>>I need to find the file(s) that needs RUNDLL32. exe

IF the files that are looking to be run from the RUNDLL command are legitamit system software files that actually got deleted, then yes you need to replace them.

BUT if the files that are looking to be run from the RUNDLL command are part of the spyware software, then you don't want to find the files, you want to make it stop trying to run those missing files in the first place.

(You've removed the "set house on fire" DLL card because you know it is bad, but someone keeps giving your husband the RUNDLL card with the blank line filled in "set house on fire"... so your husband comes to you each time scratching his head and whining "But I can't FIND the DLL card..." In this case you don't want to replace the bad DLL, you want to find out who keeps giving him that RUN card and smack them on the head... stop those cards coming and your husband will stop whining every time you boot him up )

Open up msconfig again and on the startup tab, expand the "command" column so you can see the full lines there (tip if you didn't know this... instead of dragging the line between the column borders to adjust the size, if you double-click right on that line the column will automatically expand or contract to just the right size to display the longest line in the list. This works for filenames in window lists too...)

Go down the list and look for ANYTHING that included the rundll32 command, and tell me the while line of the command including the dll it is calling. We still have to figure out if these dll's are being called directly on startup, or if some other program is starting up and calling these dlls.

Next thing I'm going to explain how to do a binary search. Simple concept, most efficient way to find something in a list, the same technique will almost guarantee you a win on "The Price Is Right" too.

------------------------------------
--http://www.idexter.com