rundll32.exe HELP ME PLEASE! No restore wizard!

Hi everyone,

First, thank you very much for your time! I am going crazy... I have spent hours upon hours searching the net and cannot find a solution!

1. I think I may have deleted my rundll32.exe, however I'm not quite sure how it happened. There is no rundll32.exe on my computer, when I search for it ( can see hidden files) nothing comes up. It is not in my "cache". However, when I go into C hard drive windows folder and search rundll32 it is there......... meaning it is not deleted and must be faulty? Whenever I try to run or open certain things I get the rundll32.exe error. ALso, upon bootup before the password screen there is an error message that has something to do with acer ( I need to write down what it says and I will post that up )

2. I have tried downloading a couple things that claim to fix rundll32 however I cannot open them/unzip them

3. I have ran malware bytes and my norton and they say my PC is clean- so I do not believe a virus is causing.

4. I ran the scf/scannow feature and the message that I got back was some files were fixed and others were not repairable. I was following directions from a forum and managed to save what I believe is the not repairable items. I have copy/pasted below. If you want me to send you the file, tell me how to do it.. I tried to attach but it isn't showing in the post.

2010-12-03 08:35:39, Info CSI 00000166 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2010-12-03 08:35:43, Info CSI 00000168 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2010-12-03 08:50:34, Info CSI 000002d7 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2010-12-03 08:50:36, Info CSI 000002db [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2010-12-03 08:50:37, Info CSI 000002ea [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2010-12-03 08:50:38, Info CSI 000002ee [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch




5. I tried doing system restore, however it tells me that the restore wizard is access denied. In safe mode that restore folder just doesn't open or respond when I click on it.

I do not have the vista cd.

I have gateway computer, vista home premium, 64 bit

thank you again for your time, and I hope someone has a solution!!!!!!!!!!!!!!!!

Edited by bds0625, 03 December 2010 - 07:32 PM.

There is no rundll32.exe on my computer, when I search for it

Windows search is a piece of garbage, that's why.
As long, as you see the file in system32 folder, you should be fine, but we'll check in a moment.

Those errors from "sfc" scan are not that important since all of them concern Microsoft-Windows-Sidebar. You can live without it.

Whenever I try to run or open certain things I get the rundll32.exe error

What things and what is the exact error?

I need to write down what it says and I will post that up

Please, do.

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2
64-bit users go HERE

• Double-click SystemLook.exe to run it.
• Vista users:: Right click on SystemLook.exe, click Run As Administrator
• Copy the content of the following box into the main textfield:
  

  :filefind
  rundll32.exe
  

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

HI, thanks for your reply! I'm trying to be as concise as possible.

These are the errors:
1. When I try to open some things on my computer ( control panel )
C://windows/system32/rundll32.3xe Windows cannot access this, Need permission

2. When I try to open programs or unzip files
Registry error. Not all the data has been successfully written to the registry. Some keys open by system or other processes

3. When I start/reboot my computer after entering my password the screen goes blank and this error pops up
C:\Acer\preload\command\alaunchx\alaunchx.exe Windows cannot access specified device path or file. You may not have appropriate permission to access
But then the computer turns on and runs fairly normally.

.

Edited by bds0625, 04 December 2010 - 05:51 PM.

Your files are just fine.
What you have is a permission issues.

It can be caused by couple of culprits, like corrupted profile, or some infection.

With the information you have provided I believe you will need help from the malware removal team. I would like you to start a new thread and post a DDS log HERE and include a link to this thread. Please make sure that you read the information about getting started before you start your thread.

It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient. Help is on the way!

SystemLook 04.09.10 by jpshortstuff
Log created at 16:08 on 04/12/2010 by Omax
Administrator - Elevation successful

========== filefind ==========

Searching for "rundll32.exe"
C:\Windows\System32\rundll32.exe --a---- 46592 bytes [09:33 02/11/2006] [11:16 02/11/2006] 10446646D128E580C46615338E74E672
C:\Windows\SysWOW64\rundll32.exe --a---- 44544 bytes [12:20 02/11/2006] [09:45 02/11/2006] 4B555106290BD117334E9A08761C035A
C:\Windows\winsxs\amd64_microsoft-windows-rundll32_31bf3856ad364e35_6.0.6000.16386_none_31ed2b17665cf346\rundll32.exe --a---- 46592 bytes [09:33 02/11/2006] [11:16 02/11/2006] 10446646D128E580C46615338E74E672
C:\Windows\winsxs\x86_microsoft-windows-rundll32_31bf3856ad364e35_6.0.6000.16386_none_d5ce8f93adff8210\rundll32.exe --a---- 44544 bytes [12:20 02/11/2006] [09:45 02/11/2006] 4B555106290BD117334E9A08761C035A

-= EOF =-

Thanks a lot for your help. I will do that.
Sorry about the repost of that scan you had me do, my internet blipped and I hit the back button and deleted it on accident.

Not a problem