Window Start-up Rundll Error

[andrew]

I am getting a message on start-up that says the following:

Rundll
Error Loading C:\WINDOWS\VHOJUWAXOHE.DLL
The specified module could not be found.
How is this issue fixed?

Thanks

[pa bear [ms mvp]]

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting the requested logs
in an appropriate forum.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/pag ... ng_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachines ... board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup, http://aumha.net/viewforum.php?f=30
or other appropriate forums.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002

Andrew wrote:
> I am getting a message on start-up that says the following:
>
> Rundll
> Error Loading C:\WINDOWS\VHOJUWAXOHE.DLL
> The specified module could not be found.
> How is this issue fixed?
>
> Thanks

[pegasus [mvp]]

"Andrew" <Andrew@discussions.microsoft.com> wrote in message
news:3635DACF-BE13-449F-A59B-3D73501B5A2A@microsoft.com...
>I am getting a message on start-up that says the following:
>
> Rundll
> Error Loading C:\WINDOWS\VHOJUWAXOHE.DLL
> The specified module could not be found.
> How is this issue fixed?
>
> Thanks

This is a residue of a virus/malware infection that was dealt with by your
virus scanner. Click Start / Run, then type msconfig.exe so that you can
examine the various tasks under the Startup tab. One of them will be the
offender. Untick it to get rid of the error message.

[james watkins]

"Leythos" <spam9999free@rrohio.com> wrote in message
news:1NlNl.20030$CN5.7412@newsfe23.iad...
> You need to format your hard and reinstall windows.

The response seemingly written by "Leythos" was actually issued by a
well-known troll and imposter called "PC-Butts". He appears to derive a
childish pleasure by dishing out poor advice. While reformatting the disk
will, of course, fix your problem, it is equivalent to buying a new car when
running out of gas. Follow his advice at your own peril.

[leythos]

In article <1NlNl.20030$CN5.7412@newsfe23.iad>, spam9999free@rrohio.com
says...
> Path: news.astraweb.com!border2.newsrouter.astraweb.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!post02.iad.highwinds-media.com!newsfe23.iad.POSTED!4b08191c!not-for-mail
> From: "Leythos" <spam9999free@rrohio.com>
> Newsgroups: microsoft.public.windowsxp.general
> References: <3635DACF-BE13-449F-A59B-3D73501B5A2A@microsoft.com>
> In-Reply-To: <3635DACF-BE13-449F-A59B-3D73501B5A2A@microsoft.com>
> Subject: Re: Window Start-up Rundll Error
> Lines: 21
> MIME-Version: 1.0
> Content-Type: text/plain; format=flowed; charset="UTF-8"; reply-type=original
> Content-Transfer-Encoding: 7bit
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Newsreader: Microsoft Windows Mail 6.0.6001.18000
> X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049
> X-Antivirus: avast! (VPS 090508-0, 05/08/2009), Outbound message
> X-Antivirus-Status: Clean
> Message-ID: <1NlNl.20030$CN5.7412@newsfe23.iad>
> X-Complaints-To: abuse@teranews.com
> NNTP-Posting-Date: Sat, 09 May 2009 20:34:05 UTC
> Organization: TeraNews.com
> Date: Sat, 9 May 2009 13:33:58 -0700
>
> You need to format your hard and reinstall windows.
>


Another person impersonating me - Chris, your actions are unethical and
dishonest and reflect poorly on your PCBUTTS1.COM website.

Abuse reported.

--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)

[leythos]

In article <e5BNToO0JHA.5744@TK2MSFTNGP04.phx.gbl>, timmeddick@gawab.com
says...
>
> Idiot!

Tim - the post was by PCBUTTS impersonating me in order to show his lack
of ethics and his complete dishonesty.

--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)

[elmo]

Andrew wrote:
> I am getting a message on start-up that says the following:
>
> Rundll
> Error Loading C:\WINDOWS\VHOJUWAXOHE.DLL
> The specified module could not be found.
> How is this issue fixed?
>
> Thanks

Malware was deleted by your a/v software, but the reference to the file
was not removed from the registry.

Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
type the name of the file into the search pane. Click "Find Next", and
when located, delete the reference to the file. Press F3 to continue
the search.

You can click File, Export, and save the entry to the Desktop. If you
remove it and there's a problem, double-click the .reg file you exported
to the Desktop and it'll be added to the registry again. You can create
a restore point before editing the registry too.

You could click Start, Run, type MSCONFIG, click OK, click the StartUp
tab, and deselect the item(s). When you restart the computer, you will
be warned that you're running in the Diagnostic mode; click to not alert
you again, and OK out. You won't see the message again. But I think
it's best to just remove the references from the registry.

--
Joe =o)

[jim]

On Sat, 9 May 2009 13:33:58 -0700, "Leythos" <spam9999free@rrohio.com>
wrote:

>You need to format your hard and reinstall windows.

Too much W*****g makes you go blind .

[pa bear [ms mvp]]

I put it to you that the infection(s) was NOT fully removed and that the
same Registry key will be recreated upon reboot and it will point to yet
another new, randomly-named DLL.

Elmo wrote:
> Andrew wrote:
>> I am getting a message on start-up that says the following:
>>
>> Rundll
>> Error Loading C:\WINDOWS\VHOJUWAXOHE.DLL
>> The specified module could not be found.
>> How is this issue fixed?
>>
>> Thanks
>
> Malware was deleted by your a/v software, but the reference to the file
> was not removed from the registry.
>
> Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
> type the name of the file into the search pane. Click "Find Next", and
> when located, delete the reference to the file. Press F3 to continue
> the search.
>
> You can click File, Export, and save the entry to the Desktop. If you
> remove it and there's a problem, double-click the .reg file you exported
> to the Desktop and it'll be added to the registry again. You can create
> a restore point before editing the registry too.
>
> You could click Start, Run, type MSCONFIG, click OK, click the StartUp
> tab, and deselect the item(s). When you restart the computer, you will
> be warned that you're running in the Diagnostic mode; click to not alert
> you again, and OK out. You won't see the message again. But I think
> it's best to just remove the references from the registry.

[pegasus [mvp]]

"PA Bear [MS MVP]" <PABearMVP@gmail.com> wrote in message
news:OjaLYSY0JHA.5684@TK2MSFTNGP04.phx.gbl...
>I put it to you that the infection(s) was NOT fully removed and that the
>same Registry key will be recreated upon reboot and it will point to yet
>another new, randomly-named DLL.

It is equally feasible that the infection consisted of a two-stage process:
a) A harmless launcher that invoked an infected .dll file.
b) An infected .dll file.
When the virus scanner removes the infected .dll file then the harmless
launcher is left behind. It won't do any damage but it will generate the
error message that the OP sees.