|
Post by Mike Monce - HJG on Jun 20, 2019 15:08:43 GMT
Hi All,
So I came back from a trip and all of a sudden I have a problem with FS9. Whenever I start it up a rundll32 also starts up and consumes 40-60% of the CPU. This only happens with FS9, other programs are fine when starting. If I shut down the rundll32 after FS9 boots in the task manager things sort of return to normal, but I can tell things are not running totally up to par.
Researching this, found that such a symptom is a sign of a corrupted/infected rundll32. I can't delete it (the one in the system32 folder) as it's vital to windows. I ran malwarebytes and it didn't help. My Norton doesn't find it.
File search came back with 2 rundll32's: one an application file of 44kb, the other an MUI file of 3kb.
Any help would be appreciated in dealing with this.
Mike
|
|
|
Post by aerofoto - HJG Admin on Jun 20, 2019 20:16:24 GMT
Have you installed anything (addons or utilities) as recently as just prior to your trip Mike that could account for your experience ?
Even in regard to normal WINDOWS related updates too ?
Mark C AKL/NZ
|
|
|
Post by Nathan Ford - HJG on Jun 21, 2019 8:00:12 GMT
|
|
|
Post by Mike Monce - HJG on Jun 21, 2019 12:29:45 GMT
Nathan, thanks, but that link refers to W10; I'm running W7.
I did find some old threads on avsim and flightsim describing the exact same problem. The solution there appears to be a reg key:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX where an extra key shows up. My problem now is that when I delete the extra key and then run FS, that key then shows back up so the problem continues. So now my issue is how to permanently delete that extraneous key that FS generates. Why it started doing that I have no idea.
Mark: the only additions I've added lately concern our private project, and since none of the rest of you have had a problem I doubt that's it. And I disabled any windows updates several years ago when it destroyed FS9 as you remember.
Mike
|
|
|
Post by aerofoto - HJG Admin on Jun 21, 2019 22:02:21 GMT
I always treat WINDOWS update with utmost "suspicion" sometimes too. Hard to say really because some things can react differently on different systems .... depending on what's already there/installed and that those things are interacting with. In this sort of scenario something experienced by someone may not be experienced universally/by everyone else .... and which makes troubleshooting really awkward. "BLOODY ANNOYING" when/if this sort of thing happens .... I grant you Mark C AKL/NZ
|
|
|
Post by Nathan Ford - HJG on Jun 21, 2019 22:58:15 GMT
Let me read up on it a bit more and Iβll run it past a tech mate of mine. I have only just recently updated (wonβt say upgraded π) to Win10 from Win 7 as windows will stop supporting 7 next year.
Cheers, Nathan.
|
|
|
Post by Nathan Ford - HJG on Jun 22, 2019 0:36:43 GMT
David has had a look at this thread and replied: βI would run a system file check, Windows + r. Type in. SFC /SCANNOW.β He also said that sometimes it can be a case of updating to the latest graphics driver.
Nathan π
|
|
|
Post by Mike Monce - HJG on Jun 22, 2019 12:13:28 GMT
I haven't updated anything on the computer in 6 years, including any drivers (if it ain't broke don't fix it). I'll run a system file check as suggested.
If your friend has a way to get that extra reg key deleted permanently I think that will soalve they problem as I've seen on avsim and flightsim threads.
Thanks.
Mike
|
|
Deleted
Deleted Member
Posts: 0
|
Post by Deleted on Jun 22, 2019 13:26:50 GMT
I haven't updated anything on the computer in 6 years, including any drivers (if it ain't broke don't fix it). It is good idea BUT the only thing you NEED to PERIODICALLY update is web browser softwares such as Explorer or Firefox or Safari or Chrome because older web browser softwares have more security holes than you see in Swiss cheese and that is what hackers can get into. If you do regular shopping on Internet using web browsers, it is IMPORTANT to update web browsers PERIODICALLY so that latest security protections will protect your Internet shopping and especially if you rely on Internet to do annual IRS income tax returns to be filed online uploading to IRS. Consult your computer experts on how to update web browsers without updating Windows or computer. Regards, Aharon
|
|
|
Post by Mike Monce - HJG on Jun 22, 2019 17:21:03 GMT
Aharon,
I run firefox and it updates itself on a regular basis. I have two computers: one for FS and the other for everything else. The main use of the FS firefox browser is getting weather, accessing flightsim and avsim and simbrief. All other internet browsing is done on a separate computer. I don't think this has anything to do with the issue I'm having. It's definitely FS related, read what I wrote about the reg key issue.
Mike
|
|
Deleted
Deleted Member
Posts: 0
|
Post by Deleted on Jun 22, 2019 22:58:39 GMT
I don't think this has anything to do with the issue I'm having. It's definitely FS related, read what I wrote about the reg key issue. Mike, I am not referring or talking about the FS related issue that you have been experiencing on the reg key problem. I am just talking about in general that it is ok for you to avoid Windows updates and computer updates that you have avoided for past 6 years but it is not ok to avoid updates for web browsers. Since you concede that your Firefox updates itself on a regular basis, that is great news and correct procedure. When you said "I haven't updated anything on the computer in 6 years, including any drivers (if it ain't broke don't fix it)", that gave me concern that you were not updating web browsers. But all is good now since you say you update Firefox regularly. Regards, Aharon
|
|
|
Post by Nathan Ford - HJG on Jun 23, 2019 3:56:10 GMT
Hi Mike, Maybe have a look at this, it may help π www.gog.com/forum/stronghold_series/disable_creation_of_gameux_registry_keysTry deleting the extra key and renaming the GameUX.dll to GameUX.old and see if that helps. You can always change it back if needed. The GameUX.dll is used to hold a list of games that require online activation to start. If FS9 has got included into that list it will overload the rundll as it is trying to activate it online and not getting a response. Disabling the GameUX.dll will stop it from launching the list. I have run this past my mate and he agreed with what I have suggested here. Hope it works for you. Cheers Nathan
|
|
|
Post by Mike Monce - HJG on Jun 23, 2019 12:17:41 GMT
Nathan,
This looks like a very promising solution...thanks! I'm off to the air museum today where I volunteer about once a week (www.neam.org), but will try it tomorrow.
Mike
|
|
|
Post by ozflyer on Jun 24, 2019 1:46:39 GMT
Renaming the gameuxdll fixes the problem.
|
|
|
Post by Mike Monce - HJG on Jun 24, 2019 12:43:10 GMT
NOPE, renaming gameux.dll to gameux.old didn't fix the problem. The extraneous reg key shows up again when trying to run FS and rundll32 starts up again....No change at all. To rename gameux, I had to take control of the file from TrustedInstaller, but once I did that I changed the name, but like I just said... no joy. ARRRRGHH to quote Charlie Brown. Mike
|
|