM
    Graphics Card(s)
    BFG 8800GTS OC2 320MB
    Sound Card
    Creative Sound Blaster X-FI Platinum FATAL1TY (next)
    Monitor(s) Displays
    2 x 22" w2207 LCD Monitors
    Screen Resolution
    1- 1680 x 1050, 1 - 1920 x 1080
    Hard Drives
    3 x 500G SATA II WD Caviar HDD's
    PSU
    EnerMax NoiseTaker II 600W
    Case
    NZXT Lexa Classic (modified, dual doored & windowed)
    Cooling
    Zalman 9700 CPU cooler, 4-120mm fans, 1-90mm
    Mouse
    Logitech Optical Trackman trackball
    Other Info
    NZXT Lexa Classic Case, Zalman 9700 CPU Cooler, 2 DVD Burners c/w LightScribe (Sony, TSST), Enermax NoiseTaker II 600W PSU with Custom Chrome cable sleeving, Hauppauge HDTV TV Tuner Card, 5.1 Logitech Z5500 speakers, 15 in 1 Multi-card reader
Fully updated--- last update done 10-16 KB954211 --

Compaq- AMD Athlon XP 2800+ 2.08GHz 500MB ram

has standard VGA graphics adapter

Windows Vista Basic ver 6.0

I am real new at Windows Vista...
back in the day used to be real good with Dos and windows 3.1 though..:p

I just decided to check msconfig and found a few start up programs that seemed out of place... with unknown manufacturer!

lphc58gj0enf7.exe, sysrest32.exe adn viongnbn.dll*,b

I also have UAC disabled so I don't have to constantly click do you really want to do that and wait to get aproval....
 
Last edited:

My Computer

I just decided to check msconfig and found a few start up programs that seemed out of place... with unknown manufacturer!

lphc58gj0enf7.exe, sysrest32.exe adn viongnbn.dll*,b

That looks very much like the sysrest32 virus mate.

Sysrest32.exe is a Trojan/Backdoor. Kill the process sysrest32.exe and remove sysrest32.exe from Windows startup. Then you go hunting....

Give Spybot Search & Destroy - The home of Spybot-S&D! and/or

Avast Antivirus Home Edition - FREE avast! antivirus 4.x Home Edition, anti-spyware & anti-rootkit for Windows

The above came from this page:

http://www.vistax64.com/software/115872-free-software-list-vista.html

You wouldn't happen to have Antivirus XP 2008 installed by any chance?
 
Last edited:

My Computer

System One

  • Manufacturer/Model
    Self Built
    CPU
    i7 3770K HT ON 4.7GHz
    Motherboard
    P8Z68 Deluxe Gen 3
    Memory
    8GB G.Skill Ripjaws X 2133mhz
    Graphics Card(s)
    2x Gigabyte GTX 670 OC WindForce SLI
    Sound Card
    X-FI Forte + ATH-AD900
    Monitor(s) Displays
    x2 Dell U2410 / 58" Samsung / "40 Sony
    Screen Resolution
    1920*1200 / 1920x1080
    Hard Drives
    2x Intel 520 240GB * Crucial M4 128GB * 2x Samsung F3 1TB (RAID 0) * 2x WD Caviar Blacks 2TB (RAID 0)
    PSU
    Corsair AX1200W
    Case
    Lian Li PC-V1020A
    Cooling
    NH-D14: 3x140mm Gelid Wing 14: Sunbeam Rheobus Extreme
    Keyboard
    Topre Realforce // Ducky Shine Cherry MX Black
    Mouse
    Razer Imperator + Thermaltake Theron
    Other Info
    Laptop Specs:
    Clevo Sager P170HM //
    17.3 Matte 1920x1200 //
    i7 2720QM // 8GB 1333mhz //
    Dedicated GTX 485M //
    240GB Intel 520 + 750GB + Blu-Ray //

    Samsung Story 2TB USB 3.0
thank you the advise. I had not spent the time researching the files. I have already stoped the program from starting. Could not find the exe file on my computer to delete... is not running in any services. Only microsoft programs are running and my I pod pograms.

I have run a number of anti virus scans.. I will use spybot have used before... I personally have found it is best to always change up every now and then.... currently using AVG.

I am seriously thinking about just updating my vista to premium .... but am not sure if premium is really that much better then basic... I like bells and whistles though.

I also have little experience to know if the registery edit progrms really work... I think I have things cleaned up. But really need to repair the registery problem... seems a reinstall is the only way, in which case I might just upgrade instead.

any thoughts... I imagine I will have to change video card and ram to run the upgraded vista only have 500mb ram and just the basic video card....
 

My Computer

Regarding the Virus, Sometimes removing the startup entries isn't enough to stop them. Depending on the virus, they will sometimes have multiple locations/names that will "turn themselves on again" after a set period of time or after a reboot.

I personally let the scanners find the file location and registry entries and delete the files manually and then use regedit to manually verify key entries are there and then remove them. Although programs like cCleaner can be useful in removing/repairing registries. A good practice is to back up the registry before you make any changes. Most apps will have a backup registry option.

I like bells and whistles too and it is possible to add aero to Basic with a few reg hacks, but I think it's against the site rules to mention such things *cough Google*

Without knowing what Video card you currently have, I couldn't say. I can only guess that it may need upgrading if it's on-board video. I would however definitely recommend upgrading your ram to 2 gig. I personally only have 1.5GB and for day to day tasks it's enough to run ultimate, but I would go for 2GB at least for x32 bit version and 4GB for x64.

If you haven't already found it, here's the MS comparison to help you decide if the extra bits are worth it:

<a href="http://www.microsoft.com/windows/windows-vista/compare-editions/default.aspx" target="_blank">Windows Vista: Compare editions</a>

Good luck. let us know how you get on :)
 
Last edited:

My Computer

System One

  • Manufacturer/Model
    Self Built
    CPU
    i7 3770K HT ON 4.7GHz
    Motherboard
    P8Z68 Deluxe Gen 3
    Memory
    8GB G.Skill Ripjaws X 2133mhz
    Graphics Card(s)
    2x Gigabyte GTX 670 OC WindForce SLI
    Sound Card
    X-FI Forte + ATH-AD900
    Monitor(s) Displays
    x2 Dell U2410 / 58" Samsung / "40 Sony
    Screen Resolution
    1920*1200 / 1920x1080
    Hard Drives
    2x Intel 520 240GB * Crucial M4 128GB * 2x Samsung F3 1TB (RAID 0) * 2x WD Caviar Blacks 2TB (RAID 0)
    PSU
    Corsair AX1200W
    Case
    Lian Li PC-V1020A
    Cooling
    NH-D14: 3x140mm Gelid Wing 14: Sunbeam Rheobus Extreme
    Keyboard
    Topre Realforce // Ducky Shine Cherry MX Black
    Mouse
    Razer Imperator + Thermaltake Theron
    Other Info
    Laptop Specs:
    Clevo Sager P170HM //
    17.3 Matte 1920x1200 //
    i7 2720QM // 8GB 1333mhz //
    Dedicated GTX 485M //
    240GB Intel 520 + 750GB + Blu-Ray //

    Samsung Story 2TB USB 3.0
Well I'm not finding any virus's any more on my scans... no more odd service running if I can trust hide microsoft services in msconfig.. am probablly going to break down and upgrade to premium so I can upgrade my laptop that has usb issues to Vista as well...

I am still getting a lot of Rundll32 errors... and can not load windows appearance or firefox... IE works fine I did a clean unistall of firefox and tried reinstalling with out success.,,
 

My Computer

I am still getting a lot of Rundll32 errors... and can not load windows appearance or firefox... IE works fine I did a clean unistall of firefox and tried reinstalling with out success.,,

It sounds like there is still something there. A rouge.exe or .dll that LOOKS ok, but isn't. Did you try a couple of different scanners? Some will pick up what the others have missed.

By a clean uninstall of Firefox, did you remove/delete the Firefox folders and then reinstall? If it's not a virus, then something else is playing silly buggers.


C:\Users\username\AppData\Local\Mozilla
C:\Users\username\AppData\Roaming\Mozilla


Have you looked at the running processes in taskmanager? (Right-Click on the taskbar, select taskmanager and in taskmanager 'Show processes from all users'. MSCONFIG won't always show what's being loaded on start-up. For a little more detail, use Windows Defender to view your start-up apps.

Control panel>Windows Defender>tools>Software Explorer and show for all users. You can also select 'Currently Running Programs' from the category tab. Between taskmanager and Defender, you have a better chance of spotting naughties than just using MSCONFIG. There are more in-depth apps available, but I'd reccomend starting there.

(if you can't see the appdata folder, you will need to open an explorer window then hit ALT to show the menu and then it's Tools>Folder Options>View and select show hidden files and folders)

If something unwanted/broken is in the folders, Firefox will just 'pick it up again' when you re-install if you haven't removed the folders.

If you do Upgrade to Premium (it sounds like you want to and your mind is made up :) ) Make sure you back up any data you don't want to lose and then reformat. (You can choose to reformat/delete the partition when installing Vista)

Don't do an in-place upgrade since there will be 99% chance that whatever's causing your current errors will still be there .
 
Last edited:

My Computer

System One

  • Manufacturer/Model
    Self Built
    CPU
    i7 3770K HT ON 4.7GHz
    Motherboard
    P8Z68 Deluxe Gen 3
    Memory
    8GB G.Skill Ripjaws X 2133mhz
    Graphics Card(s)
    2x Gigabyte GTX 670 OC WindForce SLI
    Sound Card
    X-FI Forte + ATH-AD900
    Monitor(s) Displays
    x2 Dell U2410 / 58" Samsung / "40 Sony
    Screen Resolution
    1920*1200 / 1920x1080
    Hard Drives
    2x Intel 520 240GB * Crucial M4 128GB * 2x Samsung F3 1TB (RAID 0) * 2x WD Caviar Blacks 2TB (RAID 0)
    PSU
    Corsair AX1200W
    Case
    Lian Li PC-V1020A
    Cooling
    NH-D14: 3x140mm Gelid Wing 14: Sunbeam Rheobus Extreme
    Keyboard
    Topre Realforce // Ducky Shine Cherry MX Black
    Mouse
    Razer Imperator + Thermaltake Theron
    Other Info
    Laptop Specs:
    Clevo Sager P170HM //
    17.3 Matte 1920x1200 //
    i7 2720QM // 8GB 1333mhz //
    Dedicated GTX 485M //
    240GB Intel 520 + 750GB + Blu-Ray //

    Samsung Story 2TB USB 3.0
Thank you, I was hesitant to just do a blank upgrade. What I did do though was a clean install of vista premium. So far things have been going good. I reinstalled spybot and it seems to be doing fine... no dll errors... and things going smooth. I had to upgrade my video card to one with 256 mb and it works okay. the only thing I am regretting is I have two different users logged in. Been a little pain going back and forth granting premision for the "other" user but I think it will work out better once I get all my programs reinstalled...

Now it's time to find all the "cool" programs that seem to work good with vista premium. I especially want to find the 3d stuff..
 

My Computer

A clean installation would have wiped out any nasties. Glad it's all gone smooth.

I don't what you mean by 'cool 3d' programs, but a handy replacement for Flip-3D (WIN+Tab) would be 'Switcher'.

Switcher for Windows Vista

If you haven't already, grab TweakUAC. It leaves UAC on but makes it virtually silent. May help fight further infections...:)

Disable annoying Vista UAC popups with TweakUAC (FREE)


Have fun with your new Premium install. Don't forget to try different Anti-virus apps. ;)
 

My Computer

System One

  • Manufacturer/Model
    Self Built
    CPU
    i7 3770K HT ON 4.7GHz
    Motherboard
    P8Z68 Deluxe Gen 3
    Memory
    8GB G.Skill Ripjaws X 2133mhz
    Graphics Card(s)
    2x Gigabyte GTX 670 OC WindForce SLI
    Sound Card
    X-FI Forte + ATH-AD900
    Monitor(s) Displays
    x2 Dell U2410 / 58" Samsung / "40 Sony
    Screen Resolution
    1920*1200 / 1920x1080
    Hard Drives
    2x Intel 520 240GB * Crucial M4 128GB * 2x Samsung F3 1TB (RAID 0) * 2x WD Caviar Blacks 2TB (RAID 0)
    PSU
    Corsair AX1200W
    Case
    Lian Li PC-V1020A
    Cooling
    NH-D14: 3x140mm Gelid Wing 14: Sunbeam Rheobus Extreme
    Keyboard
    Topre Realforce // Ducky Shine Cherry MX Black
    Mouse
    Razer Imperator + Thermaltake Theron
    Other Info
    Laptop Specs:
    Clevo Sager P170HM //
    17.3 Matte 1920x1200 //
    i7 2720QM // 8GB 1333mhz //
    Dedicated GTX 485M //
    240GB Intel 520 + 750GB + Blu-Ray //

    Samsung Story 2TB USB 3.0
Back
Top