Log On Freezes DLL errors winlogon error

  • Thread starter Thread starter Dell8600
  • Start date Start date
D

Dell8600

I am receiving 3 error messages when I log on (winXP)--
1. run a DLL as an APP has encountered a problem, needs
to close
2. RUNDLL. An exception occurred while trying to run
c:\windows\system32\6004svcdll"UMonitor"
3. winlogon.exe - Ap Error. The instruction
at "0x10017ef4" referenced memory at "0x01320000". The
memory could not be "read".

If I close the windows, the system freezes and I have to
do a hard shutdown and reboot... (I've run Norton, and
Spy Sweeper--. No issues. If I leave these windows open
I can get to the browser and use it and I can acccess
Outlook).

This error just appeared this a.m. after leaving computer
on all night...

Thanks for any insights..
Dell8600
 
2. RUNDLL. An exception occurred while trying to run
c:\windows\system32\6004svcdll"UMonitor"
3. winlogon.exe - Ap Error.
Click to expand...

The Umonitor error on reboot, and the 69.20.16.183 in host file virus/s
have been driving me crazy. I am not sure if this is two infections or
from the same source.

There are many posts in last few days on some boards with no real
solution yet and no spyware or virus programs detect it.

I have never before caught a virus, and I go back to usenet with packet
readers and 120 bps speeds - that is without the k, 120 not 120k!

To see if they are related if you are getting the UMonitor error on
reboot is IE periodically going to a search page you have never heard
of and sometimes to "you have a virus" sites which actually spread more
nasty stuff?

If so, check your hosts file and see if there are entries that read:
69.20.16.183 ieautoserach
69.20.16.183 auto.search.msn.com and may be others.

If you delete the entries, even in safe mode, they immediately come
back. It seems there are .dll files in the Systems 32 directory that
change name with every reboot to random names and can't be deleted
causing it. There is also a LHS? process running (Layered something
related to winsock)

I have done many things recommended on other boards, especially related
to the hijackthis tool that finds all the bad processes running that
you can't see via the usual windows task managers, but none have
worked.

For awhile I got rid of the Umonitor issue on reboot, but still had the
hosts file problem resulting in IE going to various sites by itself
even though I don't use IE as my default browser it gets activated.
Now I've got both again after extensive safe mode and hijackthis
proposed solutions.

I also had frequent unintended reboots, which happened when I had any
spyware or virus software running. I can always get a forced auto
reboot if I run checks with them probably when they hit the bad file.
If I turn off all spyware and virus monitoring I don't get reboots, but
get IE opening periodically and going to "bad" sites. And till get the
UMonitor error on reboot.

So far I have not seen anything that sounds like this on the various
virus sites, but from the number of posts on some web discussion
boards, it seems to be spreading fast both in the U.S. and Europe.

Very frustrating and I am wasting so much time over what some probably
kid dreamed up to make life so difficult on the Internet!
 
Back
Top