wincnu32.dll missing - solution found

[Guest Larry]

Solution found for the error message on start-up "wincnu32.dll is

missing"

 

This file is part of the Spyware package VirtuMonde. On this machine,

Spybot had deleted all the files but left the references in the

registry. Editing the registry and deleting all references to

VirtuMonde and wincnu32.dll got rid of the message.

 

Larry

[Guest MEB]

Re: wincnu32.dll missing - solution found

 

Thanks for the info, sometimes it takes some research to get to the bottom

of things. So how did you find out that was it?

 

--

MEB

http://peoplescounsel.orgfree.com

________

 

 

"Larry" <reply@group.com> wrote in message

news:OmuOYI4CIHA.5044@TK2MSFTNGP03.phx.gbl...

| Solution found for the error message on start-up "wincnu32.dll is

| missing"

|

| This file is part of the Spyware package VirtuMonde. On this machine,

| Spybot had deleted all the files but left the references in the

| registry. Editing the registry and deleting all references to

| VirtuMonde and wincnu32.dll got rid of the message.

|

| Larry

|

|

[Guest Larry]

Re: wincnu32.dll missing - solution found

 

I looked in the Spybot logs for some reference to the file and there it

was in a collection headed VirtuMonde. Easy to google VirtuMonde as

lots on the net re that.

 

Larry

 

MEB wrote:

: Thanks for the info, sometimes it takes some research to get to the

: bottom of things. So how did you find out that was it?

:

:

: "Larry" <reply@group.com> wrote in message

: news:OmuOYI4CIHA.5044@TK2MSFTNGP03.phx.gbl...

: : Solution found for the error message on start-up "wincnu32.dll is

: : missing"

: :

: : This file is part of the Spyware package VirtuMonde. On this

: : machine, Spybot had deleted all the files but left the references

: : in the registry. Editing the registry and deleting all references

: : to VirtuMonde and wincnu32.dll got rid of the message.

: :

: : Larry

[Guest PA Bear]

Re: wincnu32.dll missing - solution found

 

I'd strongly recommend that you run a /thorough/ check for Vundo and other

hijackware, including posting your hijackthis log to an appropriate forum.

 

Checking for/Help with Hijackware

http://aumha.org/a/parasite.htm

http://aumha.org/a/quickfix.htm

http://aumha.net/viewtopic.php?t=5878

http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction

http://mvps.org/winhelp2002/unwanted.htm

http://inetexplorer.mvps.org/data/prevention.htm

http://inetexplorer.mvps.org/tshoot.html

http://www.mvps.org/sramesh2k/Malware_Defence.htm

http://defendingyourmachine2.blogspot.com/

http://www.elephantboycomputers.com/page2.html#Removing_Malware

 

When all else fails, HijackThis v2.0.2

(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.

It will help you to both identify and remove any hijackware/spyware with

assistance from an expert. **Post your log to

http://forums.spybot.info/forumdisplay.php?f=22,

http://castlecops.com/forum67.html,

http://forums.subratam.org/index.php?showforum=7,

http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert

analysis, not here.**

 

If the procedures look too complex - and there is no shame in admitting this

isn't your cup of tea - take the machine to a local, reputable and

independent (i.e., not BigBoxStoreUSA) computer repair shop.

--

~Robear Dyer (PA Bear)

MS MVP-Windows (IE, OE, Security, Shell/User)

AumHa VSOP & Admin http://aumha.net

DTS-L http://dts-l.org/

 

 

Larry wrote:

> Solution found for the error message on start-up "wincnu32.dll is

> missing"

>

> This file is part of the Spyware package VirtuMonde. On this machine,

> Spybot had deleted all the files but left the references in the

> registry. Editing the registry and deleting all references to

> VirtuMonde and wincnu32.dll got rid of the message.

>

> Larry

[Guest MEB]

Re: wincnu32.dll missing - solution found

 

 

 

"Larry" <reply@group.com> wrote in message

news:u%23lPUq4CIHA.748@TK2MSFTNGP04.phx.gbl...

| I looked in the Spybot logs for some reference to the file and there it

| was in a collection headed VirtuMonde. Easy to google VirtuMonde as

| lots on the net re that.

|

| Larry

 

Thanks for the response. Any idea how you got it?

 

And I agree with Pa Bear, best check for other stuff, could be other

hidden. Might want to tighten your security a bit...

 

|

| MEB wrote:

| : Thanks for the info, sometimes it takes some research to get to the

| : bottom of things. So how did you find out that was it?

| :

| :

| : "Larry" <reply@group.com> wrote in message

| : news:OmuOYI4CIHA.5044@TK2MSFTNGP03.phx.gbl...

| : : Solution found for the error message on start-up "wincnu32.dll is

| : : missing"

| : :

| : : This file is part of the Spyware package VirtuMonde. On this

| : : machine, Spybot had deleted all the files but left the references

| : : in the registry. Editing the registry and deleting all references

| : : to VirtuMonde and wincnu32.dll got rid of the message.

| : :

| : : Larry

|

|

 

--

MEB

http://peoplescounsel.orgfree.com

________

[Guest Larry]

Re: wincnu32.dll missing - solution found

 

No, don't know how it got on the machine but it's a computer that many

use, so it's hard to control what they do to it..

 

I have checked the machine for other things and it is clean and works

well. This was the last step in cleaning it up.

 

Larry

 

MEB wrote:

: "Larry" <reply@group.com> wrote in message

: news:u%23lPUq4CIHA.748@TK2MSFTNGP04.phx.gbl...

: : I looked in the Spybot logs for some reference to the file and

: : there it was in a collection headed VirtuMonde. Easy to google

: : VirtuMonde as lots on the net re that.

: :

: : Larry

:

: Thanks for the response. Any idea how you got it?

:

: And I agree with Pa Bear, best check for other stuff, could be other

: hidden. Might want to tighten your security a bit...

:

: :

: : MEB wrote:

: : : Thanks for the info, sometimes it takes some research to get to

: : : the bottom of things. So how did you find out that was it?

: : :

: : :

: : : "Larry" <reply@group.com> wrote in message

: : : news:OmuOYI4CIHA.5044@TK2MSFTNGP03.phx.gbl...

: : : : Solution found for the error message on start-up "wincnu32.dll

: : : : is missing"

: : : :

: : : : This file is part of the Spyware package VirtuMonde. On this

: : : : machine, Spybot had deleted all the files but left the

: : : : references in the registry. Editing the registry and deleting

: : : : all references to VirtuMonde and wincnu32.dll got rid of the

: : : : message.

: : : :

: : : : Larry

[Guest MEB]

Re: wincnu32.dll missing - solution found

 

 

 

"Larry" <reply@group.com> wrote in message

news:u$IcQx8CIHA.3916@TK2MSFTNGP02.phx.gbl...

| No, don't know how it got on the machine but it's a computer that many

| use, so it's hard to control what they do to it..

 

Oh well, just thought you could give a hint for others what to avoid.

 

Yeah, multi-accessed 9X computers are difficult to control unless policies

and other is setup - but then that can be problematic.

 

|

| I have checked the machine for other things and it is clean and works

| well. This was the last step in cleaning it up.

|

| Larry

 

Okay, thanks for the info,, at least there is another warning out there

about VirtuMonde, and what might need done to finish the removal.

 

|

| MEB wrote:

| : "Larry" <reply@group.com> wrote in message

| : news:u%23lPUq4CIHA.748@TK2MSFTNGP04.phx.gbl...

| : : I looked in the Spybot logs for some reference to the file and

| : : there it was in a collection headed VirtuMonde. Easy to google

| : : VirtuMonde as lots on the net re that.

| : :

| : : Larry

| :

| : Thanks for the response. Any idea how you got it?

| :

| : And I agree with Pa Bear, best check for other stuff, could be other

| : hidden. Might want to tighten your security a bit...

| :

| : :

| : : MEB wrote:

| : : : Thanks for the info, sometimes it takes some research to get to

| : : : the bottom of things. So how did you find out that was it?

| : : :

| : : :

| : : : "Larry" <reply@group.com> wrote in message

| : : : news:OmuOYI4CIHA.5044@TK2MSFTNGP03.phx.gbl...

| : : : : Solution found for the error message on start-up "wincnu32.dll

| : : : : is missing"

| : : : :

| : : : : This file is part of the Spyware package VirtuMonde. On this

| : : : : machine, Spybot had deleted all the files but left the

| : : : : references in the registry. Editing the registry and deleting

| : : : : all references to VirtuMonde and wincnu32.dll got rid of the

| : : : : message.

| : : : :

| : : : : Larry

|

|

 

--

MEB

http://peoplescounsel.orgfree.com

________

[Guest PA Bear]

Re: wincnu32.dll missing - solution found

 

So How Did I Get Infected Anyway?

http://www.wilderssecurity.com/showthread.php?t=27971

 

Again, I /strongly/ recommend posting your HijackThis log in an appropriate

forum for review by an expert in such matters, Larry. This is NOT something

to fool around with. Just because no anti-spyware or anti-virus scan you've

run doesn't find anything amiss or you don't see anything amiss in the

HijackThis log does NOT mean the machine's "clean."

--

~Robear Dyer (PA Bear)

MS MVP-Windows (IE, OE, Security, Shell/User)

AumHa VSOP & Admin http://aumha.net

DTS-L http://dts-l.org/

 

 

Larry wrote:

> No, don't know how it got on the machine but it's a computer that many

> use, so it's hard to control what they do to it..

>

> I have checked the machine for other things and it is clean and works

> well. This was the last step in cleaning it up.