Today, various programs on my computer started showing the "The procedure entry point GetUserdefaultLCid could not be located in the dynamic library KERNEL32.dll" when I tried to open them.
I can open files OK (seems like I can), but most programs (not all) will not run. It seems to be expanding to more and more programs as well.
HELP!! I have a project due by the end of this weekend and this is my only computer!!
Thanks in advance
Hi and Welcome!! Jeff . I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:
The fixes are specific to your problem and should only be used for the issues on this machine.
It's often worth reading through these instructions and printing them for ease of reference.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry. Please reply to this thread. Do not start a new topic.
If you happen to have a flash drive/thumb drive please have that ready in the event that we need to use it.
Please be sure to subscribe to the topic if you have not already done so.
IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so. DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your operating system and losing all your programs and data. [external image: YBCQLm4.gif] Let's get going DDS LINK 1 LINK 2 desktop.
Disable any antivirus programs during the scan (If you have difficulty properly disabling your protective programs, refer to this link here )
Double click dds to run the tool.
When done, two DDS.txt's will open.
Save both reports to your desktop.
—————————————————Please include the contents of the following in your next reply: DDS.txt Attach.txt [external image: weVCzW0.jpg] Please download TDSSKiller
Double click TDSSKiller.exe
Press Start Scan but do nothing else as we are just looking for what is there.
If Malicious objects are found, select Skip by changing the Cure dropdown in the upper right.
Attach the log in your next reply
A copy of the log will be saved automatically to the root of the drive (typically C:\)
———-[external image: 81mYIKe.jpg] AdwCleaner AdwCleaner
Double click on AdwCleaner.exe to run the toolVista /Windows 7/8 users right-click and selectRun As Administrator
Click on the Scan button.
AdwCleaner will begin…be patient as the scan may take some time to complete.
After the scan has finished, click on the Report button…a logfile (AdwCleaner[R0].txt ) will open in Notepad for review.
The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
Copy and paste the contents of that logfile in your next reply.
A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
———-
Thank you so much for the help, Jeff. I can't open any internet browsers on the affected computer, so should I save the DDS programs to an external hard drive using a functioning computer and then access them from the affected computer?
You can just download them to a thumb drive (USB drive) on another computer and then transfer them that way.
Hi Jeff,
I'm still here :). Am going to download these today and post the results!
DDS Log
DDS Attach
There were "no threats found" with the TDSKiller
ADwCleaner Log
Weird … My affected computer seems to be running normally now …
Hi there,ComboFix Combofix from either of the links below, and save it to your desktop. Link 1 Link 2 **Note: It is important that it is saved directly to your desktop**Illegal operation attempted on a registry key that has been marked for deletion IMPORTANT - Disable your AntiVirus and AntiSpyware applications , usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here ComboFix.exe & follow the prompts.
When finished, it will produce a report for you.
Please post the C:\ComboFix.txt for further review.
Here is the ComboFix log …
[external image: 81mYIKe.jpg] AdwCleaner AdwCleaner.exe to run the tool again.
Click on the Scan button.
AdwCleaner will begin to scan your computer like it did before.
After the scan has finished…
This time, click on the Clean button.
Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S0].txt ) will open automatically.
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder.
————
# AdwCleaner v3.015 - Report created 21/12/2013 at 20:02:55
