rundll help

I just started getting a popup screen on my desktop right after power
on. Below is what I see

__________________________________________________ ________________
RUNDLL

Error loading C:\DOCUME~1\ALLUSE~1\APPLIC~1\irr722.dss

The specified module could not be found.


__________________________________________________ _________________

I am assuming the it is looking for 'rundll' in a file /irr722.dss',
but there is no file irr722.dss on my system. How can I find out more
info on this problem. Everything else seems to be OK at this time.
TIA for any suggestions.

"Flash" wrote in message ...
I just started getting a popup screen on my desktop right after power
on. Below is what I see
__________________________________________________ ________________
RUNDLL
Error loading C:\DOCUME~1\ALLUSE~1\APPLIC~1\irr722.dss
The specified module could not be found.
__________________________________________________ ________

I am assuming the it is looking for 'rundll' in a file /irr722.dss',
but there is no file irr722.dss on my system. How can I find out more
info on this problem. Everything else seems to be OK at this time.
TIA for any suggestions.

Click "Start", "Run", type "msconfig" into the "Open" box and click "OK". Then click
on the "Startup" tab, press the plus key on the right side of the keyboard and the control
key simultaneously and look for something like
"rundll C:\DOCUME~1\ALLUSE~1\APPLIC~1\irr722.dss". You may have to press the
page down key several times to see all your startup programs. If you find it, uncheck it,
click "OK", then restart the computer to confirm that the correct entry has been removed.

Ben

From: "Flash"

I just started getting a popup screen on my desktop right after power on.
Below is what I see

__________________________________________________ ________________
RUNDLL

Error loading C:\DOCUME~1\ALLUSE~1\APPLIC~1\irr722.dss

The specified module could not be found.

__________________________________________________ _________________

I am assuming the it is looking for 'rundll' in a file /irr722.dss',
but there is no file irr722.dss on my system. How can I find out more
info on this problem. Everything else seems to be OK at this time.
TIA for any suggestions.

You wre infected with a WinLock Trojan, a type of ransomware. The file was
removed from the system but the loading point which uses DUNDLL32 to load
the DLL (in this case with a DSS extension) was not removed. Thus the
error.

You have to find the loading point that is used for
RUNDLL32 C:\DOCUME~1\ALLUSE~1\APPLIC~1\irr722.dss
and remove that from the Registry.

--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp

David H. Lipman wrote:
From: "Flash"

I just started getting a popup screen on my desktop right after power
on. Below is what I see

__________________________________________________ ________________
RUNDLL

Error loading C:\DOCUME~1\ALLUSE~1\APPLIC~1\irr722.dss

The specified module could not be found.

__________________________________________________ _________________

I am assuming the it is looking for 'rundll' in a file /irr722.dss',
but there is no file irr722.dss on my system. How can I find out more
info on this problem. Everything else seems to be OK at this time.
TIA for any suggestions.

You wre infected with a WinLock Trojan, a type of ransomware. The file
was removed from the system but the loading point which uses DUNDLL32 to
load the DLL (in this case with a DSS extension) was not removed. Thus
the error.

You have to find the loading point that is used for
RUNDLL32 C:\DOCUME~1\ALLUSE~1\APPLIC~1\irr722.dss
and remove that from the Registry.

David, you are right on about Winlock Trojan, I ran Maleware and it
found it and deleted it. I would like to find the loading point as you
suggest, however being somewhat a novice and a coward about the
registry, I would appreciate any further advice and direction, etc to
get me down this path. TIA

From: "Flash"


You wre infected with a WinLock Trojan, a type of ransomware. The file
was removed from the system but the loading point which uses DUNDLL32 to
load the DLL (in this case with a DSS extension) was not removed. Thus
the error.

You have to find the loading point that is used for
RUNDLL32 C:\DOCUME~1\ALLUSE~1\APPLIC~1\irr722.dss
and remove that from the Registry.

David, you are right on about Winlock Trojan, I ran Maleware and it found
it and deleted it. I would like to find the loading point as you
suggest, however being somewhat a novice and a coward about the registry,
I would appreciate any further advice and direction, etc to
get me down this path. TIA

Download Sysinternals AutoRuns

\\live.sysinternals.com\DavWWWRoot\autoruns.exe

or

http://technet.microsoft.com/en-us/s.../bb963902.aspx

It will scan all AutoLoad/AutoRun points.
Examine the report carefully and delete the line item referenced earlier in
this thread.

--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp

David H. Lipman wrote:
From: "Flash"


You wre infected with a WinLock Trojan, a type of ransomware. The
file was removed from the system but the loading point which uses
DUNDLL32 to load the DLL (in this case with a DSS extension) was not
removed. Thus the error.

You have to find the loading point that is used for
RUNDLL32 C:\DOCUME~1\ALLUSE~1\APPLIC~1\irr722.dss
and remove that from the Registry.

David, you are right on about Winlock Trojan, I ran Maleware and it
found it and deleted it. I would like to find the loading point as you
suggest, however being somewhat a novice and a coward about the
registry, I would appreciate any further advice and direction, etc to
get me down this path. TIA

Download Sysinternals AutoRuns

\\live.sysinternals.com\DavWWWRoot\autoruns.exe

or

http://technet.microsoft.com/en-us/s.../bb963902.aspx

It will scan all AutoLoad/AutoRun points.
Examine the report carefully and delete the line item referenced earlier
in this thread.

All I can say is thanks, you bailed me out again. It was some years ago.
I didn't delete the line item, just unchecked it for now and watch for a
few days. A side question on this program, I noticed several other line
items that said 'no file' or something to that effect found. Would it be
prudent to uncheck them also?

"David H. Lipman"

100% Right
Good Job

From: "Flash"

David H. Lipman wrote:
From: "Flash"


You wre infected with a WinLock Trojan, a type of ransomware. The file was removed
from the system but the loading point which uses DUNDLL32 to load the DLL (in this
case with a DSS extension) was not removed. Thus the error.

You have to find the loading point that is used for
RUNDLL32 C:\DOCUME~1\ALLUSE~1\APPLIC~1\irr722.dss
and remove that from the Registry.

David, you are right on about Winlock Trojan, I ran Maleware and it found it and
deleted it. I would like to find the loading point as you
suggest, however being somewhat a novice and a coward about the registry, I would
appreciate any further advice and direction, etc to
get me down this path. TIA

Download Sysinternals AutoRuns

\\live.sysinternals.com\DavWWWRoot\autoruns.exe

or

http://technet.microsoft.com/en-us/s.../bb963902.aspx

It will scan all AutoLoad/AutoRun points.
Examine the report carefully and delete the line item referenced earlier in this
thread.

All I can say is thanks, you bailed me out again. It was some years ago.
I didn't delete the line item, just unchecked it for now and watch for a few days. A
side question on this program, I noticed several other line items that said 'no file' or
something to that effect found. Would it be
prudent to uncheck them also?

Most likely,Yes.


--
Dave
Multi-AV Scanning Tool - http://multi-av.thespykiller.co.uk
http://www.pctipp.ch/downloads/dl/35905.asp