Rundll32.exe Has Stopped Working Error

D

Doop

New Member
(sorry if this is in the wrong section)

Recently I started getting this error randomly:


Here is the error log thing it gave me:
Problem signature:
Problem Event Name: BEX
Application Name: rundll32.exe
Application Version: 6.1.7600.16385
Application Timestamp: 4a5bc637
Fault Module Name: StackHash_0a9e
Fault Module Version: 0.0.0.0
Fault Module Timestamp: 00000000
Exception Offset: 00000000
Exception Code: c0000005
Exception Data: 00000008
OS Version: 6.1.7600.2.0.0.768.3
Locale ID: 1033
Additional Information 1: 0a9e
Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
Additional Information 3: 0a9e
Additional Information 4: 0a9e372d3b4ad19135b953a78882e789
Click to expand...

I don't have Nero or whatever installed, and I tried changing my Folder Options thing to "always show icons, never thumbnails". Still get the error. Any help would be appreciated, thanks.
 
Last edited:
What program do you have installed for your virus protection? I would suggest you do the following to see if anything pops up.

Please download Malwarebytes' Anti-Malware from here or here and save it to your desktop.
  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to
    • Update Malwarebytes' Anti-Malware
    • and Launch Malwarebytes' Anti-Malware
  • then click Finish.
  • If an update is found, it will download and install the latest version. Please keep updating until it says you have the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • A log will be saved automatically which you can access by clicking on the Logs tab within Malwarebytes' Anti-Malware

If for some reason Malwarebytes will not install or run please download and run Rkill.scr, Rkill.exe, or Rkill.com. If you are still having issues running rkill then try downloading these renamed versions of the same program.

EXPLORER.EXE
IEXPLORE.EXE
USERINIT.EXE
WINLOGON.EXE

But DO NOT reboot the system and then try installing or running Malwarebytes. If Rkill (which is a black box) appears and then disappears right away or you get a message saying rkill is infected, keep trying to run rkill until it over powers the infection and temporarily kills it. Once a log appears on the screen, you can try running malwarebytes or downloading other programs.



Download the HijackThis installer from here.
Run the installer and choose Install, indicating that you accept the licence agreement. The installer will place a shortcut on your desktop and launch HijackThis.

Click Do a system scan and save a logfile

Most of what HijackThis lists will be harmless or even essential, don't fix anything yet.

When the hijackthis log appears in a notepad file, click on the edit menu, click select all, then click on the edit menu again and click on copy. Come back to your reply and right click on your mouse and click on paste.

Post the logfile that HijackThis produces along with the Malwarebytes Anti-Malware log
 
I am using Bitdefender Total Security 2012 for my antivirus.

Malwarebytes Log:
Malwarebytes Anti-Malware (Trial) 1.60.1.1000
www.malwarebytes.org

Database version: v2012.04.03.12

Windows 7 x64 NTFS
Internet Explorer 9.0.8112.16421
Ben :: BEN-PC [administrator]

Protection: Enabled

4/3/2012 8:27:47 PM
mbam-log-2012-04-03 (20-27-47).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 208471
Time elapsed: 4 minute(s), 22 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Users\Ben\Downloads\Clouds_downloader_by_Wallpaperstocknet.exe (PUP.BundleInstaller.BI) -> Quarantined and deleted successfully.

(end)
Click to expand...

Hijackthis Log
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:06:30 PM, on 4/3/2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files (x86)\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Users\Ben\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Ben\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ben\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Ben\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Microsoft Live Search Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0566.0\msneshellx.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
O4 - HKLM\..\Run: [HP Remote Solution] %ProgramFiles%\Hewlett-Packard\HP Remote Solution\HP_Remote_Solution.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [HPADVISOR] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW
O4 - HKCU\..\Run: [Google Update] "C:\Users\Ben\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3794798483-1723396914-4254444258-1004\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3794798483-1723396914-4254444258-1004\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: CurseClientStartup.ccip
O4 - Global Startup: PictureMover.lnk = C:\Program Files (x86)\PictureMover\Bin\PictureMover.exe
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: SafeBox - Bitdefender - C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: BitDefender Update Server v2 (Update Server) - BitDefender - C:\Program Files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe
O23 - Service: BitDefender Desktop Update Service (UPDATESRV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: BitDefender Virus Shield (VSSERV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9352 bytes
Click to expand...
 
Let's scan a little deeper.

Download and Run ComboFix
If you already have Combofix, please delete this copy and download it again as it's being updated regularly.
  • Download this file here :

    Combofix

  • When the page loads click on the blue combofix download link next to the BleepingComputer Mirror.
  • Save the file to your windows desktop. The combofix icon will look like this when it has downloaded to your desktop.

    cf-icon.jpg
  • We are almost ready to start ComboFix, but before we do so, we need to take some preventative measures so that there are no conflicts with other programs when running ComboFix. At this point you should do the following:

  • Close all open Windows including this one.
  • Close or disable all running Antivirus, Antispyware, and Firewall programs as they may interfere with the proper running of ComboFix. Instructions on disabling these type of programs can be found here.
    Once these two steps have been completed, double-click on the ComboFix icon found on your desktop. Please note, that once you start ComboFix you should not click anywhere on the ComboFix window as it can cause the program to stall. In fact, when ComboFix is running, do not touch your computer at all. The scan could take a while, so please be patient.
  • Please click on I agree on the disclaimer window.
  • ComboFix will now install itself on to your computer. When it is done, a blue screen will appear as shown below.

    cf-preparing.jpg

  • ComboFix is now preparing to run. When it has finished ComboFix will automatically attempt to create a System Restore point so that if any problems occur while using the program you can restore back to your previous configuration. When ComboFix has finished creating the restore point, it will then backup your Windows Registry as shown in the image below.

    erunt.jpg

  • Once the Windows Registry has finished being backed up, ComboFix will attempt to detect if you have the Windows Recovery Console installed. If you already have it installed, you can skip to this section and continue reading. Otherwise you will see the following message as shown below:

    recovery-console-prompt.jpg

  • At the above message box, please click on the Yes button in order for ComboFix to continue. Please follow the steps and instructions given by ComboFix in order to finish the installation of the Recovery Console.
  • Please click on yes in the next window to continue scanning for malware.
  • ComboFix will now disconnect your computer from the Internet, so do not be surprised or concerned if you receive any warnings stating that you are no longer on the Internet. When ComboFix has finished it will automatically restore your Internet connection.
  • ComboFix will now start scanning your computer for known infections. This procedure can take some time, so please be patient.
  • While the program is scanning your computer, it will change your clock format, so do not be concerned when you see this happen. When ComboFix is finished it will restore your clock settings to their previous settings. You will also see the text in the ComboFix window being updated as it goes through the various stages of its scan. An example of this can be seen below.

    still-scanning-clockchanges.jpg

  • When ComboFix has finished running, you will see a screen stating that it is preparing the log report.
  • This can take a while, so please be patient. If you see your Windows desktop disappear, do not worry. This is normal and ComboFix will restore your desktop before it is finished. Eventually you will see a new screen that states the program is almost finished and telling you the programs log file, or report, will be located at C:\ComboFix.txt.
  • When ComboFix has finished, it will automatically close the program and change your clock back to its original format. It will then display the log file automatically for you.
  • Now you just click on the edit menu and click on select all, then click on the edit menu again and click on copy. Then come to the forum in your reply and right click on your mouse and click on paste.


In your next reply please post:
  • The ComboFix log
  • A fresh HiJackThis log
  • An update on how your computer is running

I also need you to post a logfile that combofix produces but doesn't automatically show you. Please navigate to C:\Qoobox and in that folder will be a file named add-remove programs.txt, please open that file and copy and paste the contents back here.
 
More scans? Can't you at least tell me a little about this error before you give me more copypasta instructions please? I'll do them when I have time, though.
 
A lot malware uses the rundll32 file to cause havoc on your system. Combofix is a deeper scanning program then malwarebytes is. Post the results when you can.
 
Ok ill get started on the combofix stuff right now but also I just had Bitdefender tell me it blocked a port scan on my computer. This is before starting with combofix. My brother got hacked recently, so I'm pretty paranoid about that, is a port scan really bad?
 
I got this when I woke up this morning (left my computer on).

dlkbe2b81


Here's another picture of the same thing incase you can't see the first one


Also combofix got stuck on stage three of checking for infected files even though I left my computer on overnight, which is like 8 or 9 hours of scanning. Not sure what this means.

It's also probably worth mentioning that my internet speed has been a lot slower than usual since last night, and I'm having serious connectivity problems with online stuff.
 
Last edited:
How many systems on your network do you have? You need to make sure that all of them are set to obtain ip address automatically. Do you have any set for a static IP address?
 
I'm a complete amateur basically, how do I check that?

I did "net view" on the command prompt and it just showed my parent's computer and my own, nothing else. Should I check it differently?

(can you be a little quicker to reply this time? I know you're probably busy but I'll be online all of today, and I'm pretty worried about malware at the moment)
 
Last edited:
We have a wireless network that my parent uses to connect to on her laptop. So basically we have wireless, but only one computer is on the wireless. My desktop is connected to the router via ethernet cable. We have a separate router and modem.

Ok, I followed your directions and it was set to "Obtain an IP address automatically" already, but it was also set to "Use the following DNS server addresses". However, the preferred and alternate DNS server boxes were both empty. I changed it to "Obtain DNS server address automatically" and exited out of it. Now both are set to obtain automatically.

(be right back, I'm going to restart my computer to finish installing some windows updates)
 
Last edited:
Make sure both computers are set to obtain IP address automatically. The dns servers are not as important as the IP address. You can use many different dns servers but its always best to use your own ISP's. Let me ask you this. Have you been able to get online with the wireless and your system at the same time? If not then I assume you have the connection between the router and modem hooked up wrong. Do you have a cable or dsl modem? Make sure the ethernet cable coming from the modem is connected to the wan(internet) port of the router. The wan port will usually be colored and labeled differently from the lan ports. If you have the ethernet cable from the modem going into one of the lan ports then thats why you are getting IP address conflict error message.
 
ManualConfig of IP and Recovery..?

Doop said:
I got this when I woke up this morning (left my computer on).

dlkbe2b81


Here's another picture of the same thing incase you can't see the first one


Also combofix got stuck on stage three of checking for infected files even though I left my computer on overnight, which is like 8 or 9 hours of scanning. Not sure what this means.

It's also probably worth mentioning that my internet speed has been a lot slower than usual since last night, and I'm having serious connectivity problems with online stuff.
Click to expand...

Go to start, control panel, view network status and tasks (or network and sharing centre), go to your network connection, go to details and look at the ip address, it should be something like "192.168.xxx.xxx" So, mine might be "192.168.1.204", exit Deatils, go to properties, go to IPv4 and select properties. Go to "Use following IP Address" and "Use following DNS address, type in the Deatils from earlier, except the ip address,

If your ip address is 192.168.1.204, your Default gateway should be 192.168.1.1 or 192.168.1.200 or something, you can find it in the details box, your DNS will usually be the same as the Default Gateway, your subnet mask should be 255.255.255.0, if your ip address is xxx.xxx.xxx.204, change it to xxx.xxx.xxx.205 and apply and ok everything, that should stop the ip conflict. For your rundll problem, run your Windows 7 installation disk and click repair and follow that through or use your OEM recovery feature, such as recovery disks or "Press f11 to start recovery" on startup. Use the Non-Destructive recovery and see if that helps your problem.

I'm on holiday and I still come on here to post :P
 
johnb35 said:
Make sure both computers are set to obtain IP address automatically. The dns servers are not as important as the IP address. You can use many different dns servers but its always best to use your own ISP's. Let me ask you this. Have you been able to get online with the wireless and your system at the same time? If not then I assume you have the connection between the router and modem hooked up wrong. Do you have a cable or dsl modem? Make sure the ethernet cable coming from the modem is connected to the wan(internet) port of the router. The wan port will usually be colored and labeled differently from the lan ports. If you have the ethernet cable from the modem going into one of the lan ports then thats why you are getting IP address conflict error message.
Click to expand...

Yes, my parents have been on their laptops with the wireless internet and me connected by ethernet cable for some time now. The problems have only just started happening for some reason. We have a Linksys router and comcast cable internet. Yes, the modem is connected to the router through the WAN port on the router.
 
WinDOS said:
Go to start, control panel, view network status and tasks (or network and sharing centre), go to your network connection, go to details and look at the ip address, it should be something like "192.168.xxx.xxx" So, mine might be "192.168.1.204", exit Deatils, go to properties, go to IPv4 and select properties. Go to "Use following IP Address" and "Use following DNS address, type in the Deatils from earlier, except the ip address,

If your ip address is 192.168.1.204, your Default gateway should be 192.168.1.1 or 192.168.1.200 or something, you can find it in the details box, your DNS will usually be the same as the Default Gateway, your subnet mask should be 255.255.255.0, if your ip address is xxx.xxx.xxx.204, change it to xxx.xxx.xxx.205 and apply and ok everything, that should stop the ip conflict. For your rundll problem, run your Windows 7 installation disk and click repair and follow that through or use your OEM recovery feature, such as recovery disks or "Press f11 to start recovery" on startup. Use the Non-Destructive recovery and see if that helps your problem.

I'm on holiday and I still come on here to post :P
Click to expand...

I'm not sure if I can post my IPV4 address safely or not, but it doesn't end in 204. So should I go to the IPV4 properties and enter whatever IPV4 address I see in the details box of my local area connection?
 
Also I just want to thank you both for being so helpful so far. Johnb35, you are especially awesome and sorry for getting irritated before, its just a little stressful when you have no idea what is happening to your own computer :P. Also, sorry for bothering you on your holiday WinDOS, you are truly dedicated ^_^.
 
there is a malware which changes your ip to your routers i have had this numerous times and seem to have had the same problem as you
 
Open a command prompt and type "ipconfig /all" without the quotes and hit enter.

You should see something similar to the attached image. We would need the following info. Please do it on both systems and post what each has for the following.

1. Is dhcp enabled?
2. IP address
3. default gateway
4. Dhcp server
5. dns servers

This command will not show your external IP address so its safe to post.
 

Attachments

  • ipconfig2.JPG
    ipconfig2.JPG
    58.6 KB · Views: 49
Doop said:
I'm not sure if I can post my IPV4 address safely or not, but it doesn't end in 204. So should I go to the IPV4 properties and enter whatever IPV4 address I see in the details box of my local area connection?
Click to expand...

No. Add 1 to your last number of your ip adddress.
So if it was 100.200.100.1, change it to 100.200.100.2 and so on. But you have the idea. These arn't mine anyway, I am on holiday at the peak district :P
 
You must log in or register to reply here.
Back
Top