Extract a new copy of RUNDLL32.EXE from either your Windows 98 CD or from the CAB files on your hard drive, whichever you have, to the Windows folder, using the "Extract one file" option of System File Checker (SFC).
See here for details and examples:
How to use System File Checker (SFC) to extract a file:
http://support.earthlink.net/mu/1/psc/img/walkthroughs/windows_9x_nt/dialers/dun
_1.3/0850.how.to.sfc.psc.html
and
http://users.westelcom.com/rogersr/sfc.htm#1pp
HOW TO: Extract Original Compressed Windows Files:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;129605#5
Do you have updated anti-virus "rescue floppies" with which to scan the system from a floppy boot?
Can you make some to use, on someone else's computer?
Use CWShredder, the CoolWeb removal tool, available here:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads/tools/CWShredder.exe
http://www.zerosrealm.com/downloads/CWShredder.zip
http://aumha.org/downloads/cwshredder.zip
In addition, install Ad-Aware 6 free edition, start it, click its 'Check for Updates' link in the app to install updates, then use it to scan your system, and remove what it finds.
Ad-Aware:
http://www.lavasoftusa.com/support/download/
Install, update and run SpyBot Search & Destroy, scan your system, and then remove the items in RED only.
SpyBot S&D:
http://www.safer-networking.org/index.php?page=download
Download, unzip, and run Hijack This from one of these locations:
http://computercops.biz/downloads-cat-14.html
http://www.majorgeeks.com/downloads31.html
http://www.spywareinfo.com/downloads/tools/HijackThis.exe
Unzip to a folder other than your Desktop or the Temp folder, doubleclick HijackThis.exe, and hit "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log somewhere you can find it (Desktop, My Documents, or similar).
Most of what it lists will be harmless or even required, so do NOT fix anything yet.
Copy the log files and paste them into a new post at one of these forums:
http://forums.net-integration.net/
http://computercops.biz/forums.html
http://forums.spywareinfo.com/index.php?showforum0
http://tomcoyote.org/forums/
http://www.lavasoftsupport.com
http://boards.cexx.org/
The folks there will tell you what to remove.
A tutorial for using Hijack This is located here:
http://aumha.org/a/hjttutor.htm

Signature
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm
> on the Control Panel window, none of the applications will
> respond on double clicking.
> also Norton Antivirus will not start on the desktop.
> Have reloaded Windows, reloaded system files, but no luck.
> Any ideas ?
anonymous@discussions.microsoft.com - 19 Apr 2004 14:14 GMT
>-----Original Message-----
>Extract a new copy of RUNDLL32.EXE from either your
Thanks glee,
Tried all the things, but unfortunatly, still in the same
boat. Also i cannot shut down in the normal way.
I have to do a ctrl, alt, del. then "shut down".
Spent the weekend doing this, very frustrating.
Any other thoughts ?
Neil
glee - 19 Apr 2004 18:41 GMT
Did CWShredder find and fix anything?
Ad-Aware? SpyBot?
What did the folks in the spyware forums find, if anything, in your Hijack This logs?

Signature
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm
> >-----Original Message-----
> >Extract a new copy of RUNDLL32.EXE from either your
[quoted text clipped - 5 lines]
> Any other thoughts ?
> Neil
CWSredder found nothing.
Ad-Aware found 66 items.
SpyBot found some, mainly e-bay
No replies from spywareinfo.com yet for Hijack
But i think its a virus in msupdate.exe
Neil
>>.
glee - 20 Apr 2004 03:20 GMT
Since I haven't seen your Hijack This logs, I can't say what is going on, but....
if you have a file named msupdate.exe on your system, see here:
Symantec Security Response - W32.Protoride.Worm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.protoride.worm.html

Signature
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm
> CWSredder found nothing.
> Ad-Aware found 66 items.
[quoted text clipped - 3 lines]
> Neil
> >>.
anonymous@discussions.microsoft.com - 20 Apr 2004 19:03 GMT
>.
>All seems to be running now.
Still getting a virus in winocx32.exe though.
The original virus seemed to change the encryption
in ie to 40 bit from 128
Reloaded ie now all ok
Thanks for your help
Hugh Candlin - 20 Apr 2004 19:24 GMT
> >.
> >All seems to be running now.
> Still getting a virus in winocx32.exe though.
That is indicative of w32.protoride.worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.protoride.worm.html
glee - 20 Apr 2004 19:41 GMT
Have you correctly removed the virus yet??
Symantec Security Response - W32.Protoride.Worm:
http://securityresponse.symantec.com/avcenter/venc/data/w32.protoride.worm.html

Signature
Glen Ventura, MS MVP W95/98 Systems
http://dts-l.org/goodpost.htm
> >.
> >All seems to be running now.
[quoted text clipped - 3 lines]
> Reloaded ie now all ok
> Thanks for your help
anonymous@discussions.microsoft.com - 21 Apr 2004 03:07 GMT
>-----Original Message-----
>>.
yes got rid of the virus.
computer running better than its ever done before.