Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Upon rebooting a window apears that says cannot find PSAPI.dill!!! Does anybody know what this is? I've tried to find what it goes to but cannot

There is also a thread in this forum about PSAPI.dll.
http://www.computing.net/security/wwwboard/forum/6959.html
-SF

PSAPI.dll errors on a Windows 98 machine = Spyware..
Download 'Hijack This!'. Unzip, doubleclick HijackThis.exe, and hit "Scan".
When the scan is finished, click "Save Log", and copy and paste it in a reply.
HijackThis!

Hi
psapi.dll is a file that a program can not find. Use you find function and search the computer for psapi.dll (To see if there is a copy and it is just the program can't find it). If you are unable to find it
Goto Url:
http://www.dll-files.com/dllindex/dll-files.shtml?psapi

Why would he/she want to do that??? Psapi.dll is a Windows NT file!!!
Microsoft process status helper (PSAPI.DLL) is a small dynamic link library that makes it easier to obtain information about processes and device drivers running under Microsoft® Windows NT®.
A psapi.dll error on a Windows 98 machine is caused by Spyware...

Hi again
Sorry I wouldn't actually know which dll belongs to what. I assumed some other program installed psapi (I guess that includes spyware)
Sorry Tom41 SoulForge, thought i had checked for updates and missed your posts before sending mine off..I would have shelved my post.
This post is quite interesting I thought.
http://www.computing.net/windowsme/wwwboard/forum/38699.html

Tom41
I have W98SE and also have psapi.dll plus several other NT files. I'm just wondering if these arrived when downloading FULL versions of IE and installing them. Presumably it will shove all the files in not knowing what OS I am using - just an idea.
I note that this file can also be associated with malware (or so it seems).
Derek

Hi
I also have psapi.dll errors with win me. Here is the HijackThis log:Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.exe
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.exe
C:\WINDOWS\SYSTEM\MSTASK.exe
C:\WINDOWS\SYSTEM\SSDPSRV.exe
C:\OHJELMATIEDOSTOT\F-SECURE\COMMON\FSMA32.exe
C:\OHJELMATIEDOSTOT\F-SECURE\COMMON\FSAA.exe
C:\OHJELMATIEDOSTOT\F-SECURE\COMMON\FSMB32.exe
C:\WINDOWS\EXPLORER.exe
C:\OHJELMATIEDOSTOT\F-SECURE\COMMON\FCH32.exe
C:\OHJELMATIEDOSTOT\F-SECURE\COMMON\FNRB32.exe
C:\OHJELMATIEDOSTOT\F-SECURE\COMMON\FAMEH32.exe
C:\WINDOWS\SYSTEM\RESTORE\STMGR.exe
C:\OHJELMATIEDOSTOT\F-SECURE\COMMON\FSGK32.exe
C:\OHJELMATIEDOSTOT\F-SECURE\COMMON\FIH32.exe
C:\OHJELMATIEDOSTOT\F-SECURE\ANTI-VIRUS\FSAV32.exe
C:\WINDOWS\TASKMON.exe
C:\WINDOWS\SYSTEM\SYSTRAY.exe
C:\OHJELMATIEDOSTOT\WINAMP\WINAMPA.exe
C:\OHJELMATIEDOSTOT\F-SECURE\COMMON\FSM32.exe
C:\WINDOWS\SYSTEM\WMIEXE.exe
C:\OHJELMATIEDOSTOT\VLP OY - VLT AB\NETIKKA DSL\APP\ENTERNET.exe
C:\OHJELMATIEDOSTOT\INTERNET EXPLORER\IEXPLORE.exe
C:\WINDOWS\SYSTEM\PSTORES.exe
C:\WINDOWS\SYSTEM\WBEM\WINMGMT.exe
C:\WINDOWS\SYSTEM\SPOOL32.exe
C:\OHJELMATIEDOSTOT\WINZIP\WINZIP32.exe
C:\WINDOWS\TYöPöYTä\HIJACKTHIS.exe
C:\WINDOWS\WUAUBOOT.exeR1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.fastwebfinder.com/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.fastwebfinder.com/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.fastwebfinder.com/sp.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.netikka.fi/fin/index.asp
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.searchxp.com/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.searchxp.com/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mtv3.fi/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.searchxp.com/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.fastwebfinder.com/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.searchxp.com/search.php?qq=%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = http://www.fastwebfinder.com/hp.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\OHJELMATIEDOSTOT\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: WinShow module - {6CC1C918-AE8B-4373-A5B4-28BA1851E39A} - C:\WINDOWS\WINSHOW.DLL (file missing)
O3 - Toolbar: @msdxmLC.dll,-1@1035,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [WinampAgent] "C:\OHJELMATIEDOSTOT\WINAMP\WINAMPa.exe"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Ohjelmatiedostot\F-Secure\Common\FSM32.exe" /splash
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [F-Secure Management Agent] C:\Ohjelmatiedostot\F-Secure\Common\FSMA32.exe
O4 - HKLM\..\RunServices: [fsaa] C:\Ohjelmatiedostot\F-Secure\Common\fsaa.exe
O4 - HKCU\..\Run: [iedll] C:\WINDOWS\iedll.exe
O4 - HKCU\..\Run: [loader] C:\WINDOWS\LOADER.exe
O4 - Startup: Microsoft Office.lnk = C:\Ohjelmatiedostot\Microsoft Office\Office\OSA9.exe
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: MSN Messenger Service (HKLM)
O12 - Plugin for .spop: C:\OHJELM~1\INTERN~1\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.mtv3.fi/
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

The CWShredder worked very well and solved my problem - the missing psapi.dll, a library arquive - immediately. Very good stuff!!!

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |