Windows cannot access specified device...........

[mrmart]

Hi all


since a couple of days ago I've been receiving the following error message which pops up just before my desktop has loaded up C:WINDOWS\system32\rundll32.exe = "Windows cannot access specified device path or file. You may not have the appropriate permissions to access this item"

I didn't think it was anything too serious (well nothing that couldn't easily be solved until I came to try to un-install the last program I'd installed (which I thought might have been the problem). Tried to open Add/Remove in control panel. Got the same error message but this time specific to "control panel" and not "rundll32.exe"..tried most of the other files in control panel, same error message. So now I can't uninstall any programs unless it has an uninstall function in the "porgrams" menu. I did try the actual Program folders to find the "uninstall" file..can't find it.

Right clicked-Properties on "my computer" ...same error message



I used Trend PC-Cillin House-call online virus scan... it found nothing.

I tried Nortons online scan...found nothing

Did a scan in spybot to for any malicious files...nothing

Checked spybot again in the "immunise" section to see if those boxes were checked that protects and prevent me or anyone else from accessing certain parts of the comp....all boxes unchecked.

I know its nothing to do with not being logged in as administrator. although I did follow advice to change permissions in the folder options etc etc..but I knew I was wasting my time on that one.

Did a scan with "hiJackThis" ....nothing found.

Used Registry mechanic and repaired damaged registry parts. Still get the error messages.

I backed up my registry and followed instructions from a website to delete a couple of registry entries "NoControlPanel" ...caused me no problems but didn't solve anything

Searched forums for anyone with similar problems...but most of the questions had replies like "I have the same problem please help" and the rest of the search results lead to windows ME.

Searched this forum but can't find anything

I've also recently noticed that my Windows media player won;t start..gives an error message something like "an Internal application error has occured" which freezes all icons on my desktop forcing me to restart.


I feel like I've gone through all options that I know of or read about and anything I've found on the web about people with the same problems..there seemed to be no solution.


It goes without saying that the only other option is to re-install XP but before I do I'm hoping that someone here might have any other ideas I can try, or are familiar with this and have solved it themselves?



Thanks in advance

[pickel]

What OS are you running ?? If XP , have you tried " System restore " ?? Win 98 " Scanreg/restore " ????

[Sixpac_XP]

Could it be a memory problem?

[websteraaa]

try disabling the system security module and see if that helps. If it does,in system security,settings check the automatically permit action.

[mrmart]

Pickel: I'm using XP...I should've made my specs more clear sorry..but it does say XP at the bottom of the message . I disabled System restore as I use Roxio GOBACK..however..by the time I realised it was serious it was too late to go back to a time before the errors occured.


Sixpac_XP I'm no expert but I doubt it. Unless anyone knows otherwise.




websteraaa: try disabling the system security module and see if that helps. If it does,in system security,settings check the automatically permit action

I don't know how to disable the system security module, but bear in mind that if anything u say is only accessable in the control panel I can't get to it becuse of the error message.


I'm in the process of backing up files now ready for a re-install. Are there any registry wizards here that can give me a few ideas to try when I've finished backing up? I've got nothing to lose if I mess anything up cos looks like the only other solution is a reinstall.

Thanks

Mart

[vass0922]

rundll32.exe is indeed not a system file
Did you run MSCONFIG and see if there is anything odd?

Try this
http://www.experts-exchange.com/Oper..._20898768.html

This thread mentions somebody with 'Cool web search' installed probably some cheesy toolbar spyware.
rundll32.dll is a MS DLL
Rundll32.exe to my knowledge is NOT.

Maybe post your hijackthis logs?

You don't have problems with your homepage changing do you?

[mrmart]

The only time I see anything to do with "rundll32.exe" is on the error message window before the desktop loads..C:WINDOWS\system32\rundll32.exe <<this part is shown in the blue section of the window>>= "Windows cannot access specified device path or file. You may not have the appropriate permissions to access this item" The desktop doesn't load until I've clicked OK. The rest of the time I get the same message but with "control panel" in the blue bar on top of the window


I've looked in msconfig, I've also looked in the "processes" section. The first time I looked in the "processes" section "rundll32.exe" was running..I ended the process but nothing changed.

I don't have any home page problems apart from the occasional "page cannot be displayed" which I know from experience could be a sign of a hijack but I dont think its severe enough to be a hijack

I tried your link..but thats one of the first places I found when I first got the problem..the problem you link leads to is a rundll32.exe "laptop shutting down problem" and I'd already done a scan for Coolwebsearch and it found nothing

I did find a reference to my own problem somewhere else but you have to sign up to the premium sight for the solution and thats something I'm neither able nor willing to do.......anyway........below is my hijackthis log.





Logfile of HijackThis v1.97.7
Scan saved at 12:48:09, on 14/05/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Roxio\GoBack\GBPoll.exe
C:\WINDOWS\System32\gearsec.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\PC-cillin 2003\Tmntsrv.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Trend Micro\PC-cillin 2003\tmproxy.exe
C:\Program Files\Trend Micro\PC-cillin 2003\PccPfw.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\MsgPlus.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\eMule\eMule.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\martin\LOCALS~1\Temp\Rar$EX06.450\Hija ckThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKCU\..\Run: [MessengerPlus2] "C:\Program Files\Messenger Plus! 2\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: MsgPlus.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: ATI TV (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: ICQ Pro (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O9 - Extra button: Research (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O12 - Plugin for ôå: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/SU/ocx/12119/CTSUEng.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/s...irector/sw.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0309.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - https://www.gamespyid.com/alaunch.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...tatsClient.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.co...7950.375162037
O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole...rcadeRdxIE.cab
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub...sh/swflash.cab
O16 - DPF: {E7DBFB6C-113A-47CF-B278-F5C6AF4DE1BD} - http://www.smgradio.com/core/player/abasetup144.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/SU/ocx/12119/CTPID.cab

Thanks

[websteraaa]

Its prob that stupid Kerio

http://www.dslreports.com/forum/rema...2423~mode=flat

The security module setting in THAT program

[mrmart]

Quote:

Originally Posted by websteraaa

Its prob that stupid Kerio

http://www.dslreports.com/forum/rema...2423~mode=flat

The security module setting in THAT program

YAY!!!!!!!!!!!!!! I love you, I love you, I love you!!!!!!!!!!!!


I want to make deep passionate love with you!!!!!!!!!!....

ok maybe not ...


I can't understand how my kerio security module denied the rundll32.exe. I never mess with those settings!

Anyway...thanks

oh btw..did I mention that I love you?

[websteraaa]

Rundll32.exe means nothing by itself, it's the "motor" that instigates certain kernal ops.
You could have 10 or 100 in rundll.exe
Like in msconfig startup - rundll32 load current power scheme
in other words, execute a downloadlibrary 32 bit referenced in Windows system 32
Stop a rundll - you stop an action

command,
rundll32.exe user.exe,ExitWindows [Fast Shutdown of Windows]
rundll32.exe user.exe,ExitWindowsExec [Restart Windows]

http://www.liutilities.com/products/...rary/rundll32/