Computing.Net > Forums > Windows XP > 10 rundll32.exe's running

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

10 rundll32.exe's running

Reply to Message Icon

Name: Ratiocinate
Date: December 26, 2003 at 15:59:13 Pacific
OS: WinXP Pro
CPU/Ram: P4 1.8 GHz/256 MB
Comment:

Whenever I hit Ctrl-Alt-Del to access the Windows task manager and go over to Processes, I notice that there are about 10 copies of rundll32.exe's running, all of them as a user process. I have run anti-virus and adware scanning software, and no problems have been detected. Is there a reason for concern? If so, how do I remedy the problem?

Thanks.



Sponsored Link
Ads by Google

Response Number 1
Name: Johnw
Date: December 26, 2003 at 16:20:35 Pacific
Reply:

I would be inclined to run more virus checks & hijack this .

=======================================

1st step , run a virus check from 1 or all of these .
Online Virus check ( free )
http://housecall.antivirus.com/
http://www.coledata.com/virusalert.htm
http://www.cybertechhelp.com/html/misc/av.php
http://www.pandasoftware.es/activescan/activescan-com.asp
http://www.ravantivirus.com/scan/
http://www.bitdefender.com/
http://www.stop-sign.com/

====================================

Here is the logfile check list .
http://hjt.wizardsofwebsites.com/
http://www.spywareinfo.com/bhos/
http://home01.wxs.nl/~kleyn080/BHO_list.html
http://www.spywareinfo.com/~merijn/htlogtutorial.html#r
http://www.computercops.biz/postt6393.html
http://www.google.com/search?q=spyware+list

You can identify bho's on your comp , with this .
http://www.spywareinfo.com/downloads/bhod/
BHODemon scans your Registry for BHOs, and presents any it finds in a list. By highlighting a
BHO in this list, and clicking the "Details" button, you can see information about this BHO,
and even disable it if you wish. BHOs are disabled by simply renaming the DLL that houses
them. By renaming the DLL, instead of deleting it, you have the option of enabling it later
if you wish. Why would you want to do that? Because the program that installed the BHO will
not run if it can't find the DLL: Go!Zilla, for example, won't run if you remove its BHOs.
Works on XP .

Or use hijackthis .
http://www.spywareinfo.com/~merijn/downloads.html
http://mjc1.com/mirror/hjt/

Next by clicking on List > F5 in BHOList , then after the latest list downloads , enter the found bho into Search , you can find if it is legitimate .
BHOList
http://www.spychecker.com/program/bholist.html
BHOList is a simple frontend for TonyKleins BHO Collection . It fetches the list of currently known BHOs (Browser Helper Objects) and allows you to search it . You can also filter the list to show all known BHOs that are installed in your browser . Each BHO entry is noted as Safe or Legitimate (at the descretion of the author). Useful tool for advanced users .
98/ME/2000/XP
What to do:
If you don't directly recognize a toolbar's name, use TonyK's Toolbar List to find it by the class ID (CLSID, the number between curly brackets) and see if it's good or bad. In the Toolbar List, 'X' means spyware and 'L' means safe.
If it's not on the list and the name seems a random string of characters and the file is somewhere in a folder named 'Application Data' (like the last one in the examples above), it's definitely bad, and you should have HijackThis fix it.

Remove Spyfiles by using these 5 programs .
Make sure you use the SpyBot/SpywareBlaster/Ad-aware/Bazooka/Swat It > Online > Update button regularly .
Once you have the program installed , open SpyBot and select the "Immunize" icon on the left & Click on Immunize , in the new page .
Then check the box "lock hosts file read-only as protection against hijackers".

http://beam.to/spybotsd
http://www.wilderssecurity.com/spywareblaster.html
http://www.lsfileserv.com/
http://www.lavasoftsupport.com/index.php?showtopic=11613
Bazooka
http://www.kephyr.com/spywarescanner/index.html
Swat It
http://swatit.org/

Bazooka
http://www.winsite.com/bin/Info?17000000037943
http://www.kephyr.com/spywarescanner/index.html
Bazooka Adware and Spyware Scanner detects a multitude of spyware, adware, trojan, keylogger and trackware components; sources of irritation that antivirus software does not deal with. The scanning process will only take a fraction of a second and tell you how to uninstall the invasive spyware or put you in contact with the spyware developer for the most up-to-date and safe uninstall instructions.

Spyware and adware is often bundled with software such as Kazaa, Morpheus, Grokster, Imesh, Xolox, Gnutella and a myriad of other programs, and in many cases installed without your knowledge. Some send information about your surfing habits to ad companies, which target you with popup ads that fit your preferences.

Bazooka Adware and Spyware Scanner search for Gator, GAIN, Bargain Buddy, CommonName, FlashTrack, IPInsight, n-CASE, NetRatings, NewDotNet, SaveNow, Wurldmedia, etc. The complete list is available here. To stay up-to-date with the latest spyware and adware software Bazooka downloads the threat definitions from the web.

Bazooka is freeware and Windows 95/98/ME/NT/2000/XP compatible.

Click on the files found & you will be taken to a site that will show you how to remove , either with a program or manually .

It reports on all drives & partitions , so remember to check all these , when doing manual remove .

After the Download - It is important to remember that once the installation of Bazooka is completed , that you should update the File Signatures by clicking on the Update tab and check for an update .
Make sure you Update regularly .

Spyware and Adware Encyclopedia
http://www.kephyr.com/spywarescanner/library/index.phtml?source=bassindex

====================================

Swat It
http://swatit.org/
Swat It is a Completely FREE program that scans your files for Trojans, Worms, Bots and other Hacker programs. Swat It can detect and remove over 4000 different Trojan programs plus variants. Swat It was recently independently tested against popular commercial scanning software and we were absolutely delighted by the results.

We try our utmost to keep our software more up to date and current than other similar software. The comparison results strongly indicated Swat It's ability to detect and remove the latest Trojans that are in circulation.

After the Download - It is important to remember that once the installation of Swat It is completed, that you should update the File Signatures by clicking on the Update tab and check for an update. All Product and File Signature Updates are Totally FREE, this means that you will never have to pay a single penny to get the very latest version of Swat It or to update the File Signatures.



0
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home


Sponsored links

Ads by Google


Results for: 10 rundll32.exe's running

rundll32.exe about 20 times www.computing.net/answers/windows-xp/rundll32exe-about-20-times/82774.html

cannot run exe's www.computing.net/answers/windows-xp/cannot-run-exes/74267.html

OUTLOOK.EXE running Wild www.computing.net/answers/windows-xp/outlookexe-running-wild/98441.html