I've been having some issues lately with my wife's computer intermittently typing backwards, literally. Not a RTL/LTR issue. Restarting would fix the problem and then it would later re-emerge. A few days ago after restarting my wife noticed that the computer was unresponsive. She would try to open a file and it would just hang. I noticed that any activity with Explorer such as browsing files, opening files etc would cause the system to hang and then explorer.exe would become unresponsive. I opened the process manager and found that rundll32.exe was in the process list. I've never noticed it before and my understanding it shouldn't be running for a long period of time. When I killed the process all the Explorer windows we tried opening from before, along with some programs started popping up on the screen and everything was working fine. On restart the rundll32.exe again popped up and same issues. Killing the process again restored responsiveness of computer. I ran Norton Complete Scan and it found nothing more than a tracking cookie which I had it remove. I ran hijack and looked through the log and found C:\WINDOWS\Network Diagnostic\xpnetdiag.exe in the log file and did a search on it. I found a post by somebody else that had the same issues and followed the steps to remove them. This can be found here: http://www.computing.net/answers/se... At the time the computer was typing backwards and after having HJT remove the two entries the computer started typing normally. I still have the issue with rundll32.exe. When I ran Norton I had killed the process, then tried running it again with rundll32.exe in the process tree after it didn't find anything. Norton wouldn't even open, so I had to kill it again. Both scans revealed nothing. Luckily HJT was able to run a scan with the rundll32.exe still in the process tree, though I don't know what dll it is accessing or why it is hanging. The location is in the System32 folder, which I believe is the correct folder for it to be running from. I have a HJT log from before the above steps were taken on the Network Diagnostics/xpnetdiag.exe removal. A log for after it was removed and the computer was restarted, but after rundll32.exe was killed and on after restart with no modifications to the processes (rundll32.exe still running). Please let me know which logs you would like me to post. I appreciate any help that anybody can offer as I am at the end of my options and knowledge in this area. Kind regards, michael