Computer Hope
Microsoft => Microsoft Windows => Windows Vista and 7 => Topic started by: J Dawg71187 on August 19, 2008, 07:53:14 PM
-
Whenever I start up my computer I receive this error message.
error loading C:Windows\system32\etgysdax.dll The specific module cannot be found.
Help what does this mean, how can I fix it.
-
Info - info - info!!?
Op system - how long the problem? Any recent changes -etc - etc.
What if any app/function seems inpaired after this message? It's not in my system32 and sounds like a specific dynamic link library for an app you have.
-
IM using Vista.
NOt sure how long the problem has been going for sure.
-
NOt sure how long the problem has been going for sure.
You don't know how long this has been going on? Even though it appears every time you start the computer up? ??? ???
Google didn't find anything so I suggest you look here:
http://www.computerhope.com/forum/index.php/topic,46313.0.html
-
Please follow the above link posted by Carbon. It looks like you've got yourself a Vundo infection.
-
Please follow the above link posted by Carbon. It looks like you've got yourself a Vundo infection.
Nice name.....Vundo....
-
etgysdax.dll from its name I think it's a part of some badware(virus,adware and so on) ,and it can not work any longer,because of the healing of antivirus software or other reason.
And now you only need to remove it form the "startup" list in the "system configuration utility"(<-start up it from "start menu"->"run"->type in "msconfig"
-
And now you only need to remove it form the "startup" list in the "system configuration utility"(<-start up it from "start menu"->"run"->type in "msconfig"
We can remove it much more effectively if you post the required logs from the link I posted earlier.
Disabling the Startup doesn't mean you got rid of the virus.
-
qinghao, no offense but the advice you have been giving for malware removal are crude at best. You do understand that malware removal is more complex than that don't you?
-
etgysdax.dll from its name I think it's a part of some badware(virus,adware and so on) ,and it can not work any longer,because of the healing of antivirus software or other reason.
And now you only need to remove it form the "startup" list in the "system configuration utility"(<-start up it from "start menu"->"run"->type in "msconfig"
Carbon is right. You are merely trying to sweep the problem under the rug. The OP's computer has a pretty good chance of still being infected, so we need to take a look at the logs before deciding what action to take.
-
http://www.computerhope.com/forum/index.php/topic,64158.msg409698.html#msg409698
I assumed that he had seen this msg yet.
-
I am still in the process of leting superantispyware scan 115000 files and still goin
-
With infected computers, these scans can sometimes take a bit longer than usual. Whenever you're ready to post your logs, we'll be here.
-
Noticed so far its over 6 and a half hours
-
Hmmmm....that's a lot of files you got there...
Make sure you're not multi-tasking. Give the scan all your Processing Power.
-
If you don't mind starting the scan from the beginning, then I'd suggest you scan in safe mode if you could. The bare minimum is running in safe mode so you might be able to get the scan done quicker.
-
well its been in the doccuments and settings for about 2 hours so Im hoping its almost done
-
What is your Hard Drive Capacity and Free Space?
-
188 gb free of 296
-
Yeah, I think that will take a while......but not so long ???
-
yeah its scanned 122138 files and counting
-
In 30GB, I have a total of 166451 files.
Are you doing anything else on that computer?
-
no just running the scan
-
provided nothing else happens, I think your scan should be done soon enough. The scan program is running normally I assume.
-
I would assume it is it has been scanning the application data folder full of sub application data folders
-
I would assume it is it has been scanning the application data folder full of sub application data folders
Most likely the case.
I suggest you leave it overnight and if it still hasn't finished in the morning, there is a problem...
-
ok thanks for all the help
-
Good Luck.
-
That's not a huge amount of space to cover, but you may have a lot of small files and directories, which can slow down the scan. A 1 GB file can be scanned much faster than 500 MB of small text files and pictures. Just wait it out and it will finish soon enough. MBAM shouldn't take nearly as long, but we'll just worry about SAS and HJT (which will take only seconds) for the time being.
-
So it ran for ten plus hours but it got the file C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\plugins\com.adobe.versioncue.faces.components_3.0.0\lib\myfaces-1.1.1-src.zip
It just froze, it does the exact same thing when I run my anti virus. I rebooted and ran the malware and hijackthis, then rebooted again, that error no longer appears. Just wondering what you think.
[recovering disk space -- attachment deleted by admin]
-
Well, if I were you, I would ditch CA for something like Avast! or AVG. Personally, I don't quite trust it. Go ahead and remove these entries with HijackThis...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {50AC8A93-8558-4540-9D29-34E4047AB699} - (no file)
O2 - BHO: (no name) - {64F9E8DE-F247-449D-A397-10B986A61005} - (no file)
Download ComboFix (http://download.bleepingcomputer.com/sUBs/ComboFix.exe) and save it to your desktop. Run the program and read its disclaimer (it's fairly short) and make sure you really pay attention to what it says. Follow the prompts and when finished, it will produce a log at C:\ComboFix.txt. Go ahead and post that here along with a new HijackThis log. Note: Don't click on the window while it's running; this may cause stalls.
-
Here are the new logs.
[recovering disk space -- attachment deleted by admin]
-
Well, you now appear to be clean. Are you still experiencing any problems? Is your anti-virus still acting up?
-
Just when I get to that file. But if i exclude it it runs fine.
-
So, you are still getting the same error with the etgysdax.dll file?
If you enable hidden files and folders (along with system files), does C:\Windows\system32\etgysdax.dll appear to actually exist?
-
No that error is gone. My antivirus just lags when it hits that one adobe file.
-
Okay, gotcha. It could be a large file or the zip could have a lot of files compressed within it. What if you delete that file? Do you still have the same problem? And is this Adobe software a legal copy?
Also, I found two files that I overlooked. You should navigate to these two files and delete them...
C:\Windows\System32\wljpmdev.ini
C:\Windows\System32\rmookqpi.ini
-
Yes it is a legal copy. And it is a zip file.
-
and as for those two files, should I just go to them via my computer and just delete them
-
and as for those two files, should I just go to them via my computer and just delete them
Yes. You may need to enable hidden files and folders first. If you can't find the files or have trouble deleting them, we can try a different method.
And it is a zip file.
Yes...what I was saying is that there may be a lot of files within the zip file, which could create lag. If you don't need the file, I would try simply deleting it. Of course, if you'd prefer to just exclude it from scans, then that is fine as well.
-
found them and they are removed
-
Great. As far as I can see, you appear to be virus-free. Go ahead and uninstall ComboFix. Go to Start > Run and type in combofix /u (note the space) and click OK.
Then let's clean your restore points and set a new one:
Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs from changing those files. This is the only way to clean these files: (You will lose all previous restore points which are likely to be infected)
1. Turn off System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.
2. Restart your computer.
3. Turn ON System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check Turn off System Restore.
Click Apply, and then click OK.
System Restore will now be active again.
-
I dont have a shortcut to my computer and there is no system restore tab under the computer properties
-
nvm i got it
-
Another way to get to System Restore is Start > Programs > Accessories > System Tools > System Restore. Once it's open, look for a little link that says System Restore Settings.
EDIT: Heh, I just read your newest post. I'm glad you found it.
-
i didnt find systemm restore settings but i did find the available discs i just un checked the c drive restarted then rechecked it and made a new point
-
As long as you figured out a way to do it, that's all that matters!
-
Ok this is an easy fix. I had exactly the same problem.
1. Go to computer, your main drive, program files, common files, Ahead, DSfilter.
2. Rename "NeroVideoProc.ax" to say "1NeroVideoProc.ax"
3. Rename "NeVideo.ax" to say "1NeVideo.ax"
4. Reboot
5. Problem fixed.
That's it!
It started for me just after I installed Nero. It's not Vista.
This was passed on to me by someone in a forum and now I'm paying it forward.
J.
-
Manjujakhar, I don't see how this could be the problem here.
-
Manjujakhar, I don't see how this could be the problem here.
Yeah, as far as I can see, J Dawg doesn't even have Nero installed on his computer, so those instructions are pretty much useless.
-
so .... is J Dawg's problem fixed or is he still in need of further help?
-
Oh wow, I thought this topic was a month old. I keep thinking it's September. >:(
-
so .... is J Dawg's problem fixed or is he still in need of further help?
Well, the main issue has been resolved (last I heard). Also, J Dawg has been able to get around the virus-scan lag by excluding that file. However, I'm still curious to know why it causes such a lag.