XP2 Shutdown Message
in [Windows XP]
|
Prev: Updates
Next: Opening WXP
From: Pegasus [MVP] on 13 Jun 2010 17:42 "OREALLY" <oreally(a)comcast.net> wrote in message news:OXu$Q1yCLHA.5476(a)TK2MSFTNGP06.phx.gbl... > Apparently this happens about 50% of the time........so I'm not sure if a > Safe Mode shutdown would indicate the problem. This thread is getting a little off the tracks. When you post a question then it is best to post *all* relevant information. In your initial post you said nothing about 50% - you said "When I shutdown my XP2 computer", without any qualification. About Safe Mode: If it happens in Normal Mode only then there is a high probability that some third-party agent is responsible for the problem. Since you still haven't told us about Safe Mode, we don't really know.
From: OREALLY on 15 Jun 2010 14:25 there is no dll.exe showing up in a complete search of the drive. The problem does not seem to occur when shutting down frm Safe Mode! "Peter" <nospam(a)nospam.com> wrote in message news:hv3bkn$7ri$1(a)speranza.aioe.org... > OREALLY wrote: >> >> When I shutdown my XP2 computer I get a message that dll.exe is closing. >> But it just keeps repeating the message, even if I manually 'end >> program.' >> I can only shut down by pressing and holding the power button. >> >> Any help appreciated. >> >> Oreally > > And you've searched your computer for "dll.exe" to see what it's > associated with? Is it listed in MSCONFIG? > > -- > Peter
From: OREALLY on 15 Jun 2010 14:27 No sign of Dll.exe in a complete search... nor in msconfig no shutdown problem in Safe Mode! Oreally "Peter" <nospam(a)nospam.com> wrote in message news:hv3bkn$7ri$1(a)speranza.aioe.org... > OREALLY wrote: >> >> When I shutdown my XP2 computer I get a message that dll.exe is closing. >> But it just keeps repeating the message, even if I manually 'end >> program.' >> I can only shut down by pressing and holding the power button. >> >> Any help appreciated. >> >> Oreally > > And you've searched your computer for "dll.exe" to see what it's > associated with? Is it listed in MSCONFIG? > > -- > Peter
From: Elmo on 15 Jun 2010 15:10 OREALLY wrote: > No sign of Dll.exe in a complete search... nor in msconfig > > no shutdown problem in Safe Mode! > > Oreally > > > > "Peter" <nospam(a)nospam.com> wrote in message > news:hv3bkn$7ri$1(a)speranza.aioe.org... >> OREALLY wrote: >>> >>> When I shutdown my XP2 computer I get a message that dll.exe is closing. >>> But it just keeps repeating the message, even if I manually 'end >>> program.' >>> I can only shut down by pressing and holding the power button. >>> >>> Any help appreciated. >>> >>> Oreally >> >> And you've searched your computer for "dll.exe" to see what it's >> associated with? Is it listed in MSCONFIG? Both Rundll.exe and Rundll32.exe are legitimate Windows programs. Could one of those have been the name of the file in the error message? If not, maybe you're infected. If you have a rootkit, it could use interrupts to prevent your seeing its file, dll.exe. Usually the same interrupts would block the error message you received too. But maybe this (supposed) malware can't handle shutdown sequences seamlessly. A Knoppix Live CD can circumvent rootkits, and other malware since the hard drive isn't used except for the malware checks. Usually, after running one of these, Malwarebytes and a scan by your current a/v software will catch other nasties while they're not being overridden by the malware. Download this Avira Antivir Rescue System program which will burn a CD image to a blank CD. It's updated a few times per day. Insert the CD into the damaged machine and let it do a scan of your system. Before starting the scan, select "Configuration" and set to repair or rename the infected files. Sometimes your machine won't restart after such a repair process, so you might want to save needed files to another system before using this. If you can't, then you can move the hard drive to another machine to copy needed files. You can do that before, or after this scan. http://www.free-av.com/en/tools/12/avira_antivir_rescue_system.html Then run these: Malwarebytes© Corporation http://www.malwarebytes.org/mbam/program/mbam-setup.exe SuperAntispyware http://www.superantispyware.com/superantispywarefreevspro.html AVG now has a Rescue CD that's free. They also have a free USB download that should work on newer systems that can boot from a USB device. Get them here: http://www.avg.com/us-en/avg-rescue-cd You can try some of the CD's mentioned at the following site. BitDefender was my favorite, but if the infected machine can't connect to the internet to get updates, Avira comes with current virus definitions. Also, some of these just won't run on some systems, perhaps because there's no drivers available for some system devices, motherboard, graphics card, etc. So try a few of these till you find one that works: Burn BitDefender, or another program listed at the link below, to a CD (using a working machine) and test the infected machine with it. BitDefender also has a Rootkit checker on the Linux Desktop; run it if you think that's the problem: http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/ Download the executable rather than the .iso image, if one is available, (though no .exe is available for BitDefender). After the scan is run, if you elect to quarantine files, they're quarantined to RAM and lost after you reboot. You'll need to copy any quarantined files to the hard drive, a thumb drive or elsewhere before exiting. -- Joe =o)
From: Pegasus [MVP] on 15 Jun 2010 18:38
"OREALLY" <oreally(a)comcast.net> wrote in message news:#nrqkhLDLHA.1368(a)TK2MSFTNGP06.phx.gbl... > No sign of Dll.exe in a complete search... nor in msconfig > > no shutdown problem in Safe Mode! > > Oreally > Getting a little closer. Since the problem occurs in Normal Mode only, it is likely to be caused by something that loads in Normal Mode but not in Safe Mode. It is most likely a residue of some malware/virus infection that your virus scanner dealt with. Run msconfig.exe, then selectively untick tasks under the Startup tab until you find the culprit. Regardless of what you untick, Windows will still start. However, it is best to disconnect your machine from the Internet while performing the search. |