Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When one of our users logs onto a Windows Server 2008 R2 server with RDC, she receives the following 3 popups:

enter image description here

I can't find any mention of meray.dll, brape.dll or bryntb.dll on the web.

If I load msconfig on her RDC session, I can't see any mention of these in the Startup tab. Would some items be hidden? I loaded msconfig using my admin credentials.

How do we prevent these errors from opening on login?

share|improve this question
It looks like your server (or the user, rather) is compromised. Random .dll names are characteristic of malware trying to execute on your machine. – Nathan C Jan 23 '14 at 16:29
@NathanC: What should I do? Recreate the user account? – Steve Jan 24 '14 at 0:49
Start with that and see where that leads. – Nathan C Jan 24 '14 at 15:07

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.