Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hi,
I've recently come across a program on my Task Manager called rundl32.exe. I thought it might be a trojan because when I used "search" to find it and identify its properties, it didn't show up as being on my computer. I went back to my task window and highlighted rundl32.exe and ended the process. This took the program off of my task window, but I need to know if it is still on my computer. Could some tell me how to find it and delete it for good if it still exists?? Thanks so much!

If I were you I'd leave well alone if you do a search for rundll32.exe you wiil find it is being used and is apart of the Windows OS:
rundll32 - rundll32.exe - Process Information
Process File: rundll32 or rundll32.exe
Process Name: Rundll32
Description: Microsoft "Run a DLL as an App". RUNDLL32 is the Microsoft Windows program that loads DLLs into memory so that they can be used by specific programs or by Windows.
Company: Microsoft Corp.
System Process: Yes
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): No
Common Errors: N/AM

Note M's is "rundll32.exe" and not "rundl32.exe". So first make sure if your's is the one with 2 L's or 1 L....

Hi Lucid,
I had both rundll32 and rundl32. I left the program with 2 l's alone. Did I do something wrong by stopping rundl32.exe from my task manager? I was following instructions from Windows XP help because I've had so many problems with unsolicited porn programs running on my task manager everytime I go online. I've tried every kind of anti-virus, and spyware detecter imaginable, and it has still been happening.

Read about the file here:
To find out what each Startup(or Process) item does or means
Task List Programs

I've also just found IEXPLORE.exe on my task manager and I've never found that particular program running before....PLease, somebody explain to an ignorant, computer novice just what this is and could it be causing some of my previously aforementioned problems? Thanks!!!

JennyLee,
More and more viruses and malware are using variations of the valid RUNDLL32.exe file. They change it, rename it,, and generally screw up your PC. Try these programs and see if you find anything:-1. Mcafee's STINGER:-
vil.nai.com/vil/stinger/2. CWShredder:-
http://www.spywareinfo.com/~merijn/downloads.html
(read the instructions carefully with this program.)3. Ad-Aware:-
www.lavasoftusa.com/ (there will be many mirror download sites for this one. Make sure you UPDATE the reference file as soon as you have installed the progrma, and BEFORE you run it)4. Spywareblaster:-
www.javacoolsoftware.com/ (Make sure you UPDATE this program once installed. It sits resident on your PC and protects you from attack)5. SpywareGuard:-
www.javacoolsoftware.com/ (Same as 4. it also sits quietly and protects you from attacks)6. SpyBot Search and Destroy:-
www.safer-networking.org/index.php?page=download
(make sure you UPDATE this program once you have installed it and BEFORE you run it. Also, use the IMMUNIZE and Browser BLOCKER to further protect you)All these programs work fine alongside each other. SOme, like STINGER, might appear to freeze, which usually means it has found a virus in the RESTORE folders. To clean these folders, you must turn off the RESTORE function.
Finally, many people also use a neat program called HighjackThis, which hscans your PC for running processes and all the programs run at startup. many of these entries are malware on infected machines. However, be warned, HighjackThis produces a large log file and although there are many people who are becoming very adept at understanding the log and advising on what to delete and what to leave alone, most forums now will not entertain the posting of these logs. New forums are springing up with the specific purpose of posting HighjackThis logs. Try all the above first and see what nasties reveal themselves. Blast em away as necessary. If a PC is infected in a big way, it can take several attempts with combinations of the above programs to clean the system. Get back with your adventure. Oh, it goes without saying that you should also have a good virus scanner and firewall too.
Safe Computing...:o)

Download and install AdAware 6 then run it and delete anything it finds. It is free and available over the Web. Type in Google AdAware 6 and follow your pointer.
Also there is a program call Spybot that you would do well to download but read the instructions before you run it. Try AdAware 6 first as you can't go wrong. Check for updates for AdAware before you run it.
M

JennyLee,
IEXPLORE is a browser highjacker. You are definitely infected. Try all the things I have posted above. Ad-Aware will get rid of IEXPLORE. When you have given all the above items a try, get back and let's see what you have left..:o)Safe Computing..:o)

I ran a Norton virus scan and this is what is said:
C:\WINDOWS\rundll32.exe is infected with Trojan Horse
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\TI7NLAT6\counter[2].htm is infected with Trojan.Bookmarker.FNow, how do I get rid of it?
P.S. I do have Ad-Aware,CWShredder, Spywareblaster, SpyBot Search and Destroy. I run them all on a regular basis, but I guess I still had an infected file. Time for me to get better educated PC wise!

IEXPLORE.EXE is your web browser. If you open your task manager while you are on the internet then this will show up. If it is showing up and you are not on the internet then I would be worried about it. It will show up because it is a "running process" while it is open. Close internet explorer and open your task manager, see if it is still there. My bet is that it's not.
<<< What life deals you is not your choice. How you play your hand, is. >>>

JennyLee,
This virus is a new one. Norton has details on it. Go to this link, and read through the information it contains. You may have to remove this virus manually:-http://www.symantec.com/avcenter/venc/data/trojan.bookmarker.f.html
As for IEXPLORE.EXE, yes I am sorry, that is a valid Windows system file. I misread what you had posted and thought of the IEXPLORER.exe (note the R), which is virus infection...:o)
Safe COmputing...:o)

I have another problem. In my list of running processes, i have two times rundll32.exe. This is the first time this is there (i check it once and a while). when i end the process it doesn't go away.
So i can't end them. I think they are part of a dialer called instant access. But i already removed that program and the registry keys of it ( so normally it should be gone)

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |