Hi, Ken Here's an entry for the WAG sweepstakes. You didn't say what the user is trying to run, but take a look at the file/folder names.
"mfcmapserv" appears to be part of the Microsoft Foundation Classes, and as such could be part of almost any software package. The 'Pad' and 'ARM' in the dll name mean to me that its function has to do with a pad/tablet application on an ARM processor, which is the one used in smart phones and tablets. Now comes the guesswork: user is running an app that is attempting to be runnable on portable devices. When you run it, it checks something that tells it you're on a regular PC and ignores HandlerPadARM. When the user runs it, it can't find the identifier because the user doesn't have permission for it, so decides that it's running on a portable device rather than a PC, and tries to initialize HandlerPadARM. Far-fetched, yes, but kind of possible. What is the app, anyway? Dan On 04/06/12 08:18, Ken Dibble wrote: > This appears to be malware of some sort. > > I have an XP machine, restricted user. When s/he logs in she gets a Windows > error message indicating that an attempt by rundll.exe to start something > called HandlerPadARM.dll has failed because the module can't be located. > > This dll is allegedly in ..\[User Name]\Local Settings\Application > Data\mfcmapserv\ > > There is no such dll in that location. In fact, ..\mfcmapserv\ does not exist. _______________________________________________ Post Messages to: [email protected] Subscription Maintenance: http://leafe.com/mailman/listinfo/profox OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/[email protected] ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

