wincnu32.dll missing - solution found

L

Larry

Solution found for the error message on start-up "wincnu32.dll is
missing"

This file is part of the Spyware package VirtuMonde. On this machine,
Spybot had deleted all the files but left the references in the
registry. Editing the registry and deleting all references to
VirtuMonde and wincnu32.dll got rid of the message.

Larry
 
M

MEB

Thanks for the info, sometimes it takes some research to get to the bottom
of things. So how did you find out that was it?

--
MEB
http://peoplescounsel.orgfree.com
________


"Larry" <reply@group.com> wrote in message
news:OmuOYI4CIHA.5044@TK2MSFTNGP03.phx.gbl...
| Solution found for the error message on start-up "wincnu32.dll is
| missing"
|
| This file is part of the Spyware package VirtuMonde. On this machine,
| Spybot had deleted all the files but left the references in the
| registry. Editing the registry and deleting all references to
| VirtuMonde and wincnu32.dll got rid of the message.
|
| Larry
|
|
 
L

Larry

I looked in the Spybot logs for some reference to the file and there it
was in a collection headed VirtuMonde. Easy to google VirtuMonde as
lots on the net re that.

Larry

MEB wrote:
: Thanks for the info, sometimes it takes some research to get to the
: bottom of things. So how did you find out that was it?
:
:
: "Larry" <reply@group.com> wrote in message
: news:OmuOYI4CIHA.5044@TK2MSFTNGP03.phx.gbl...
: : Solution found for the error message on start-up "wincnu32.dll is
: : missing"
: :
: : This file is part of the Spyware package VirtuMonde. On this
: : machine, Spybot had deleted all the files but left the references
: : in the registry. Editing the registry and deleting all references
: : to VirtuMonde and wincnu32.dll got rid of the message.
: :
: : Larry
 
P

PA Bear

I'd strongly recommend that you run a /thorough/ check for Vundo and other
hijackware, including posting your hijackthis log to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.org/


Larry wrote:
> Solution found for the error message on start-up "wincnu32.dll is
> missing"
>
> This file is part of the Spyware package VirtuMonde. On this machine,
> Spybot had deleted all the files but left the references in the
> registry. Editing the registry and deleting all references to
> VirtuMonde and wincnu32.dll got rid of the message.
>
> Larry
 
M

MEB

"Larry" <reply@group.com> wrote in message
news:u%23lPUq4CIHA.748@TK2MSFTNGP04.phx.gbl...
| I looked in the Spybot logs for some reference to the file and there it
| was in a collection headed VirtuMonde. Easy to google VirtuMonde as
| lots on the net re that.
|
| Larry

Thanks for the response. Any idea how you got it?

And I agree with Pa Bear, best check for other stuff, could be other
hidden. Might want to tighten your security a bit...

|
| MEB wrote:
| : Thanks for the info, sometimes it takes some research to get to the
| : bottom of things. So how did you find out that was it?
| :
| :
| : "Larry" <reply@group.com> wrote in message
| : news:OmuOYI4CIHA.5044@TK2MSFTNGP03.phx.gbl...
| : : Solution found for the error message on start-up "wincnu32.dll is
| : : missing"
| : :
| : : This file is part of the Spyware package VirtuMonde. On this
| : : machine, Spybot had deleted all the files but left the references
| : : in the registry. Editing the registry and deleting all references
| : : to VirtuMonde and wincnu32.dll got rid of the message.
| : :
| : : Larry
|
|

--
MEB
http://peoplescounsel.orgfree.com
________
 
L

Larry

No, don't know how it got on the machine but it's a computer that many
use, so it's hard to control what they do to it..

I have checked the machine for other things and it is clean and works
well. This was the last step in cleaning it up.

Larry

MEB wrote:
: "Larry" <reply@group.com> wrote in message
: news:u%23lPUq4CIHA.748@TK2MSFTNGP04.phx.gbl...
: : I looked in the Spybot logs for some reference to the file and
: : there it was in a collection headed VirtuMonde. Easy to google
: : VirtuMonde as lots on the net re that.
: :
: : Larry
:
: Thanks for the response. Any idea how you got it?
:
: And I agree with Pa Bear, best check for other stuff, could be other
: hidden. Might want to tighten your security a bit...
:
: :
: : MEB wrote:
: : : Thanks for the info, sometimes it takes some research to get to
: : : the bottom of things. So how did you find out that was it?
: : :
: : :
: : : "Larry" <reply@group.com> wrote in message
: : : news:OmuOYI4CIHA.5044@TK2MSFTNGP03.phx.gbl...
: : : : Solution found for the error message on start-up "wincnu32.dll
: : : : is missing"
: : : :
: : : : This file is part of the Spyware package VirtuMonde. On this
: : : : machine, Spybot had deleted all the files but left the
: : : : references in the registry. Editing the registry and deleting
: : : : all references to VirtuMonde and wincnu32.dll got rid of the
: : : : message.
: : : :
: : : : Larry
 
M

MEB

"Larry" <reply@group.com> wrote in message
news:u$IcQx8CIHA.3916@TK2MSFTNGP02.phx.gbl...
| No, don't know how it got on the machine but it's a computer that many
| use, so it's hard to control what they do to it..

Oh well, just thought you could give a hint for others what to avoid.

Yeah, multi-accessed 9X computers are difficult to control unless policies
and other is setup - but then that can be problematic.

|
| I have checked the machine for other things and it is clean and works
| well. This was the last step in cleaning it up.
|
| Larry

Okay, thanks for the info,, at least there is another warning out there
about VirtuMonde, and what might need done to finish the removal.

|
| MEB wrote:
| : "Larry" <reply@group.com> wrote in message
| : news:u%23lPUq4CIHA.748@TK2MSFTNGP04.phx.gbl...
| : : I looked in the Spybot logs for some reference to the file and
| : : there it was in a collection headed VirtuMonde. Easy to google
| : : VirtuMonde as lots on the net re that.
| : :
| : : Larry
| :
| : Thanks for the response. Any idea how you got it?
| :
| : And I agree with Pa Bear, best check for other stuff, could be other
| : hidden. Might want to tighten your security a bit...
| :
| : :
| : : MEB wrote:
| : : : Thanks for the info, sometimes it takes some research to get to
| : : : the bottom of things. So how did you find out that was it?
| : : :
| : : :
| : : : "Larry" <reply@group.com> wrote in message
| : : : news:OmuOYI4CIHA.5044@TK2MSFTNGP03.phx.gbl...
| : : : : Solution found for the error message on start-up "wincnu32.dll
| : : : : is missing"
| : : : :
| : : : : This file is part of the Spyware package VirtuMonde. On this
| : : : : machine, Spybot had deleted all the files but left the
| : : : : references in the registry. Editing the registry and deleting
| : : : : all references to VirtuMonde and wincnu32.dll got rid of the
| : : : : message.
| : : : :
| : : : : Larry
|
|

--
MEB
http://peoplescounsel.orgfree.com
________
 
P

PA Bear

So How Did I Get Infected Anyway?
http://www.wilderssecurity.com/showthread.php?t=27971

Again, I /strongly/ recommend posting your HijackThis log in an appropriate
forum for review by an expert in such matters, Larry. This is NOT something
to fool around with. Just because no anti-spyware or anti-virus scan you've
run doesn't find anything amiss or you don't see anything amiss in the
HijackThis log does NOT mean the machine's "clean."
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.org/


Larry wrote:
> No, don't know how it got on the machine but it's a computer that many
> use, so it's hard to control what they do to it..
>
> I have checked the machine for other things and it is clean and works
> well. This was the last step in cleaning it up.
 
You must log in or register to reply here.

Similar threads

A
Windows cannot load the extensible counter DLL "C:\WINDOWS\system32\sysmain.dll" (Win32 error code The specified module could not be found.).
Replies
0
Views
41
aromack
A
M
MSVBVM50.dll was not found
Replies
0
Views
67
MichaelClaice
M
Z
Some Applications/games result in the 0xc000007b error from missing .dll files
Replies
0
Views
73
Zia Y
Z
W
Windows 10 22H2 update issues - missing .dll , no sound devices loaded, won't update
Replies
0
Views
93
wilamowski3
W
K
i cant get rid of black screen i have tried all methods and i got a message win32u.dll file missing what can i do
Replies
0
Views
23
Keaju
K
Back
Top Bottom