Re: rundll error Error loading system\32\barlmhpf.dll



Joevision wrote:

Hi out there,

I have encountered a rundll error on my laptop "Error loading
c:\windows\system32\barwmhpf.dll" The specified module could not be
found.
This occurs on startup and it seems to affect IE. Pop ups keep coming up
even though the pop up blocker is enabled and I can't manage add ons.
Netscape is not affected? I feel that the registry has been corrupted by
some virius and I am looking for help in correcting this, thanks

There is a strong probability that the file referenced is malware. If you
have already cleaned up your computer then the cleanup tools left a
reference to the malware in Startup. If you haven't cleaned up your
computer *thoroughly* then that's your first step.

A. Malware removal

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to do
all scans in Safe Mode.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://www.pctipp.ch/downloads/sicherheit/35905/multi_av_scanning_tool.html
- download site

The site is in German but David's tool is in English so don't let that worry
you. Scroll all the way down to almost the bottom of the page and you'll
see a box titled "Infos Zum Download - Multi-AV Scanning Tool". You'll see
"Download von www pctipp.ch" and the live link to download Multi_AV.

You can also check to see if there are targeted removal steps for your
malware here:
Bleeping Computer removal how-to's -
http://www.bleepingcomputer.com/forums/forum55.html

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the first link above (not here, please).

B. Startup management if machine is clean:

Start>Run>msconfig [enter]

This brings up the System Configuration Utility. Look on the Startup tab and
find the probable culprit. Uncheck the box next to its name, Apply and OK
out. You don't need to restart immediately, but the next time you do you'll
get a dialog saying you've used the Utility. Just tick the box that says in
effect, "don't bother me about this again".

Important - Do not use the System Configuration Utility to stop processes.
Instead, use Start>Run>services.msc [enter] and do not stop any services
unless you really, really know what you're doing.

How to Troubleshoot By Using the Msconfig Utility in Windows XP -
http://support.microsoft.com/?id=310560

Standard disclaimer: I can't see and test your computer myself, so these are
just suggestions based on many years of being a professional computer tech;
suggestions based on what you've written. You should not take my
suggestions as a definitive diagnosis. If you can't do the work yourself
(and there is no shame in admitting this isn't your cup of tea), take the
machine to a professional computer repair shop (not your local equivalent
of BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may be
so infested that Windows will need to be clean-installed. If possible, have
all your data backed up before you take the machine into a shop.


Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!
.



Relevant Pages

  • Re: cdyrqb.exe
    ... It would have been more helpful if you had posted the exact text of the error message. ... So either your antivirus/antispyware software removed the malware and left a reference to it in Startup or your computer is still infected but this malware file isn't being found. ... If you were that thorough and are 100% sure the machine is clean, remove the startup call by running the System Configuration Utility: ...
    (microsoft.public.windowsxp.general)
  • Re: JJUVFEEL.DLL error
    ... It is common for malware to have randomly named files like ... See below for how to manage your Startup. ... Important - Do not use the System Configuration Utility to stop processes. ... The free Autoruns program is very useful for managing your Startup - ...
    (microsoft.public.windowsxp.general)
  • Re: RUNDLL
    ... That file is associated with the MyWebSearch malware. ... antimalware program or you uninstalled it but left a reference to the ... You can remove the call at Startup, ... Important - Do not use the System Configuration Utility to stop processes. ...
    (microsoft.public.windowsxp.general)
  • Re: windows xp help
    ... Your antivirus/antispyware programs could have removed the malware and left a reference to it in Startup OR if you didn't do any malware removal you need to. ... Important - Do not use the System Configuration Utility to stop processes. ... How to Troubleshoot By Using the Msconfig Utility in Windows XP - ...
    (microsoft.public.windowsxp.general)
  • Re: host190.216.26.168.maximumasp.com:80 CLOSE_WAIT
    ... startup application/service/driver that is causing the problem. ... Only in safe mode is it fast. ... >> to show 127.0.0.1 for all the common sites for malware help. ...
    (microsoft.public.security)

Loading