Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Regsvr32 error


  • This topic is locked This topic is locked
4 replies to this topic

#1 Avipatidar

Avipatidar

  • Members
  • 3 posts
  • OFFLINE
  •  

Posted 18 July 2016 - 09:54 AM

Hi friends ,
whenever i open my laptop a message appears saying
-----------------------------
RegSvr32

The Module "C:\Users\nehal\AppData\Local\Axdbworks\spomobiletor.dll" failed to load.

Make sure the binary is stored at the specified path of debug it to check for problems with the binary or dependent .DLL files.

The specified module could not be found.
----------------------------------------
i tried to deal it with ccleaner , dll fixer but nothing happened.
I even used Norton , eset node 3 , malwarebytes but nothing happened .
I am even not able to register my dll files .
Well there is no effect on performance but heard it is a serious problem.
Also I have attached my "FRST" File .

I will really appreciate if you help me..
Please ....

Attached Files


Edited by Avipatidar, 18 July 2016 - 09:57 AM.


BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 39,963 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:07:25 AM

Posted 19 July 2016 - 09:41 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Your hoslt file was compromised. It will be reset to the Windows default.
You can reinstall the one you previously used.

Press the windows key Windows_Logo_key.gif+ r on your keyboard at the same time. This will open the RUN BOX.
Type Notepad and and click the OK key.
Please copy the entire contents of the code box below to the a new file.
 
start


CreateRestorePoint:
EmptyTemp:
CloseProcesses:
Hosts:

(BitTorrent Inc.) C:\Users\nehal patidar\AppData\Roaming\uTorrent\updates\3.4.7_42330\utorrentie.exe
(BitTorrent Inc.) C:\Users\nehal patidar\AppData\Roaming\uTorrent\updates\3.4.7_42330\utorrentie.exe
HKLM\...\Run: [gplyra] => C:\Users\nehal patidar\AppData\Roaming\gplyra\gplyra\start.cmd
HKU\S-1-5-21-3632974632-978978755-2483695789-1001\...\Run: [Axdbworks] => regsvr32.exe "C:\Users\nehal patidar\AppData\Local\Axdbworks\spoMobiletor.dll" <===== ATTENTION
SearchScopes: HKLM-x32 -> DefaultScope value is missing
CHR HomePage: gregugitulestogagh -> hxxp://www.google.com/
CHR StartupUrls: gregugitulestogagh -> "hxxp://www.youndoo.com/?z=0038fc030eca08836b60ae2gbz1q5bbz9o8bcm9bco&from=sqr&uid=WDCXWD10JPVX-22JC3T0_WD-WXW1EB53XV5T3XV5T&type=hp"
S2 ctsAgentsht.exe; "C:\Program Files (x86)\Phlachhalicult\ctsAgentsht.exe" {C25DA384-2010-45A4-A1ED-BFA540D4789B} {9DC74CD5-24EA-4ADE-9C42-608A8CE17116} [X]
S2 Foubs; "C:\Users\nehal patidar\AppData\Roaming\BolvuzYphr\Ofejukug.exe" -cms [X]
S2 Fumnyg; "C:\Users\nehal patidar\AppData\Roaming\Mialfyabj\Mialfyabj.exe" -cms [X]
S1 qrovjfib; \??\C:\Windows\system32\drivers\qrovjfib.sys [X]
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
Task: {9B6F640B-E35D-4B07-A070-FBF65287533C} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe
Task: {B10CF49B-6022-4CE4-9457-74CFE292C30A} - System32\Tasks\Cotsqwutain Agent => C:\Program Files (x86)\Phlachhalicult\ctsAgentghr.exe
ShortcutWithArgument: C:\Users\nehal patidar\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d896af6c02e0d57d\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=gregugitulestogagh
C:\Users\nehal patidar\AppData\Local\Axdbworks
C:\Program Files\KMSpico
C:\Program Files (x86)\Phlachhalicult

End
Save the file as fixlist.txt in the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the Farbar log you have submitted.

Run FRST and click Fix only once and wait.

Restart the computer normally to reset the registry.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

Please download AdwCleaner by Xplode onto your Desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Click the LogFile button and the report will open in Notepad.
IMPORTANT
  • If you click the Clean button all items listed in the report will be removed.
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Check off the element(s) you wish to keep.
  • Click on the Clean button follow the prompts.
  • A log file will automatically open after the scan has finished.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleanerCx.txt (x is a number).
===

Reset Chrome...
Open Google Chrome, click on menu icon google-chrome-setting-icon.png which is located right side top of the google chrome.
 
Click "Settings" then "Show advanced settings" at the bottom of the screen.
 
Click "Reset browser settings" button.
 
Clear your cache and cookies
https://support.google.com/chromebook/answer/183083?hl=en

Restart Chrome.

====

Please post the logs.

Let me know of any remaining issues?

#3 Avipatidar

Avipatidar
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  

Posted 19 July 2016 - 12:02 PM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Your hoslt file was compromised. It will be reset to the Windows default.
You can reinstall the one you previously used.

Press the windows key Windows_Logo_key.gif+ r on your keyboard at the same time. This will open the RUN BOX.
Type Notepad and and click the OK key.
Please copy the entire contents of the code box below to the a new file.
 

start


CreateRestorePoint:
EmptyTemp:
CloseProcesses:
Hosts:

(BitTorrent Inc.) C:\Users\nehal patidar\AppData\Roaming\uTorrent\updates\3.4.7_42330\utorrentie.exe
(BitTorrent Inc.) C:\Users\nehal patidar\AppData\Roaming\uTorrent\updates\3.4.7_42330\utorrentie.exe
HKLM\...\Run: [gplyra] => C:\Users\nehal patidar\AppData\Roaming\gplyra\gplyra\start.cmd
HKU\S-1-5-21-3632974632-978978755-2483695789-1001\...\Run: [Axdbworks] => regsvr32.exe "C:\Users\nehal patidar\AppData\Local\Axdbworks\spoMobiletor.dll" <===== ATTENTION
SearchScopes: HKLM-x32 -> DefaultScope value is missing
CHR HomePage: gregugitulestogagh -> hxxp://www.google.com/
CHR StartupUrls: gregugitulestogagh -> "hxxp://www.youndoo.com/?z=0038fc030eca08836b60ae2gbz1q5bbz9o8bcm9bco&from=sqr&uid=WDCXWD10JPVX-22JC3T0_WD-WXW1EB53XV5T3XV5T&type=hp"
S2 ctsAgentsht.exe; "C:\Program Files (x86)\Phlachhalicult\ctsAgentsht.exe" {C25DA384-2010-45A4-A1ED-BFA540D4789B} {9DC74CD5-24EA-4ADE-9C42-608A8CE17116} [X]
S2 Foubs; "C:\Users\nehal patidar\AppData\Roaming\BolvuzYphr\Ofejukug.exe" -cms [X]
S2 Fumnyg; "C:\Users\nehal patidar\AppData\Roaming\Mialfyabj\Mialfyabj.exe" -cms [X]
S1 qrovjfib; \??\C:\Windows\system32\drivers\qrovjfib.sys [X]
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
Task: {9B6F640B-E35D-4B07-A070-FBF65287533C} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe
Task: {B10CF49B-6022-4CE4-9457-74CFE292C30A} - System32\Tasks\Cotsqwutain Agent => C:\Program Files (x86)\Phlachhalicult\ctsAgentghr.exe
ShortcutWithArgument: C:\Users\nehal patidar\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d896af6c02e0d57d\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=gregugitulestogagh
C:\Users\nehal patidar\AppData\Local\Axdbworks
C:\Program Files\KMSpico
C:\Program Files (x86)\Phlachhalicult

End
Save the file as fixlist.txt in the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the Farbar log you have submitted.

Run FRST and click Fix only once and wait.

Restart the computer normally to reset the registry.

The tool will create a log (Fixlog.txt) please post it to your reply.
===

Please download AdwCleaner by Xplode onto your Desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Click the LogFile button and the report will open in Notepad.
IMPORTANT
  • If you click the Clean button all items listed in the report will be removed.
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Check off the element(s) you wish to keep.
  • Click on the Clean button follow the prompts.
  • A log file will automatically open after the scan has finished.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleanerCx.txt (x is a number).
===

Reset Chrome...
Open Google Chrome, click on menu icon google-chrome-setting-icon.png which is located right side top of the google chrome.
 
Click "Settings" then "Show advanced settings" at the bottom of the screen.
 
Click "Reset browser settings" button.
 
Clear your cache and cookies
https://support.google.com/chromebook/answer/183083?hl=en

Restart Chrome.

====

Please post the logs.

Let me know of any remaining issues?

 

 

THANK YOU for your reply ....

i am still not able to use an application . 

It always says "The program cant start because MSVCP100.DLL IS from your computer . Try reinstalling the program to fix this problem ."

4 messages appear of this type replacing MSVCP100.dll to MSVCR100.dll , XINPUT_1.dll , STEAM_API.dll .

WHAT TO DO???

SHALL I INSTALL WINDOWS AGAIN .

 

I AM your GRATEFUL that you are helping me ..

Attached Files



#4 nasdaq

nasdaq

  • Malware Response Team
  • 39,963 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:07:25 AM

Posted 20 July 2016 - 07:14 AM


If not already done, run the AdwCleaner tool and remove this.
File Found : C:\Windows\SysNative\drivers\6f431f79c3001c2bcb7ffd28fba2674c.sys

Restart the computer normally.
===

Follow the instruction by Max Green on this page.

http://answers.microsoft.com/en-us/insider/forum/insider_wintp-insider_repair/how-do-i-fix-this-error-msvcp100dll-is-missing/c167d686-044e-44ab-8e8f-968fac9525c5

If you read the page further some had to uninstalled the version(s) so the the new updates can be install.

Keep me posted.

#5 nasdaq

nasdaq

  • Malware Response Team
  • 39,963 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:07:25 AM

Posted 26 July 2016 - 07:21 AM

Are you still with me?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users