Ntdll.dll

[Xtreme]

Hello. I have a problem with this file on my computer, in
fact, I hate this file.. Its always causing errors,
mainly in the program explorer.exe.. Whenever I minimize
my media player, it always causes an error, but only
about 50% of the time... I am wondering HOW I can get a
new version of this file, or help with this problem!
Here is a copy of just one of the many errrors it makes,
this is out of my error log...
"Faulting application explorer.exe, version
6.0.2800.1221, faulting module ntdll.dll, version
5.1.2600.1217, fault address 0x00007ec6."
CAN ANYONE HELP WITH THIS PROBLEM? PLEASE EMAIL ME with
help if you can. Thank you very much.

[PA Bear]

NTDLL.DLL, aka Winshow
http://www.doxdesk.com/parasite/Winshow.html

Check your system for "hijackware":

Dealing with Hijackware
http://mvps.org/winhelp2002/unwanted.htm
http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
http://aumha.org/a/parasite.htm

CoolWebSearch Chronicles
http://www.merijn.org/cwschronicles.html

You *must* seek updates for Ad-Aware, Spybot, etc., before each and every
use, even "right out of the box". But even then, they can't catch
everything. When all else fails, HijackThis
(http://www.merijn.org/files/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your files to http://forums.spywareinfo.com/ or the Spyware forum at
http://forum.aumha.org/ for expert analysis, not here.**

Also update your virus definitions and then run a full system scan. From
now on, do both daily.

[Many anti-spyware sites continue to suffer from a week-long DoS attack.
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page: http://aumha.org/a/parasite.htm.]

So How Did I Get Infected Anyway?
http://boards.cexx.org/viewtopic.php?t=957
--
HTH...Please post back to this thread

~Robear Dyer (aka PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.mvps.org/

Protect Your PC
http://www.microsoft.com/security/protect

Xtreme wrote:
> Hello. I have a problem with this file on my computer, in
> fact, I hate this file.. Its always causing errors,
> mainly in the program explorer.exe.. Whenever I minimize
> my media player, it always causes an error, but only
> about 50% of the time... I am wondering HOW I can get a
> new version of this file, or help with this problem!
> Here is a copy of just one of the many errrors it makes,
> this is out of my error log...
> "Faulting application explorer.exe, version
> 6.0.2800.1221, faulting module ntdll.dll, version
> 5.1.2600.1217, fault address 0x00007ec6."
> CAN ANYONE HELP WITH THIS PROBLEM? PLEASE EMAIL ME with
> help if you can. Thank you very much.

[Jeff N.]

Thanks for the info. I fought that same problem on another system with
absolutely no luck. I threw everything I could at it, but nothing worked to
resolve it. Hijack this found some suspicious entries, but not being my
system, I didn't want to open up a can of worms deleting the unknown. As
lax as they are about security and protection, I'm sure I'll have the box
back in little time where I can try some of these other possible
resoloutions in which I found little on extensive searches.

PA Bear wrote:
> NTDLL.DLL, aka Winshow
> http://www.doxdesk.com/parasite/Winshow.html
>
> Check your system for "hijackware":
>
> Dealing with Hijackware
> http://mvps.org/winhelp2002/unwanted.htm
> http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
> http://aumha.org/a/parasite.htm
>
> CoolWebSearch Chronicles
> http://www.merijn.org/cwschronicles.html
>
> You *must* seek updates for Ad-Aware, Spybot, etc., before each and
> every use, even "right out of the box". But even then, they can't
> catch everything. When all else fails, HijackThis
> (http://www.merijn.org/files/hijackthis.zip) is the preferred tool to
> use. It will help you to both identify and remove any
> hijackware/spyware. **Post your files to
> http://forums.spywareinfo.com/ or the Spyware forum at
> http://forum.aumha.org/ for expert analysis, not here.**
>
> Also update your virus definitions and then run a full system scan.
> From now on, do both daily.
>
> [Many anti-spyware sites continue to suffer from a week-long DoS
> attack. Alternative download pages for Ad-Aware, Spybot, HijackThis
> and CWShredder may be found on this page:
> http://aumha.org/a/parasite.htm.]
>
> So How Did I Get Infected Anyway?
> http://boards.cexx.org/viewtopic.php?t=957
>
> Xtreme wrote:
>> Hello. I have a problem with this file on my computer, in
>> fact, I hate this file.. Its always causing errors,
>> mainly in the program explorer.exe.. Whenever I minimize
>> my media player, it always causes an error, but only
>> about 50% of the time... I am wondering HOW I can get a
>> new version of this file, or help with this problem!
>> Here is a copy of just one of the many errrors it makes,
>> this is out of my error log...
>> "Faulting application explorer.exe, version
>> 6.0.2800.1221, faulting module ntdll.dll, version
>> 5.1.2600.1217, fault address 0x00007ec6."
>> CAN ANYONE HELP WITH THIS PROBLEM? PLEASE EMAIL ME with
>> help if you can. Thank you very much.

[PA Bear]

HijackThis isn't something to be used like Ad-Aware or Spybot. IOW don't
let HT fix anything without first checking with the experts by posting youe
log to an appropriate forum.
--
~PA Bear

Order the Windows Security Update CD
http://www.microsoft.com/security/protect/cd/order.asp

Jeff N. wrote:
> Thanks for the info. I fought that same problem on another system with
> absolutely no luck. I threw everything I could at it, but nothing worked
> to resolve it. Hijack this found some suspicious entries, but not being
> my system, I didn't want to open up a can of worms deleting the unknown.
> As lax as they are about security and protection, I'm sure I'll have the
> box back in little time where I can try some of these other possible
> resoloutions in which I found little on extensive searches.
>
> PA Bear wrote:
>> NTDLL.DLL, aka Winshow
>> http://www.doxdesk.com/parasite/Winshow.html
>>
>> Check your system for "hijackware":
>>
>> Dealing with Hijackware
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://www.mvps.org/inetexplorer/Darnit.htm#tshoot
>> http://aumha.org/a/parasite.htm
>>
>> CoolWebSearch Chronicles
>> http://www.merijn.org/cwschronicles.html
>>
>> You *must* seek updates for Ad-Aware, Spybot, etc., before each and
>> every use, even "right out of the box". But even then, they can't
>> catch everything. When all else fails, HijackThis
>> (http://www.merijn.org/files/hijackthis.zip) is the preferred tool to
>> use. It will help you to both identify and remove any
>> hijackware/spyware. **Post your files to
>> http://forums.spywareinfo.com/ or the Spyware forum at
>> http://forum.aumha.org/ for expert analysis, not here.**
>>
>> Also update your virus definitions and then run a full system scan.
>> From now on, do both daily.
>>
>> [Many anti-spyware sites continue to suffer from a week-long DoS
>> attack. Alternative download pages for Ad-Aware, Spybot, HijackThis
>> and CWShredder may be found on this page:
>> http://aumha.org/a/parasite.htm.]
>>
>> So How Did I Get Infected Anyway?
>> http://boards.cexx.org/viewtopic.php?t=957
>>
>> Xtreme wrote:
>>> Hello. I have a problem with this file on my computer, in
>>> fact, I hate this file.. Its always causing errors,
>>> mainly in the program explorer.exe.. Whenever I minimize
>>> my media player, it always causes an error, but only
>>> about 50% of the time... I am wondering HOW I can get a
>>> new version of this file, or help with this problem!
>>> Here is a copy of just one of the many errrors it makes,
>>> this is out of my error log...
>>> "Faulting application explorer.exe, version
>>> 6.0.2800.1221, faulting module ntdll.dll, version
>>> 5.1.2600.1217, fault address 0x00007ec6."
>>> CAN ANYONE HELP WITH THIS PROBLEM? PLEASE EMAIL ME with
>>> help if you can. Thank you very much.