Member Avatar for NMGuatemala69

While trying to clean my son's computer from the virus funxls.exe, I deleted the entry dll32.exe entyrely. Since the incident I am not able to open the probrams on control panel, nor I open the system tray to make system restore which I wanted to perform to reinstaled after the fatal error I did. Do you have any suggestions on how I can restore it again and from where? First of all, I did a reg cure with the the same name program, I've done the ccCleaner and did try to enter through the safe mode, but nothing have given me any solution. I appreciate any advice anyone may be able to give, thanks

  • 4 Contributors
  • 9 Replies
  • 221 Views
  • 2 Months Discussion Span
  • Latest Post Latest Post by crunchie

Dani AI

Generated

Quick diagnosis and what likely happened: the dll32.exe name is not a standard Windows system file and is commonly dropped or used by backdoors/hijackers (so deleting it can be fine from a malware-removal perspective, but leftover startup/registry references will then produce “missing dll32” popups). Evidence of this behaviour and examples of successful removals appear in multiple malware logs and removal reports. (file.net)

Practical next steps (try in this order). If you can still get to Task Manager, start System Restore from there (use the System Restore executable) and pick a restore point from before the infection; Safe Mode will also allow a restore if Windows won’t run normally. System Restore undoes registry/startup changes that usually cause the “missing” popup. (flylib.com)

If restore is not possible or doesn’t fix everything: boot Safe Mode with Networking and run a current anti‑malware scan (Malwarebytes and other up‑to‑date scanners are commonly used to remove Koobface/funxls‑type items). After malware removal, remove any leftover startup entries pointing to the deleted file using Autoruns or by checking the Run keys — but back up the registry before deleting values. Also use the Windows file‑repair facility if system files are missing; it may attempt to restore originals and sometimes asks for the original install media. (help.malwarebytes.com)

If those fail, back up personal data and consider a Windows repair (in‑place) or clean reinstall; a repair install requires the correct XP media and will re-register system files and services. In-thread suggestions from , and point to these same tools, and several real cases show Malwarebytes + cleanup stopped the missing-dll popups after cleaning Koobface. Take care not to manually delete files under System32 in future — use targeted scanners and, when in doubt, make a full backup first. ()

Recommended Answers

All 9 Replies

Member Avatar for jbennet

Stick in an xp cd and go to run. Type sfc /scannow, wait, and reboot.

Seeing as your start menu isnt working, you will have to do control-alt-delete. Then in task manager you can get into the run menu (file -> run i think)

The xp cd isnt always necesarry but its recommended.

SFC will check for missing or maliciously modified system files.

Member Avatar for NMGuatemala69

Stick in an xp cd and go to run. Type sfc /scannow, wait, and reboot.

Seeing as your start menu isnt working, you will have to do control-alt-delete. Then in task manager you can get into the run menu (file -> run i think)

The xp cd isnt always necesarry but its recommended.

SFC will check for missing or maliciously modified system files.

thank you very much for your answer, however I do not have the windows xp cd anymore.  However, I still can access to my start menu and even the control panel, but I cannot open any of the programs inside it.  Can I still do it without the XP CD?
Member Avatar for jbennet

yeah you can try it. Sometimes it needs the cd, other times it doesnt.

try it and see.

Member Avatar for Alan_T

Hi Mods,

I'm in the process of cleaning an infection (Worm.Koobface and Trojan.Mediapass are reported) and have a similar problem. A "misssing DLL32" pop-up appears at booting, although the only obvious problem is that IE7 has ceased working. As a temporary fix I've installed Firefox which seems to be working alright.

However, sfc /scannow runs in a small window with progress bar for about 15 mins and then just vanishes at the end. I do have an XP SP1 install CD but am now running SP3. Does this matter as the PC doesn't seem to access or ask for the disc anyway?

After a reboot I still get the missing DLL report which I'd like to fix (even if I decide to stay with Firefox :-) Any ideas?

Thanks, Alan.

Member Avatar for jbennet

sfc /scannow runs in a small window with progress bar for about 15 mins and then just vanishes at the end]

Its supposed to do that.

Member Avatar for Alan_T

Hi,

Thanks for your quick reply. But it hasn't fixed the missing DLL32 message. Is it not part of Windows? Is it part of IE so I need to repair/reinstall that to get rid of the message and to run IE? I'd like to get IE working so that I can run the f-secure online scan (which only works with IE).

Rather off-topic, but I haven't yet found one Anti-malware programme that reports both the Trojan and Worm that I listed above, so which should I buy if I have to? Several programmes I've tried didn't find either of them !

Thanks, Alan.

Member Avatar for crunchie

Post an hijackthis log. It may show up in that.

Download HijackThis Executable from Save it to your desktop.
Start HJT & press the "Do a system scan and save a log file" button. When the scan is finished a window will pop up giving you the option of where to save it. Save it to desktop where it is easy to access. Open the log file and then go to the format Tab and make sure that wordwrap is unchecked. Copy the entire contents of the file & paste it into the body of your post. DO NOT FIX ANYTHING YET. Most of what is there is necessary for the running of your system.

Member Avatar for Alan_T

Hi crunchie,

Yes I had been considering that, but it might take some time (or be impractical) as I've been using the PC for 5 years so the file may be *very* large (the Registry backup file is just over 100 MBytes).

However, I have made some progress: When I imported my IE favourites/settings into Firefox that stopped working as well, but with a report that the proxy setting was wrong. So I switched proxies off and both IE and FF now run. But the "Error loading DLL32" popup still appears at boot. If it's not required for IE either, what's it for?

Now that IE is running I've been able to try the F-secure online scanner (which is also claimed to fix infections) but it ran for about two hours and then it (or the PC) hung, so I've had to reboot. I wonder if it would work better (or at all) in secure mode? (if I can hit f8 at the right time).

Thanks, Alan.

Member Avatar for crunchie

Trust me, the hijackthis log will not be that big :)

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.