I just posted this in the Windows XP forum, but then I noticed this section so I am reposting. Sorry for the double post! Here is the original message, any help would be appreciated. thanks--
I have a problem with my computer. I saw a guy on expert-exchange talk about it, but I couldn't see the responses because I am not a member. He described it best, so I will paste his description here:
On Win XP Pro SP2 PC, when most any program or sytem utility on PC is run an error comes up saying to Choose a Program to open "rundll.32.exe" with (i.e Like when you click a file and select "Open with". I,E THAT WINDOW is the one I mean.) Also same error for Winword (MS Word) saying Choose a program to open Winword with.
Or most (not all) of the icons/utilities in the Control Panel lead to this error. (with Rundll32.exe as the exe to find a program to open it with)
I saw this virus FIRST a few days ago on a different PC than the one I am posting about here. And was unable to solve it (Because I did a repair install (see below) and after that failed in the middle could not get the PC to boot back to Windows so I could try all the usual Malware removal techniques, a mistake I will not make today.)
System Restore fails because IT USES RUNDLL.32 EXE
Windows Repair Install from XP Pro SP2 CD fails because after reboot into a small version of Windows to do most of the repair install, IT RUNS RUNDLL32.EXE (i.e the one copied from the Windows Install CD gets infected quickly possibly by a registry entry that is not changed at that point in the Repair instal; this is, of course, nothing but speculation on my part).
QUESTION, IF YOU HAVE SEEN THIS PARTICULAR BUG **AND** SOLVED IT PLEASE REPLY WITH A SOLUTION.
Examples: Run this virus destroyer tool (provide a link please) (with options to choose if a applicable)
NOTE: PLEASE ONLY REPLY WITH THE TOOL THAT FIXED THE SPECIFIED PROBLEM FOR YOU, NOT GOOD GENERAL PURPOSE MALWARE REMOVAL TOOLS.
Change or delete this (named) Registry Entry
Delete this (named) file in the (named) System folder
AN ACCEPTABLE REPLY IS **NOT** TO ASK ME TO PROVIDE ANY LOG (EX HIJACK THIS LOG, DSS LOG, OR ANY LOG) AND **THEN**YOU will help me. Because I already have a partner who is a malware removal expert who I will be using that approach with and sending my partner the logs.
THE PURPOSE OF THIS POST IS TO FIND SOMEONE who has seen the problem and knows the solution with no additional information (i.e Been there, done that) . NOT TO FIND SOMEONE TO HELP AFTER I PROVIDE LOGS AS I ALREADY HAVE THAT SORT OF PERSON AVAILABLE OUTSIDE THIS FORUM.
BTW A Google search found THREE other people who have this exact problem, posted in some forum about it AND NO ONE REPLIED WITH A SOLUTION.
That was his description, and apparently someone solved the problem. Now I have the same problem, does anyone know how to solve it? THANK YOU!!!