View original (French)

Module loading failed

Solved
Assterix Posted messages 3 Status Member -  
Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   -
Hello,

Following a reformat and installation of Windows 10, I received this error message at startup


I would like to resolve this issue, but I don't know how to proceed.
If anyone knows how to tackle this problem, I am ready to follow the instructions.

Looking forward to a response, thank you in advance.
Configuration: Windows / Chrome 56.0.2924.87

5 answers

  1.
    Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712
     
    Hello,

    Follow the FRST tutorial. ( take the time to read carefully - everything is well explained ).

    Download and run the FRST scan, 3 FRST reports will be generated:
    • FRST.txt
    • Shortcut.txt
    • Additionnal.txt


    Send these 3 reports to the website http://pjjoint.malekal.com/ and in return, give the 3 pjjoint links leading to the reports here in a new response so that we can consult them.

    --
    Please press any key to continue the disinfection...
    0
  3. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712
     
    Here is the correction to be made with FRST. You can refer to this explanatory note with screenshots.

    Open Notepad: Press Windows + R,
    In the "Run" field, type notepad and OK.
    Copy/Paste the following into it: 


    CloseProcesses:
    CreateRestorePoint:
    HKU\S-1-5-21-3343772388-818903403-2986983717-1001\...\Run: [Ijwsoft] => C:\Windows\SysWOW64\regsvr32.exe C:\Users\Ender\AppData\Local\Icsoft\rdczepwg.dll <===== WARNING
    HKU\S-1-5-21-3343772388-818903403-2986983717-1001\...\Run: [Chromium] => c:\users\ender\appdata\local\chromium\application\chrome.exe --auto-launch-at-startup --profile-directory=Default --restore-last-session
    2017-02-23 06:49 - 2017-02-23 07:02 - 00000000 ____D C:\Users\Ender\AppData\Roaming\Enigma Software Group
    2017-02-23 06:48 - 2017-02-23 06:48 - 00000000 ____D C:\Program Files\Enigma Software Group
    2017-02-23 05:11 - 2017-02-23 05:11 - 00002052 _____ C:\Windows\System32\Tasks\wVofSnnOyf
    2017-02-23 04:45 - 2017-02-23 06:58 - 00000000 ____D C:\ProgramData\Microleaves
    2017-02-23 04:45 - 2017-02-23 04:45 - 00000000 ____D C:\Users\Ender\AppData\Roaming\Hetuentgrahs
    2017-02-23 04:43 - 2017-02-23 04:43 - 00003258 _____ C:\Windows\System32\Tasks\{61183546-0389-4E47-88B0-B99917671C55}
    2017-02-23 04:42 - 2017-02-23 07:02 - 00000000 ____D C:\Program Files (x86)\Ghejiwardkocedom
    2017-02-23 04:42 - 2017-02-23 06:59 - 00000000 ____D C:\Program Files (x86)\Microleaves
    2017-02-23 04:42 - 2017-02-23 05:58 - 00000000 ____D C:\Windows\system32\SSL
    2017-02-23 04:42 - 2017-02-23 05:09 - 00000420 _____ C:\Windows\Tasks\Online Application Updater.job
    2017-02-23 04:42 - 2017-02-23 05:09 - 00000374 _____ C:\Windows\Tasks\Online Application v209.job
    2017-02-23 04:42 - 2017-02-23 05:09 - 00000374 _____ C:\Windows\Tasks\Online Application v209 Guardian.job
    2017-02-23 04:42 - 2017-02-23 05:09 - 00000374 _____ C:\Windows\Tasks\Online Application v209 Guard.job
    2017-02-23 04:42 - 2017-02-23 05:09 - 00000364 _____ C:\Windows\Tasks\Online Application v2.job
    2017-02-23 04:42 - 2017-02-23 05:09 - 00000364 _____ C:\Windows\Tasks\Online Application v2 Guardian.job
    2017-02-23 04:42 - 2017-02-23 05:09 - 00000364 _____ C:\Windows\Tasks\Online Application v2 Guard.job
    2017-02-23 04:42 - 2017-02-23 04:42 - 00000000 ____D C:\Users\Ender\AppData\Roaming\Microleaves
    2017-02-23 04:42 - 2017-02-23 04:42 - 00000000 ____D C:\Users\Ender\AppData\Local\Arupick
    2017-02-23 04:42 - 2017-02-23 04:42 - 00000000 ____D C:\Users\Default\AppData\Local\AdvinstAnalytics
    2017-02-23 04:42 - 2017-02-23 04:42 - 00000000 ____D C:\Users\Default User\AppData\Local\AdvinstAnalytics
    2017-02-23 04:40 - 2017-02-23 07:03 - 00000000 ____D C:\Users\Ender\AppData\Local\Icsoft
    2017-02-23 04:40 - 2017-02-23 07:03 - 00000000 ____D C:\Users\Ender\AppData\Local\Ezztion
    2017-02-23 04:40 - 2017-02-23 04:40 - 00003972 _____ C:\Windows\System32\Tasks\{5CCD8DAB-EB66-3A00-D622-165D2A0859E3}
    2017-02-23 04:40 - 2017-02-23 04:40 - 00003880 _____ C:\Windows\System32\Tasks\{72D5C67F-FACA-121E-9E13-C2A92F312C37}
    2017-02-23 04:40 - 2017-02-23 04:40 - 00000000 ____D C:\Users\Ender\AppData\Roaming\Macromedia
    2017-02-23 04:40 - 2017-02-23 04:40 - 00000000 ____D C:\ProgramData\3090a254
    2017-02-23 04:39 - 2017-02-23 07:05 - 00000000 ____D C:\Program Files (x86)\DiskP
    2017-02-23 04:39 - 2017-02-23 07:02 - 00000000 ____D C:\Program Files (x86)\KMSPico 10.0.6
    2017-02-23 04:39 - 2017-02-23 07:02 - 00000000 ____D C:\Program Files (x86)\animechvodury
    2017-02-20 19:41 - 2017-02-20 19:41 - 02853571 _____ C:\Windows\ea1c423c74f064dbec0cca279bd0b082.exe
    2017-02-23 04:55 - 2017-02-23 07:02 - 00000000 ____D C:\Program Files (x86)\Qumase
    2017-02-23 04:55 - 2017-02-23 04:55 - 00000000 ____D C:\Users\Ender\AppData\Local\Vilsyghewok
    Task: {0CD91960-42EE-4C1A-BD7F-AFFD5538D864} - System32\Tasks\{72D5C67F-FACA-121E-9E13-C2A92F312C37} => Regsvr32.exe /s /n /i:"/rt" "C:\PROGRA~3\3090a254\64654ef.dll" <==== WARNING
    Task: {39F14BDC-C021-4657-9CA9-E7F870988C9E} - System32\Tasks\{5CCD8DAB-EB66-3A00-D622-165D2A0859E3} => C:\ProgramData\{AE10E587-19BB-522C-7A11-8C1775DB263C}\EBBB4CE5-5C10-FB4E-1307-A889291C8AD4.exe <==== WARNING
    Task: {7C738602-6C24-42E2-890B-913F3C118B40} - System32\Tasks\{61183546-0389-4E47-88B0-B99917671C55} => pcalua.exe -a "C:\Program Files (x86)\3DesXPZxQ2\uninstall.exe"
    Task: {BEB35CC3-E86C-4EB5-A94B-D59A24A6F867} - System32\Tasks\wVofSnnOyf => C:\Program Files (x86)\95mpRvHEFc\updengine.exe <==== WARNING
    Task: {EA8313F2-1941-4DBD-86FB-4932BD3436EE} - System32\Tasks\{582CF6E5-E556-4711-B19E-B9C5C3EC5A3E} => pcalua.exe -a "C:\Users\Ender\AppData\Roaming\Enigma Software Group\sh_installer.exe" -c -r sh
    Task: {F27CB1F2-4FD7-4643-BB33-85BB95504989} - System32\Tasks\{C15CB8D5-70A4-413A-A5AD-999D4FBE1E58} => pcalua.exe -a "C:\Program Files\ByteFence\ByteFence.exe" -c /uninstall
    Task: C:\Windows\Tasks\Online Application Updater.job => C:\Program Files (x86)\Microleaves\Online.io Application\Online Application Updater.exe <==== WARNING
    Task: C:\Windows\Tasks\Online Application v2 Guard.job => C:\Program Files (x86)\Microleaves\Online.io Application\OnlineGuardian-v2.exe <==== WARNING
    Task: C:\Windows\Tasks\Online Application v2 Guardian.job => C:\Program Files (x86)\Microleaves\Online.io Application\OnlineGuardian-v2.exe <==== WARNING
    Task: C:\Windows\Tasks\Online Application v2.job => C:\Program Files (x86)\Microleaves\Online.io Application\OnlineGuardian-v2.exe <==== WARNING
    Task: C:\Windows\Tasks\Online Application v209 Guard.job => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.0.9.exe <==== WARNING
    Task: C:\Windows\Tasks\Online Application v209 Guardian.job => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.0.9.exe <==== WARNING
    Task: C:\Windows\Tasks\Online Application v209.job => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.0.9.exe <==== WARNING
    Hosts:
    EmptyTemp:
    RemoveProxy:
    Reboot:


    Once you have pasted the text into Notepad,
    Menu "File" then "Save As",

    On the left, go to the Desktop,

    In the field below, file name enter: fixlist.txt
    Click on "Save", this will create fixlist.txt on the Desktop.

    Restart FRST and click on the "Fix" button
    A restart may be necessary (not mandatory)
    A text file will appear, copy/paste the content here in a new message.

    Restart the computer.

    Please press any key to continue the disinfection...
    0
  4. Assterix Posted messages 3 Status Member
     
    I have just followed all your instructions and restarted my PC.
    No error message! Yeah!

    I am very grateful for your help. Thank you very much!

    I wish you a pleasant end of the day.
    0
  6. Malekal_morte- Posted messages 178136 Registration date   Status Moderator, Security Contributor Last intervention   24 712
     
    You're welcome :)

    Finish with a cleanup Malwarebytes - Malwarebytes Anti-Malware Free Version Tutorial

    A few tips:

    To avoid getting caught again.
    Read this - Potentially Unwanted Programs / PUPs: Adwares/PUPs Folder: unwanted and invasive programs
    (Especially enable LPI detections to identify invasive and advertising programs)

    --
    Please press any key to continue the disinfection...
    0