Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Have a problem, getting this comming up. rundll32 caused an invalid page fault in module at 0000:0063fe3a
How do I fix this ? It is module unknown so how do I find it. Please any help would great.

Have a problem after web page loads i get
an invalid page fault
RUNDLL32 caused an invalid page fault in Registers:
module at 0000:0063fe3a.
Registers:

I am having the same problem with RUNDLL32 caused an invalid page fault in module at 0000:0063fe3a. It is followed by a second window with error message: RUNDLL32 caused an invalid pagefault in module KERNEL32.DLL at 0167:bff87ede. It seems to appear at IE startup and when windows are transitioning. I went from IE 5.05 to IE 6.0 and nothing improved. The repair message above seems to imply that a similar problem is fixed with the second Windows98 service pack which I already have installed. If you have any further advise, please let me know.

In some of these cases there may be something lurking in the startup files causing the problem. To check things out, suggest the following:
Click Start>Run, enter: msinfo32
Click on: (+)Software Environment and then on Startup Programs.
Click Edit>Select All to highlight all the entries on the right pane, and then go to: Edit>Copy.
Paste the copied text in a post.You may also want to do an updated antivirus scan, if you haven't already done one.
There is a good online scanner here:
http://www.pandasoftware.com/activescan/com/The Trend Micro website also has an online scanner called HouseCall:
http://housecall.antivirus.com/

...I've got the multiple rundll32 error message also...no hint of what brought this on...no module is listed...as was suggested here's what I've got being fired up at startup....sure hope there is a clue in here somewhere...and yup... I did run a virus check and found nothing (yet !!)...thanks
Office Startup Startup Group "C:\Program Files\Microsoft Office\Office\OSA.exe" -b
Microsoft Find Fast Startup Group "C:\Program Files\Microsoft Office\Office\FINDFAST.exe"
AIM Registry (Per-User Run) D:\PROGRAM FILES\AIM95\aim.exe -cnetwait.odl
MSMSGS Registry (Per-User Run) "C:\Program Files\Messenger\msmsgs.exe" /background
Taskbar Display Controls Registry (Per-User Run) RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
ScanRegistry Registry (Machine Run) C:\WINDOWS\scanregw.exe /autorun
TaskMonitor Registry (Machine Run) C:\WINDOWS\taskmon.exe
SystemTray Registry (Machine Run) SysTray.exe
LoadPowerProfile Registry (Machine Run) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
RealTray Registry (Machine Run) C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
LoadQM Registry (Machine Run) loadqm.exe
Excite Platform Registry (Machine Run) C:\PROGRA~1\EXCITE\PLATFORM\ExLaunch.exe
QuickTime Task Registry (Machine Run) C:\WINDOWS\SYSTEM\QTTASK.exe
wcmdmgr Registry (Machine Run) C:\WINDOWS\wt\updater\wcmdmgrl.exe -launch
ausvc Registry (Machine Run) C:\WINDOWS\ausvc.exe
SysScan Registry (Machine Run) C:\WINDOWS\bvt.exe
ABsr Registry (Machine Run) C:\WINDOWS\absr.exe
Aornum1 Registry (Machine Run) C:\Program Files\Ornum\Aornum1\1.bin\Aornum.exe
XNSearchAssistant Registry (Machine Run) C:\Program Files\iWon\Search Assistant\SrchAsst.exe
Aornum Registry (Machine Run) C:\PROGRAM FILES\ORNUM\AORNUM1\1.BIN\AORNUM.exe
WinStart Registry (Machine Run) C:\WINDOWS\System\WinStart.exe -boot
LoadPowerProfile Registry (Machine Service) Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
Thanks again,Old Man aka Bob Greaves

Bob Greaves,
That is one large startup list, and just at a glance, there is a Trojan spyware running: Aornum!
Aornum is created by a company called Iwon. It reports info from your machine to their company. It causes many problems such as not being able to delete it as it starts up over and over.
What you want to do is restart your computer in safe mode, go to program files in explorer, and delete any and all references to aornum such as ornum, aornum, aornum1.bin, and aornum.exe. Also remove it from anywhere else you can find it using the Find feature in your Windows operating system, then reboot your machine.
You may also want to do a search in the registry for aornum, and if found just delete the aornum key value.
To remove it from your StartUp, go to Start >Run, type Msconfig, and uncheck the following entries on the Startup tab:
Aornum1, Aornum
Click OK, and Reboot.You also have virus related entries such as: ausvc and absr. You definitely need to place immediate attention on these items and take action on them.
There are a few websites that can give you guidance and further links on what to keep and what/how to get rid of, including malware.
Start here:
http://www.lafn.org/webconnect/mentor/startup/PENINDEX.HTM
Other helpful sites:
http://www.pacs-portal.co.uk/startup_pages/startup_full.htm
http://www2.whidbey.net/djdenham/Uncheck.htm
http://www.answersthatwork.com/Tasklist_pages/tasklist_a.htm
A Google search might also be helpful if you need additional info.
Would also run an online scan: Trend Micro HouseCall or Panda Active Scan.
After you finish taking care of the virus related issues and start identifying what to keep and what to dump from the StartUp list:
-Go to Start/Run, and type Msconfig.
-On the Startup tab, uncheck any item that is not necessary or undesirable.
-Click OK, close Msconfig, and Reboot.You may want to download and install Ad-Aware. This program scans your PC for spyware.
After installing AdAware, but before running the program, download and install its latest Signature file. Unzip it to the Lavasoft Ad-Aware folder in Program Files, and have it overwrite the one that is there.
Have your drives and registry scanned for spyware, check all found files and reg keys, click continue, and have them removed. Reboot.
For performance purposes, would seriously recommend trimming the Startup profile.
Your PC will probably run much better and you will experience less problems after doing the purge.
Good luck.

FZWG...sure preciate the insight....I've got a coworker (one of them damned teckie kids in the IT dept) who wanted the exact same thing done...(BTW this is a system I have at home). I'm sure we will find the right sized hammer and get this rectified. Course this morning the Rundll32 error boxes went away and the system seems to be running fine again. How ?...well, as I was in the process of hitting the web (excite.com - as the starting point) it hadn't even finished loading that page up and a Windows type message box came up saying "an update has occured...please reboot your machine"....I didn't even have to...it did on its own !!! course the usual 25 or so icons no longer appeared ...just the skeleton(white blank image) of the first 5 or 6 and the machine locked up....well, I'm from the old school...'when in doubt reboot' and since the three finger salute wouldn't work,,,I power cycled it......er... twice... and everything came back appearing and functioning as it did prior to 10/02 ....now this chain of events has this coworker really wanting me NOT to touch anything cause he wants to dig around before all of this nonsense goes away. He also gave me a chewing for not bringing it in to work today(no respect !!!), there are 250 pc's floating around here and this is a prime example of what is expected here and they want to know how to avoid it and/or beat it...it's only a matter of time when something gets thru here at work. If you care to hear how they deal with this ( I won't be able to talk them out of it, can see that coming) drop a reply ....
Thanks for all your help...I sure hope this helps the other posters also...sounds like the same reactions.
Old Man aka Bob Greaves

FZWG.....we FOUND the right sized hammer...course not the first time...that Aornum was a doozey to get rid (located in three directories)of but it appears that I've cleaned my machine of all unwanted critters. Thanks for the detailed instructions and the links. The viruses also have been taken care of and best of all ...my machine actually still works !!!
Thanks again
Old Man aka Bob Greaves

Glad things worked out.
Make sure you check bvt.exe also. (SysScan Registry (Machine Run) C:\WINDOWS\bvt.exe)
If you leave any of these goodies in your machine, it will be bad news eventually.
Good luck.

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |