Rundll - error loading ctccw32.dll

Hello,
My new laptop seems to have developed the following error each time I start
up: "Rundll - error loading ctccw32.dll". Whilst by just clicking on the "OK"
button to make it disappear, it's knowing that the system is not running
correctly that's annoying.
Can anyone advise how this can be corrected please? I searched the web to
no available and the only info found was relating to the bluetooth on the
laptop which is not used and hasn't been used since acquiring the laptop 4
wks ago.
Would appreciate a solution please.

PB

nass
Sat Apr 12 10:37:01 PDT 2008



"pbakajb" wrote:

> Hello,
> My new laptop seems to have developed the following error each time I start
> up: "Rundll - error loading ctccw32.dll". Whilst by just clicking on the "OK"
> button to make it disappear, it's knowing that the system is not running
> correctly that's annoying.
> Can anyone advise how this can be corrected please? I searched the web to
> no available and the only info found was relating to the bluetooth on the
> laptop which is not used and hasn't been used since acquiring the laptop 4
> wks ago.
> Would appreciate a solution please.
>
> PB

I think you got IRC bot/backdoor Trojans or the Drop.Agent Trojan and may
be your Anti-virus did detected it removed but still in the registry lurking!.
Trojans/Drop.Agen.ru.2.A;
http://www.avira.com/en/threats/section/vdfhistory/vdf_no/6.38.01.179/6.38.01.179.html
BKDR_AGENT.RAQ;
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_AGENT.RAQ

Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
RootkitRevealer v1.71
By Bryce Cogswell and Mark Russinovich
http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx

Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

Lots of tools to download and disinfect your machine (off-line scanner):
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/


Download the Hijackthis and send the report to one of
many
forums for analysis and troubleshooting:
When all else fails, HijackThis v2.0.2
(http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. Post
your log to:
http://www.spywareinfo.com/~merijn/downloads.html
http://aumha.net/viewforum.php?f=30,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7
http://www.bleepingcomputer.com/tutorials/tutorial42.html
http://www.bleepingcomputer.com/forums/
Or other appropriate
forums for expert analysis, not here.

HTH.
nass
---
http://www.nasstec.co.uk

VanguardLH
Sat Apr 12 14:13:01 PDT 2008

pbakajb wrote:

> Hello,
> My new laptop seems to have developed the following error each time I start
> up: "Rundll - error loading ctccw32.dll". Whilst by just clicking on the "OK"
> button to make it disappear, it's knowing that the system is not running
> correctly that's annoying.
> Can anyone advise how this can be corrected please? I searched the web to
> no available and the only info found was relating to the bluetooth on the
> laptop which is not used and hasn't been used since acquiring the laptop 4
> wks ago.
> Would appreciate a solution please.
>
> PB

http://www.bleepingcomputer.com/startups/gfxtray-20793.html
http://www.google.com/search?q=ctccw32.dll

So did your anti-malware software detect a pest and try to clean it out?
You never mentioned any such event. If it happened, the cleanup may not
have been complete. You'll have to manually clean out the remnant
startup entries in the registry or your Start group. You can use
SysInternals AutoRuns to see all startup entries.

pbakajb
Mon Apr 14 08:22:01 PDT 2008

Thank you Nass for the recommendations.

I forgot to mention I am running Norton 360 on the laptop, so you're
probably right about the software picking it up the the virus is still
sitting in the registry.
I've tried following your instructions via the Control Panel and do not get
the results outlined i.e. when I double click on the Internet Connection
icon, which is currently showing 'disconnected' maybe due to using a wireless
connecting (?). By right-clicking and selecting properties, the options are
still not shown.

So trying the links provided in the particular the Symantec and will let you
know if this worked.

Thank you again for your help.

"nass" wrote:

>
>
> "pbakajb" wrote:
>
> > Hello,
> > My new laptop seems to have developed the following error each time I start
> > up: "Rundll - error loading ctccw32.dll". Whilst by just clicking on the "OK"
> > button to make it disappear, it's knowing that the system is not running
> > correctly that's annoying.
> > Can anyone advise how this can be corrected please? I searched the web to
> > no available and the only info found was relating to the bluetooth on the
> > laptop which is not used and hasn't been used since acquiring the laptop 4
> > wks ago.
> > Would appreciate a solution please.
> >
> > PB
>
> I think you got IRC bot/backdoor Trojans or the Drop.Agent Trojan and may
> be your Anti-virus did detected it removed but still in the registry lurking!.
> Trojans/Drop.Agen.ru.2.A;
> http://www.avira.com/en/threats/section/vdfhistory/vdf_no/6.38.01.179/6.38.01.179.html
> BKDR_AGENT.RAQ;
> http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=BKDR_AGENT.RAQ
>
> Go through these Cleaning steps:
> 1... Click start >> Control Panel >> Double Click Network and Internet
> Connections >> Double click Internet Options, on the IE Properties window
> you will see these Options:
> General | Security | Privacy | Content | Connections | Programs
> | Advanced .
>
> Click on General Tab (1st Tab on the left) and you will see a Button called
> [ Clear History ..] click on it to clear your History caches, then click on
> [Delete Files..] to delete Internet Files created over the time, click on [
> Delete Cookies...] to delete your cookies left by visiting websites.
>
> Then click on Advanced tab and scroll down to under the Browsing Option:
> [&] Browsing
> [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
> = Then try to Disable the Add-Ons on your Browser somehow installed on your
> browser, On how to disable the Add-ons follow this:
> Click on Programs Tab and then click the Manage Add-Ons Button there Disable
> the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
> later and see which is the culprit .
> How to manage Add-Ons:
> http://support.microsoft.com/kb/883256
> Scan for malware from here:
> SuperAntispyware - Free
> http://www.superantispyware.com/superantispywarefreevspro.html
> RootkitRevealer v1.71
> By Bryce Cogswell and Mark Russinovich
> http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx
>
> Run a scan from here on-line:
> http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
> http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
> Download Avast Cleaner (off-line scanner) from here:
> http://www.avast.com/eng/avast-virus-cleaner.html
>
> Lots of tools to download and disinfect your machine (off-line scanner):
> http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
>
>
> Download the Hijackthis and send the report to one of
> many
> forums for analysis and troubleshooting:
> When all else fails, HijackThis v2.0.2
> (http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php) is
> the preferred tool to use.
> It will help you to both identify and remove any hijackware/spyware. Post
> your log to:
> http://www.spywareinfo.com/~merijn/downloads.html
> http://aumha.net/viewforum.php?f=30,
> http://castlecops.com/forum67.html,
> http://forums.subratam.org/index.php?showforum=7
> http://www.bleepingcomputer.com/tutorials/tutorial42.html
> http://www.bleepingcomputer.com/forums/
> Or other appropriate
> forums for expert analysis, not here.
>
> HTH.
> nass
> ---
> http://www.nasstec.co.uk
>

pbakajb
Mon Apr 14 08:30:02 PDT 2008

hi VanguardLH,

Many thanks for the links. You know I tried searching for the exact error
and couldn't find it; obviously not using a good search engine. Anyway,
currently going through the other links provided and doing the Symantec scan
and taking it from there. Will respond with results.

Thank you again for taking the time to look at my problem and provide help.

PB

"VanguardLH" wrote:

> pbakajb wrote:
>
> > Hello,
> > My new laptop seems to have developed the following error each time I start
> > up: "Rundll - error loading ctccw32.dll". Whilst by just clicking on the "OK"
> > button to make it disappear, it's knowing that the system is not running
> > correctly that's annoying.
> > Can anyone advise how this can be corrected please? I searched the web to
> > no available and the only info found was relating to the bluetooth on the
> > laptop which is not used and hasn't been used since acquiring the laptop 4
> > wks ago.
> > Would appreciate a solution please.
> >
> > PB
>
> http://www.bleepingcomputer.com/startups/gfxtray-20793.html
> http://www.google.com/search?q=ctccw32.dll
>
> So did your anti-malware software detect a pest and try to clean it out?
> You never mentioned any such event. If it happened, the cleanup may not
> have been complete. You'll have to manually clean out the remnant
> startup entries in the registry or your Start group. You can use
> SysInternals AutoRuns to see all startup entries.
>

nass
Mon Apr 14 08:50:01 PDT 2008



"pbakajb" wrote:

> Thank you Nass for the recommendations.
>
> I forgot to mention I am running Norton 360 on the laptop, so you're
> probably right about the software picking it up the the virus is still
> sitting in the registry.
> I've tried following your instructions via the Control Panel and do not get
> the results outlined i.e. when I double click on the Internet Connection
> icon, which is currently showing 'disconnected' maybe due to using a wireless
> connecting (?). By right-clicking and selecting properties, the options are
> still not shown.
>
> So trying the links provided in the particular the Symantec and will let you
> know if this worked.
>
> Thank you again for your help.

Hi,
You need to Double click on network and internet Coonections or if you can
see "Internet Options" D click this to get the IE properties or open the
Internet explorer then go to >> Tools >> options.

Click start >> Control Panel >> Double Click Network and Internet
Connections >> "Double click Internet Options", on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .
Let us know your progress.
Good luck.
nass
--
http://www.nasstec.co.uk