what is this file C:windowsDzexaluxoc.dll

[kalyanaraman s.]

i have been cleaning up my system and post clean-up, i do get an error
message "Cannot find the file C:\windows\Dzexaluxoc.dll; Module will not be
loaded". I do not know what this file does or what this module is all about !

I have tried finding it from another system that does not have such problem
and
still I am none the wiser. Any assistance would be greatly appreciated.

Cheers

Regards
Kalyanaraman S.

[nass]

"Kalyanaraman S." wrote:

> i have been cleaning up my system and post clean-up, i do get an error
> message "Cannot find the file C:\windows\Dzexaluxoc.dll; Module will not be
> loaded". I do not know what this file does or what this module is all about !
>
> I have tried finding it from another system that does not have such problem
> and
> still I am none the wiser. Any assistance would be greatly appreciated.
>
> Cheers
>
> Regards
> Kalyanaraman S.


This is a Viral malware acting as backdoor for a Trojan!

You can look into your Windows Explorer and right click it to see the
properties of that file.

Go through these Cleaning steps:
1... Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .

Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.

Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superan ... vspro.html

Run a scan from here on-line:
http://security.symantec.com/sscv6/defa ... &venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (off-line scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html

You can download this tool "AutoRuns for Windows"
http://technet.microsoft.com/en-us/sysi ... 63902.aspx
And remove the entry from here:

Locate this key:
[-]HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run = look in
the right pane/window and remove the entry for it
"C:\Windows\Dzexaluxoc.dll"

Run disk clean up then this command:
sfc /scannow

HTH,
nass

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^ http://www.nasstec.co.uk ^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

[r. mccarty]

It's not a standard component of Windows. If it were, then Windows
File Protection would automatically install a replacement. It's likely a
remnant startup call from some form of Malware. You can download
and install AutoRuns to locate where the start call is being made from.
http://technet.microsoft.com/en-us/sysi ... 63902.aspx
*The other tip-off that it's "Bogus" is it's file location. Windows does
not normally store Dynamic Link Libraries in the \Windows path.

"Kalyanaraman S." <KalyanaramanS@discussions.microsoft.com> wrote in message
news:B6A289AD-EAC3-4C43-8535-B6C843ADD74C@microsoft.com...
>i have been cleaning up my system and post clean-up, i do get an error
> message "Cannot find the file C:\windows\Dzexaluxoc.dll; Module will not
> be
> loaded". I do not know what this file does or what this module is all
> about !
>
> I have tried finding it from another system that does not have such
> problem
> and
> still I am none the wiser. Any assistance would be greatly appreciated.
>
> Cheers
>
> Regards
> Kalyanaraman S.

[pa bear [ms mvp]]

You are seeing the affects of a hijackware infection!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwa ... fault.mspx

NB: Run the FULL scan, not the QUICK scan!

2. WinXP ONLY!! => Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/pag ... ng_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachines ... board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://www.dslreports.com/forum/cleanup, http://aumha.net/viewforum.php?f=30
or other appropriate forums.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Kalyanaraman S. wrote:
> i have been cleaning up my system and post clean-up, i do get an error
> message "Cannot find the file C:\windows\Dzexaluxoc.dll; Module will not
> be
> loaded". I do not know what this file does or what this module is all
> about
> !
>
> I have tried finding it from another system that does not have such
> problem
> and
> still I am none the wiser. Any assistance would be greatly appreciated.
>
> Cheers
>
> Regards
> Kalyanaraman S.

[nass]

Hi Cop,
It's not always the case, you can use the Linker to access other
applications for other developers on the OS even without having a complete
program written.
The Dynamically linked libraries as the name say a linker to an application
which the OS on boot UP read these DLLs and make the Programs/APPs ready to
be used after a boot up.

Improving Application Startup Time
http://msdn.microsoft.com/en-us/magazine/cc163655.aspx
<Q::>
Think in Terms of Scenarios Scenarios can help you focus on what is really
important. For instance, if you are designing a component that will be used
at startup, it is likely that the component will be called only once (when
the app starts). From a performance point of view you want to minimize the
use of external resources, such as network or disk, because they are likely
to be a bottleneck. If you don't take into account that the component will be
used at startup, you could spend time optimizing code paths without seeing
any significant improvement. The reason is that most of the startup time will
be spent loading DLLs or reading configuration files.
</Q::>

In the "OP" case the Process been terminated by the AV and still some linker
left on the start up and in the regitry need a manual interfention!

If it in the Winlogon, it means the machine is dead!!!
The OP will not be able to clean from inside windows as the Viral infection
install itself as Admin with FUll control on the machine. In some scenario if
the COde is destructive there is no way to clean the machine, the only way is
clean install and in some cases the malicious creater can go beyond that and
write OFF the HDD ( destroy the secotrs of the HDD).



"SPAMCOP User" wrote:

> Nass,
>
> If the file is in the run key then it will be started with Rundll32.exe
> otherwise it wouldn't do anything. If it's plugged in to the registry then
> it will be in the Winlogon key not run & will require explorer.
>
> --
> SPAMCOP User
>
>
>
> "nass" <nass@discussions.microsoft.com> wrote in message
> news:F252DAD4-8250-450D-8D58-58A1E77E49B2@microsoft.com...
> >
> >
> > "Kalyanaraman S." wrote:
> >
> >> i have been cleaning up my system and post clean-up, i do get an error
> >> message "Cannot find the file C:\windows\Dzexaluxoc.dll; Module will not
> >> be
> >> loaded". I do not know what this file does or what this module is all
> >> about !
> >>
> >> I have tried finding it from another system that does not have such
> >> problem
> >> and
> >> still I am none the wiser. Any assistance would be greatly appreciated.
> >>
> >> Cheers
> >>
> >> Regards
> >> Kalyanaraman S.
> >
> >
> > This is a Viral malware acting as backdoor for a Trojan!
> >
> > You can look into your Windows Explorer and right click it to see the
> > properties of that file.
> >
> > Go through these Cleaning steps:
> > 1... Click start >> Control Panel >> Double Click Network and Internet
> > Connections >> Double click Internet Options, on the IE Properties window
> > you will see these Options:
> > General | Security | Privacy | Content | Connections | Programs
> > | Advanced .
> >
> > Click on General Tab (1st Tab on the left) and you will see a Button
> > called
> > [ Clear History ..] click on it to clear your History caches, then click
> > on
> > [Delete Files..] to delete Internet Files created over the time, click on
> > [
> > Delete Cookies...] to delete your cookies left by visiting websites.
> >
> > Then click on Advanced tab and scroll down to under the Browsing Option:
> > [&] Browsing
> > [ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
> > = Then try to Disable the Add-Ons on your Browser somehow installed on
> > your
> > browser, On how to disable the Add-ons follow this:
> > Click on Programs Tab and then click the Manage Add-Ons Button there
> > Disable
> > the Non/Not Verified Plug-ins/Add-ons ( you need to Renable them
> > one-by-one
> > later and see which is the culprit .
> > How to manage Add-Ons:
> > http://support.microsoft.com/kb/883256
> > Scan for malware from here:
> > SuperAntispyware - Free
> > http://www.superantispyware.com/superan ... vspro.html
> >
> > Run a scan from here on-line:
> > http://security.symantec.com/sscv6/defa ... &venid=sym
> > http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
> > Download Avast Cleaner (off-line scanner) from here:
> > http://www.avast.com/eng/avast-virus-cleaner.html
> >
> > You can download this tool "AutoRuns for Windows"
> > http://technet.microsoft.com/en-us/sysi ... 63902.aspx
> > And remove the entry from here:
> >
> > Locate this key:
> > [-]HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run = look
> > in
> > the right pane/window and remove the entry for it
> > "C:\Windows\Dzexaluxoc.dll"
> >
> > Run disk clean up then this command:
> > sfc /scannow
> >
> > HTH,
> > nass
> >
> > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> > ^^^ http://www.nasstec.co.uk ^^^^^^^^^^^^^^
> > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>
>