Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows 8 with a Run DLL error


  • Please log in to reply
19 replies to this topic

#1 eman5977

eman5977

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:09:23 PM

Posted 05 January 2015 - 01:04 AM

Hi all, 

Dll error is users\name\AppData\local\ARCADE 1|CATHEL1.DLL( minus 2 little marks i can't make before the 1's)

I have this problem along with something i am finding online info on but am unsure of which route i should take . The DLL problem i am afraid is from a download and Malwarebytes attempt to quarantine and my other question stems from a network firewall message i got shortly after receiving my windows updates after purchasing my HP Pavillion laptop from QVC with McAfee(lifetime support). From what i have read online microsoft is saying to take McAfee off the computer and McAfee is saying disable windows but in the mean time i am not getting updates on McAfee and and unable to do virus scans. Any help would be appreciated on either or both topics. If i need to seperate and put on different forums or whatever, i appologize in advance for my ignorance of where to post. I read a few getting started posts but am still unclear. I am afraid i have also deleted some apps and reinstalled new versions of Mozilla , internet explorer and google as well as quarentining everything that Malwarebytes suggested be quarentined.


Edited by hamluis, 05 January 2015 - 05:06 PM.
Moved from Win 8 to Am I Infected - Hamluis.


BC AdBot (Login to Remove)

 


m

#2 JohnC_21

JohnC_21

  • Members
  • 21,637 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:23 PM

Posted 05 January 2015 - 07:38 PM

Did this DLL error appear after doing a scan with malwarebytes? Does it appear at startup?

 

Just one question. Windows 8 allows you to do a refresh. Any apps from the windows store will be saved as well as your documents and pictures but any programs that were installed after purchase would have to be reinstalled. I am not sure if Mcafee would need to be reactivated or not. Did you purchase Office with this computer? 

 

You could do a Refresh (Not Reset) as shown here. This would get you a somewhat clean state so you could then start another scan with Malwarebytes and a few other utilites. This may be the way to go as Mcafee is not longer scanning. You would need to reinstall Malwarebytes.

 

Is a Refresh something you would be want to do or do you want to try and clean the infection manually from it's current state?



#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,582 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:23 PM

Posted 05 January 2015 - 09:27 PM

... From what i have read online microsoft is saying to take McAfee off the computer and McAfee is saying disable windows but in the mean time i am not getting updates on McAfee...


Since Windows 8 Defender includes anti-virus protection, it may be disabled by the installation of a third-party anti-virus program. If a trial anti-virus came preinstalled on your computer or you installed one, it most likely turned Windows 8 Defender off (disabled) to avoid conflicts. Windows 8 Defender will remain disabled until the third party anti-virus has been completely uninstalled and then Windows 8 Defender needs to be activated if you choose to use it.If you want to use another anti-virus then you need to disable Windows 8 Defender before installing a different antivirus software.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#4 eman5977

eman5977
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:09:23 PM

Posted 05 January 2015 - 10:52 PM

JohnC it showed up after the scan and after i quarantined everything that they recommended be quarantined. It pops up regularly after i have opened any of the 3 browsers IE , firefox or chrome . What is really odd is both McAfee and Windows Defender show as active.  One of the forums suggests reloading McAfee to get rid of the network firewall message.



#5 eman5977

eman5977
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:09:23 PM

Posted 05 January 2015 - 10:54 PM

Quietman Thank you . I did check and it shows active yet so does McAfee yet i have not got a McAfee update since Oct.



#6 eman5977

eman5977
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:09:23 PM

Posted 05 January 2015 - 10:57 PM

I'd like to try to do it without the refresh if possible but of course baring that option I would not be opposed to that option. I was hoping it wasn't that bad yet.



#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,582 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:23 PM

Posted 06 January 2015 - 05:30 AM

Either Defender needs to be disabled or McAfee needs to be removed.

McAfee recommends you uninstall using Programs and Features (or Add/Remove Programs) before running their McAfee Consumer Products Removal tool (MCPR).

* How to uninstall your products using MCPR.exe
* How to uninstall or reinstall McAfee products using the Consumer Products Removal tool (MCPR)
* McAfee Consumer Products Removal tool BleepingComputer download

Note: Sometimes the uninstall works more effectively if you first stop and disable the program's service (and associated processes) or perform the removal in safe mode so there are less processes which can interfere with the uninstallation.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#8 eman5977

eman5977
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:09:23 PM

Posted 06 January 2015 - 04:52 PM

Ok, McAfee has been removed successfully and the firewall alert has disappeared from the alert center but i still get the DLL error message window opening.



#9 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,582 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:23 PM

Posted 06 January 2015 - 06:27 PM

RunDLL32.exe is a legitimate Windows file that executes/loads .dll (Dynamic Link Library) modules which too can be legitimate or sometimes malware related. A RunDLL "Error loading..." or "specific module could not be found" message usually occurs when the .dll file(s) that was set to run at startup or as scheduled task in the registry or as a scheduled task has been deleted.

It's not uncommon to find remnants of startup and scheduled task registry keys when booting into Windows after uninstalling programs or using anti-virus/security scanning tools to remove adware and malware. Windows is trying to load this file but cannot locate it since the file was most likely removed. However, an associated orphaned registry entry still exists and is telling Windows to load the file when you boot up. Since the file no longer exists, Windows will display an error message. You need to remove this registry or scheduled task entry so Windows stops searching for the file when it loads.

To resolve this, download AutoRuns and save it to your Desktop.
  • Create a new folder on your hard drive called AutoRuns (C:\AutoRuns) and extract (unzip) the file there.
  • Open the folder and double-click on autoruns.exe to launch it.
    Vista/Windows 7/8 users right-click and select Run As Administrator.
  • Please be patient as it scans and populates the entries.
  • When finished scanning, it will say Ready at the bottom and list all entries under the Everything tab.
  • In the top menu, click File > Find... and type CATHEL1.DLL (the file name related to the ,dll error}, then click Find Next.
  • Alternatively, you can scroll through the list and look for any entry related to CATHEL1.DLL.
  • If found, right-click on the entry and choose delete.
  • Exit Autoruns and reboot your computer when done.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#10 eman5977

eman5977
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:09:23 PM

Posted 06 January 2015 - 07:26 PM

No joy,

It can't find that listing and i can't find any of them remotely like it most are under c\program fies very few listed under \user\(MY name ) as the DLL in question is . There are some in yellow that are not found and some in pink and blue. I ran rkill.exe thn did a scan with Windows Defender and Malawarebytes and both show nothing found but i still have the DLL msg problem .



#11 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,582 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:23 PM

Posted 06 January 2015 - 07:30 PM


Please download AdwCleaner by Xplode and save to your Desktop. This tool will search for and remove many potentially unwanted programs (PUPs), adware, toolbars, browser hijackers, extensions, add-ons, browser helper objects (BHOs) and other junkware to include many related registry entries (values, keys) and remnants.
  • Double-click on AdwCleaner.exe to run the tool.
    Vista/Windows 7/8 users right-click and select Run As Administrator.
  • The tool will start to update its database...please wait until complete.
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, click on the Report button...a logfile (AdwCleaner[RX].txt) will open in Notepad (where the largest value of # represents the most recent report).
  • After reviewing the log, click on the Clean button.
  • Press OK when asked to close all programs and follow the onscreen prompts.
  • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
  • After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
-- Note: The contents of the AdwCleaner log file may be confusing. Unless you see a program name that you recognize and know should not be removed, don't worry about it. If you see an entry you want to keep, return to AdwCleaner before cleaning...all detected items will be listed (and checked) in each tab. Click on and uncheck any items you want to keep.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#12 eman5977

eman5977
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:09:23 PM

Posted 06 January 2015 - 08:33 PM

Ok here is the report of last run i ran it a couple of times as i was confused by the running from line as i chose run as administrator. Is that correct?

# AdwCleaner v4.106 - Report created 06/01/2015 at 19:26:08
# Updated 21/12/2014 by Xplode
# Database : 2015-01-03.1 [Live]
# Operating System : Windows 8.1  (64 bits)
# Username : Erick - LAPTOP
# Running from : C:\Users\Erick\Desktop\AdwCleaner(1).exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v34.0.5 (x86 en-US)


-\\ Google Chrome v39.0.2171.95


-\\ Comodo Dragon v


*************************

AdwCleaner[R0].txt - [9274 octets] - [27/11/2014 21:43:31]
AdwCleaner[R1].txt - [909 octets] - [27/11/2014 22:05:25]
AdwCleaner[R2].txt - [968 octets] - [28/11/2014 00:32:01]
AdwCleaner[R3].txt - [1088 octets] - [28/11/2014 12:49:26]
AdwCleaner[R4].txt - [1208 octets] - [11/12/2014 18:08:11]
AdwCleaner[R5].txt - [3012 octets] - [06/01/2015 19:06:29]
AdwCleaner[R6].txt - [1499 octets] - [06/01/2015 19:12:36]
AdwCleaner[R7].txt - [1559 octets] - [06/01/2015 19:14:56]
AdwCleaner[R8].txt - [1630 octets] - [06/01/2015 19:23:05]
AdwCleaner[R9].txt - [1190 octets] - [06/01/2015 19:26:08]
AdwCleaner[S0].txt - [9805 octets] - [27/11/2014 21:50:07]
AdwCleaner[S1].txt - [1028 octets] - [28/11/2014 00:35:09]
AdwCleaner[S2].txt - [1150 octets] - [28/11/2014 12:56:50]
AdwCleaner[S3].txt - [1270 octets] - [11/12/2014 18:11:19]
AdwCleaner[S4].txt - [3190 octets] - [06/01/2015 19:08:13]
AdwCleaner[S5].txt - [1622 octets] - [06/01/2015 19:16:55]

########## EOF - C:\AdwCleaner\AdwCleaner[R9].txt - [1610 octets] ##########
 



#13 eman5977

eman5977
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:09:23 PM

Posted 06 January 2015 - 08:38 PM

here is copy of the time i ran getting rid of the arcade parlor

# AdwCleaner v4.106 - Report created 06/01/2015 at 19:08:13
# Updated 21/12/2014 by Xplode
# Database : 2015-01-03.1 [Live]
# Operating System : Windows 8.1  (64 bits)
# Username : Erick - LAPTOP
# Running from : C:\Users\Erick\Desktop\AdwCleaner(1).exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

[x] Not Deleted : C:\Program Files (x86)\RoboSaver
Folder Deleted : C:\Users\Erick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ArcadeParlor

***** [ Scheduled Tasks ] *****

Task Deleted : ApCatSupport

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\pc optimizer pro
Key Deleted : HKLM\SOFTWARE\{F2E9660B-98AF-42c0-8258-9CDDF07BF95D}

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v34.0.5 (x86 en-US)


-\\ Google Chrome v39.0.2171.95

[C:\Users\Erick\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\Erick\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

-\\ Comodo Dragon v

[C:\Users\Erick\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\Erick\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}

*************************

AdwCleaner[R0].txt - [9274 octets] - [27/11/2014 21:43:31]
AdwCleaner[R1].txt - [909 octets] - [27/11/2014 22:05:25]
AdwCleaner[R2].txt - [968 octets] - [28/11/2014 00:32:01]
AdwCleaner[R3].txt - [1088 octets] - [28/11/2014 12:49:26]
AdwCleaner[R4].txt - [1208 octets] - [11/12/2014 18:08:11]
AdwCleaner[R5].txt - [3012 octets] - [06/01/2015 19:06:29]
AdwCleaner[S0].txt - [9805 octets] - [27/11/2014 21:50:07]
AdwCleaner[S1].txt - [1028 octets] - [28/11/2014 00:35:09]
AdwCleaner[S2].txt - [1150 octets] - [28/11/2014 12:56:50]
AdwCleaner[S3].txt - [1270 octets] - [11/12/2014 18:11:19]
AdwCleaner[S4].txt - [3050 octets] - [06/01/2015 19:08:13]

########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [3110 octets] ##########
 


i also checked internet for info on robosaver and removed it as well



#14 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,582 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:09:23 PM

Posted 06 January 2015 - 09:05 PM

Please download and scan with Emsisoft Anti-Malware 30 day trial version.

  • Double-click on the EmsisoftAntiMalwareSetup.exe icon to install.
  • If the setup program displays an alert about safe mode, please click on the Yes button to continue.
  • Agree to the license agreement and click on the Install button to continue with the installation.
  • You will get to a screen asking what type of license you wish to use with Emsisoft Anti-Malware.
    .
    If you have an existing license key or want to buy a new license key, please select the appropriate option. Otherwise, select the Freeware or Test for 30 days, free option. If you receive an alert after clicking this button that your trial has expired, just click on the Yes button to enter freeware mode, which still allows the cleaning of infections.
    .
  • Emsisoft Anti-Malware will now begin to update it's virus detections.
  • When the updates are completed, select Enable PUPs Detection.
  • Select the Full Scan option to begin scanning your computer for infections.
    scan-selection.jpg
    .
  • When the scan has finished, the program will display the scan results that shows what infections where found.
  • Click on the Quarantine Selected button, which will remove the infections and place them in the program's quarantine.
    scan-results.jpg
    .
  • If Emsisoft prompts you to reboot your computer to finish the clean up process, please allow it to do so.
  • When finished, click Logs > Scan at the top to view the Scan log which is listed by date.
  • Highlight the log by clicking on it, then click View details to open it in Notepad. The logfile will be named in the following format: a2scan_Date-Time.txt (YYMODY)
  • Alternatively you can click Export and save the log to your Desktop, then open it by double-clicking on it.
  • Copy and paste the contents of that logfile in your next reply.

Note: By default Emsisoft Anti-Malware installs as a free fully functional 30-day trial version with real-time protection. After the trial period expires you can either choose to buy a full version license or continue to use it in limited freeware mode which still allows you to scan and clean infections. The freeware mode no longer provides any real-time protection to guard against new infections. However, even if the trial is still enabled, you can easily turn off all real time protection and just have it running as on-demand scanner only. After the trial period expires nothing really changes except that the options to activate real-time protection are no longer available without purchasing the full version.


.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#15 eman5977

eman5977
  • Topic Starter

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:09:23 PM

Posted 06 January 2015 - 09:18 PM

ok that is presently downloading and i will run it. The Missing DLL msg is now gone and the 2 scans show no problem but i ran windows system file checker (sfc/scannow from command prompt as admin) to see what that would tell us  and it responded with found corrupt files but was unable to fix some of them . I have not opened the cbs log as of yet but that is availible if it would help you in any way.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users