OREALLY wrote:
> No sign of Dll.exe in a complete search... nor in msconfig
>
> no shutdown problem in Safe Mode!
>
> Oreally
>
>
>
> "Peter" wrote in message
> news:hv3bkn$7ri$1@speranza.aioe.org...
>> OREALLY wrote:
>>>
>>> When I shutdown my XP2 computer I get a message that dll.exe is closing.
>>> But it just keeps repeating the message, even if I manually 'end
>>> program.'
>>> I can only shut down by pressing and holding the power button.
>>>
>>> Any help appreciated.
>>>
>>> Oreally
>>
>> And you've searched your computer for "dll.exe" to see what it's
>> associated with? Is it listed in MSCONFIG?
Both Rundll.exe and Rundll32.exe are legitimate Windows programs. Could
one of those have been the name of the file in the error message? If
not, maybe you're infected.
If you have a rootkit, it could use interrupts to prevent your seeing
its file, dll.exe. Usually the same interrupts would block the error
message you received too. But maybe this (supposed) malware can't
handle shutdown sequences seamlessly. A Knoppix Live CD can circumvent
rootkits, and other malware since the hard drive isn't used except for
the malware checks. Usually, after running one of these, Malwarebytes
and a scan by your current a/v software will catch other nasties while
they're not being overridden by the malware.
Download this Avira Antivir Rescue System program which will burn a CD
image to a blank CD. It's updated a few times per day. Insert the CD
into the damaged machine and let it do a scan of your system. Before
starting the scan, select "Configuration" and set to repair or rename
the infected files. Sometimes your machine won't restart after such a
repair process, so you might want to save needed files to another system
before using this. If you can't, then you can move the hard drive to
another machine to copy needed files. You can do that before, or after
this scan.
http://www.free-av.com/en/tools/12/avira_antivir_rescue_system.html
Then run these:
Malwarebytes© Corporation
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
SuperAntispyware
http://www.superantispyware.com/superantispywarefreevspro.html
AVG now has a Rescue CD that's free. They also have a free USB download
that should work on newer systems that can boot from a USB device. Get
them here:
http://www.avg.com/us-en/avg-rescue-cd
You can try some of the CD's mentioned at the following site.
BitDefender was my favorite, but if the infected machine can't connect
to the internet to get updates, Avira comes with current virus
definitions. Also, some of these just won't run on some systems,
perhaps because there's no drivers available for some system devices,
motherboard, graphics card, etc. So try a few of these till you find
one that works:
Burn BitDefender, or another program listed at the link below, to a CD
(using a working machine) and test the infected machine with it.
BitDefender also has a Rootkit checker on the Linux Desktop; run it if
you think that's the problem:
http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/
Download the executable rather than the .iso image, if one is available,
(though no .exe is available for BitDefender).
After the scan is run, if you elect to quarantine files, they're
quarantined to RAM and lost after you reboot. You'll need to copy any
quarantined files to the hard drive, a thumb drive or elsewhere before
exiting.
--
Joe =o)
