Results 1 to 12 of 12

Thread: Rundll error

  1. #1
    mick_571
    Guest

    Rundll error

    I recently got hit with the SirCam virus. Since removing it from my computer, I've been receiving a Windows Registry Check error during start up. The error says: Error in deskcp16.dll. Missing entry: QUICKRES_RUNDLLENTRY. When I click on OK, I get a message about not being able to scan/start(?) /autorun. I can click on OK and continue working on my computer as normal (so far no problems). However, I cannot access my Display properties either by right-clicking on the desktop or through the Control Panel. Does anyone have any ideas? I also cannot perform a System File Check, but I'm not sure if that is related to this. Thanks.

    P.S. I've also posted on another forum which has been very helpful. But I thought I'd try this forum, too.

  2. #2
    Uranium Lounger
    Join Date
    Jan 2001
    Location
    Cincinnati, Ohio, USA
    Posts
    7,089
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Rundll error

    The error you're getting most likely means that the file DESKCP16.DLL is missing, or corrupt and cannot be opened. That's also why you can't open the display properties tab. You can manually extract the file from your Windows CD by going to a command (DOS) prompt and using the EXTRACT command. If you need help pulling that off just holler.

    System File Checker's demise is a bad indicator. If it were me, I would be sorely tempted to get some personal stuff off the drive, and then blow away the disk and start fresh - Format C:.

    Or, you could live with the thing for now but I suspect you'd like to get to display properties every now and again!
    -Mark

  3. #3
    3 Star Lounger
    Join Date
    Dec 2000
    Location
    New Zealand
    Posts
    295
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Rundll error

    Mick as well as Marks suggestion about deskcp16.dll, you are probably missing Rundll32.dll. This file is needed for dialog boxes I think. I cleaned the sircam off a clients machine last week and had to restore this file. <img src=/S/cheers.gif border=0 alt=cheers width=30 height=16>

  4. #4
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Brantford, Ontario, Canada
    Posts
    2,391
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Rundll error

    Actually, the file that Mike is speaking about is rundll32.exe. I spent the entire week last week ensuring that all desktop and laptop computers at work had an up to date anti-virus program, and that the computer was clean. <img src=/S/drop.gif border=0 alt=drop width=23 height=23> <img src=/S/hairout.gif border=0 alt=hairout width=31 height=23> <img src=/S/surrender.gif border=0 alt=surrender width=31 height=23>

    Only came across 8 SirCam infections, all of them needed the rundll32.exe file replaced.

    If you can, it's easier to copy the rundll32.exe from another Win98 computer, that hasn't been infected. Saves time over trying to remember how to use the CAB files... <img src=/S/grin.gif border=0 alt=grin width=15 height=15>
    Christopher Baldrey

  5. #5
    Bronze Lounger
    Join Date
    Feb 2001
    Location
    England
    Posts
    1,306
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Rundll error

    Hi
    This quoted info' might be of use :

    "SirCam...copies itself as 'rundll32.exe' file to Windows directory. The original 'rundll32.exe' file is renamed to 'run32.exe'. This copy exists only if a computer got infected through a network share."

    For even more terrifying facts, try <A target="_blank" HREF=http://www.europe.f-secure.com/v-descs/sircam.shtml> here. </A>

    This particular worm has to be removed strictly according to instructions. If, for instance, you try to disinfect your system before correcting the .exe key in the Registry, your system may fall over.
    To correct the Registry first, go get this.. It'sonly 170 bytes, but be careful and take the usual back-up precautions. As it's a .reg file, it modifies Registry entries. If you're running MoOutlook Security, don't double-click the file, RClick and select Merge instead.

    Luck

  6. #6
    mick_571
    Guest

    Re: Thanks. I'm fixed!!! (eom)

    <P ID="nt"><font size=-1>(No Text)</font>

  7. #7
    Bronze Lounger
    Join Date
    Feb 2001
    Location
    England
    Posts
    1,306
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Thanks. I'm fixed!!! (eom)

    In case anyone is still having problems with SirCam, read the following quote :

    " W32.Sircam.Worm is a new virus that is spreading very fast. It is disguised as a .bat, .com, .lnk, or .pif attachment to an email message with a random subject line. Do not open these attachments. (As if!)

    The body of the message is random, but the English version always has
    the following:

    First line: Hi! How are you?
    Last line: See you later. Thanks

    To determine whether the virus has infected your system, perform the
    following steps:
    1. Start the registry editor (regedit.exe).
    2. Move to
    HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentV ersionRunServices.

    3. Look for Driver32=%System%scam32.exe. If you find this entry, the virus has infected your computer.

    For more information, visit <A target="_blank" HREF=http://www.symantec.com/avcenter/venc/data/w32.sircam.worm@mm.html> this site. </A>
    You'll also find a free download that can search your machine for W32.Sircam.Worm and remove the virus. "

    Rgds

  8. #8
    3 Star Lounger
    Join Date
    Dec 2000
    Location
    New Zealand
    Posts
    295
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Rundll error

    Quite right Chris apologies <img src=/S/doh.gif border=0 alt=doh width=15 height=15>

  9. #9
    3 Star Lounger
    Join Date
    Dec 2000
    Location
    New Zealand
    Posts
    295
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Rundll error

    There is also a utility that can be downloaded to check and rid a pc of that nasty from <A target="_blank" HREF=http://www.sarc.com/avcenter/venc/data/w32.sircam.worm@mm.html>http://www.sarc.com/avcenter/venc/data/w32...am.worm@mm.html</A>
    <img src=/S/cheers.gif border=0 alt=cheers width=30 height=16>

  10. #10
    Bronze Lounger
    Join Date
    Feb 2001
    Location
    England
    Posts
    1,306
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Rundll error

    Hi Mike
    Your URL is the same one as I gave at 'this site' a couple of posts ago. Serves me right for hiding it. <img src=/S/bummer.gif border=0 alt=bummer width=15 height=15>

  11. #11
    Silver Lounger
    Join Date
    Jan 2001
    Location
    Brantford, Ontario, Canada
    Posts
    2,391
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Rundll error

    No problem Mike... that's what we're all here for. Helping each other out with problems and correcting errors.
    Christopher Baldrey

  12. #12
    3 Star Lounger
    Join Date
    Dec 2000
    Location
    New Zealand
    Posts
    295
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Rundll error

    Yeah whoops, I didn't notice your post when I did mine, I just charged in with my fix. Should read all the posts firsteh!! <img src=/S/nuts.gif border=0 alt=nuts width=15 height=15> <img src=/S/rtfm.gif border=0 alt=rtfm width=24 height=23>

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •