Posted 06 January 2008 - 08:04 PM
I have searched throughout all these forums and elsewhere, and I'm really stumped with a strange set of circumstances.
Today I had a Windows popup saying that it could not write to an external drive. Some kind of an advance write error. This is a firewire Maxtor drive I use for backing up. Sure enough, it's gone from My Computer. The drive works just fine on other machines.
When I go to Device Manager, I get an error with the header, "rundll32.exe - Bad Image" and the message, "The application or DLL C:\Program Files\WinFax\WfxSeh32.Dll is not a valid Windows image. Please check this against your installation diskette." Then another error with the same header and DLL C:\Program Files\Qualcomm\Eudora\EuShlExt.dll is not a valid Windows image. Please check this against yo8ur installation diskette." Both of these applications work just fine, by the way.
After the errors, Device Manager comes up, and there are no errors shown. The IEE 1394 controller is working fine, and so the external drive SHOULD be working, but it won't anymore.
Now, Kaspersky also shows an error: "Process C:\WINDOWS\system32\rundll32.exe (PID: 3284): attempt to load new or modified module was blocked."
When I click on details, there has been a string of attempts to load:
C:\WINDOWS\system32\rundll32.exe Attempt to load a new or modified module C:\Program Files\WinFax\WFXSEH32.DLL into process.
Kaspersky BLOCKS each time
C:\WINDOWS\system32\rundll32.exe Attempt to load a new or modified module C:\Program Files\Qualcomm\Eudora\EuShlExt.dll into process.
BLOCKS each time
HOWEVER, there is also a repeated attempts to load:
C:\WINDOWS\system32\rundll32.exe Attempt to load a new or modified module C:\WINDOWS\system32\mmc.exe into process.
Kaspersky ALLOWS this each time!
There are also dozens of other DLLs that Kasperky has allowed, all within a short period of time.
I've run done a full scan with Kaspersky, nothing.
I've done a scan with Sophos Anti Rootkit, nothing.
I've checked every process in Task Manager, and they all seem to be OK.
There is no unusual amount of CPU activity.
Oddly, another machine did have a similar advance write error to an external drive that was not connected at the time. When I connected it, it threw up the error. However, this machine is not exhibiting any of the problems I'm having with this machine.
So now, I can't get Windows to recognize my external hard drive, AND I get this cryptic stuff every time I try to open Device Manager. I've searched everywhere for this combination of things, but I'm coming up with nothing.
Any suggestions are greatly appreciated.