[RESOLVED] UnLoad dll's

[dark_shadow]

hi guys i've got this spyware dll that hooks itself into explorer.exe and winlogon.exe. when i boot it in safe mode explorer.exe dosent even start i bleieve that this is due to the dll starting up i nthe master boot sector...also i tried using a boot disk but when i tried to delete the dll it says its not found . the only thing i can think of trying is to find a prog that will allow me to unload dll's i've had one a while ago but i cant remeber the name .. any ideas on a prog that might help ?

[dglienna]

Try a registry cleaner, and running System File Checker (just type SFC from a command prompt) It may prompt you for the OS CD if it finds a messed up file.
You could also run MSCONFIG and tell it to do a selective start, loading only Microsoft processes.

[visualAd]

Do you know the name of the dell? If so, you can still run the command prompt when explorer is dead by pressing Ctrl-Alt-Del, going to task manager, selecting File->Run and typing cmd.

From cmd use the cd to navigate to the directory containing the dll and rename it:

C> cd \windows\system32
C> rename bad_dll.dll bad_dll.txt
C> explorer

Its important that explorer is closed at this point because if it shares the process space with the dll then you will not be able to delete it. Make sure also that you rename the dll and not delete it just in case it makes things worse. If all works well after, you can then safely delete it.

[dark_shadow]

i fixed it bu running a bunch of things i found on other forums ... and the dll was hooked in both winlogon.exe and explorer so even with explorer closed i still couldnt rename or delete it