Msvcrl.dll Not Found/can’t Access Internet-need Help…?
I get an error msg whenever I try to connect to internet, says “msvcrl.dll” not found and needs reinstalled. If anyone can help me get this fixed, I’d really appreciate it. I have AVG7.5 and Spybot (anything else u can recommend to prevent this from happening in the future – I’m game!)…..To follow is my Hijack this log (thanks in advance!!):
Logfile of HijackThis v1.99.1
Scan saved at 11:12:34 PM, on 6/14/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Canon\ZoomBrowser EX\Program\ZoomBrowser.exe
C:\Program Files\Hijackthis\HijackThis.exe
R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
O2 – BHO: Adobe PDF Reader Link Helper – {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} – C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 – BHO: (no name) – {53707962-6F74-2D53-2644-206D7942484F} – C:\Program Files\Spybot – Search & Destroy\SDHelper.dll
O4 – HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 – HKLM\..\Run: [nwiz] nwiz.exe /install
O4 – HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 – HKCU\..\Run: [Microsoft Works Update Detection] ???\WkDetect.exe
O8 – Extra context menu item: E&xport to Microsoft Excel – res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCE…
O9 – Extra button: (no name) – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C:\WINDOWS\System32\msjava.dll
O9 – Extra ‘Tools’ menuitem: Sun Java Console – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C:\WINDOWS\System32\msjava.dll
O9 – Extra button: Research – {92780B25-18CC-41C8-B9BE-3C9C571A8263} – C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.D…
O9 – Extra button: Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe
O9 – Extra ‘Tools’ menuitem: Windows Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe
O13 – WWW. Prefix: http://ehttp.cc/?
O16 – DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) – http://www.musicnotes.com/download/mnviewer.cab
O16 – DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) – http://go.microsoft.com/fwlink/?linkid=39204
O16 – DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) – C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 – DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) – http://www1.snapfish.com/SnapfishActivia.cab
O16 – DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) – http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1130073304890
O16 – DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) – http://web1.shutterfly.com/downloads/Uploader.cab
O16 – DPF: {A30FBBDC-FA29-4606-8565-14AADCCA6708} (Rite Aid One Hour Photo Online Control) – https://photos.riteaid.com/control/RiteAidOneHourPhotoOnline.cab
O16 – DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) – http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O18 – Protocol: msnim – {828030A1-22C1-4009-854F-8E305202313F} – “C:\PROGRA~1\MSNMES~1\msgrapp.dll” (file missing)
O20 – AppInit_DLLs:
O20 – Winlogon Notify: WgaLogon – C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 – SSODL: WPDShServiceObj – {AAA288BA-9A4C-45B0-95D7-94D524869DB5} – C:\WINDOWS\system32\WPDShServiceObj.dll
O23 – Service: AVG7 Alert Manager Server (Avg7Alrt) – GRISOFT, s.r.o. – C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 – Service: AVG7 Update Service (Avg7UpdSvc) – GRISOFT, s.r.o. – C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 – Service: AVG E-mail Scanner (AVGEMS) – GRISOFT, s.r.o. – C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 – Service: Canon Camera Access Library 8 (CCALib8) – Canon Inc. – C:\Program Files\Canon\CAL\CALMAIN.exe
O23 – Service: Creative Service for CDROM Access – Creative Technology Ltd – C:\WINDOWS\System32\CTsvcCDA.EXE
O23 – Service: Macromedia Licensing Service – Unknown owner – C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 – Service: Machine Debug Manager MDMEventSystem (MDMEventSystem) – Unknown owner – C:\WINDOWS\system32\acctresh.exe
O23 – Service: NVIDIA Display Driver Service (NVSvc) – NVIDIA Corporation – C:\WINDOWS\System32\nvsvc32.exe
O23 – Service: Panda Process Protection Service (PavPrSrv) – Panda Software – C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 – Service: Pml Driver – HP – C:\WINDOWS\system32\HPHipm09.exe
O23 – Service: Pml Driver HPZ12 – HP – C:\WINDOWS\system32\HPZipm12.exe
Try this: Uncheck “Only delete files in Windows Temp folders older than 48 hours”).
Download CWShredder from here: http://www.bleepingcomputer.com/files/cw… unzip it, and save it on the Desktop.
**Do not run this file yet
Download Smitfraudfix from http://siri.geekstogo.com/SmitfraudFix.p…
Copy and follow the page instructions
**Do not run this file yet
Download and install AVG Anti-Spyware from http://free.grisoft.com/doc/20/lng/us/tp… –
**Do not run this file yet…update it:
Double-click the icon on Desktop to launch AVGAS
You will need to update AVGAS to the latest definition files.
- On the top of the main screen click Shield
- Click the word active to change it to inactive
- On the top of the main screen click Update.
Then click on Start Update. The update will start and a progress bar will show the updates being installed.
When you have finished updating, EXIT AVGAS.
Download and run CrapCleaner from http://www.ccleaner.com/
Note: in CCleaner: go to
Set your system to show all files.
Run CWShredder.
Run SmitFraudFix Option #1 (Search). Do not run any other option until you are asked to.
Press Control-Alt-Del to enter the Task Manager.
Click on the Processes tab and end the following process if still active:
svhost.exe (NOTE THE SPELLING. Do not end svchost.exe, which is legit !)
Exit the Task Manager when finished.
Close all programs leaving only HijackThis running. Place a check against each of the following, making sure you get them all and not any others by mistake:
R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = c:secure32.html
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = c:secure32.html
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = c:secure32.html
R0 – HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = c:secure32.html
F2 – REG:system.ini: Shell=Explorer.exe svhost.exe
O4 – HKLM..Run: [AutoSys] C:WINDOWSsystem32autosys.exe
O4 – HKCU..Run: [TaskManager] C:WINDOWSTaskMgr.exe
Click on Fix Checked when finished and exit HijackThis.
Reboot into Safe Mode(Restart the computer and repeatedly press F8 until you are given a boot screen with SafeMode as an option).
Using Windows Explorer, locate the following files and delete them:
C:secure32.html
C:WINDOWSsystem32svhost.exe Warning ! Do NOT delete the legit SVChost.exe file !
C:WINDOWSsystem32autosys.exe
C:WINDOWSTaskMgr.exe ******WARNING!! DO NOT delete the legit C:windowssystem32taskmgr.exe file! The bad one is in the c:windows folder
Exit Explorer, but do not reboot.
Run AVG Anti-Spyware.
- Click Scanner
- Click on the Scan tab
- Click Complete System Scan to begin scanning.
When the scan is complete click Recommended Action and change it to Quarantine, then click Apply all actions
Once finished, click the Save report button, then click Save Report As. This will create a text file.
Make sure you know where to find this file again.
Restart in Normal Mode.
Check log files to ensure that all files have been cleaned.
Hope this helps!!