Computing.Net > Forums > Windows XP > Getting rid of rundl32.exe

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Getting rid of rundl32.exe

Reply to Message Icon

Name: jennylee
Date: March 7, 2004 at 09:15:55 Pacific
OS: Windows XP Home
CPU/Ram: 56
Comment:

Hi,
I've recently come across a program on my Task Manager called rundl32.exe. I thought it might be a trojan because when I used "search" to find it and identify its properties, it didn't show up as being on my computer. I went back to my task window and highlighted rundl32.exe and ended the process. This took the program off of my task window, but I need to know if it is still on my computer. Could some tell me how to find it and delete it for good if it still exists?? Thanks so much!



Sponsored Link
Ads by Google

Response Number 1
Name: Mark Long
Date: March 7, 2004 at 09:33:31 Pacific
Reply:

If I were you I'd leave well alone if you do a search for rundll32.exe you wiil find it is being used and is apart of the Windows OS:

rundll32 - rundll32.exe - Process Information

Process File: rundll32 or rundll32.exe
Process Name: Rundll32
Description: Microsoft "Run a DLL as an App". RUNDLL32 is the Microsoft Windows program that loads DLLs into memory so that they can be used by specific programs or by Windows.
Company: Microsoft Corp.
System Process: Yes
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): No
Common Errors: N/A

M


0

Response Number 2
Name: Lucid
Date: March 7, 2004 at 09:41:20 Pacific
Reply:

Note M's is "rundll32.exe" and not "rundl32.exe". So first make sure if your's is the one with 2 L's or 1 L....


0

Response Number 3
Name: jennylee
Date: March 7, 2004 at 10:04:42 Pacific
Reply:

Hi Lucid,
I had both rundll32 and rundl32. I left the program with 2 l's alone. Did I do something wrong by stopping rundl32.exe from my task manager? I was following instructions from Windows XP help because I've had so many problems with unsolicited porn programs running on my task manager everytime I go online. I've tried every kind of anti-virus, and spyware detecter imaginable, and it has still been happening.


0

Response Number 4
Name: Chuck 2
Date: March 7, 2004 at 10:18:38 Pacific
Reply:

Read about the file here:

To find out what each Startup(or Process) item does or means
Task List Programs


0

Response Number 5
Name: jennylee
Date: March 7, 2004 at 10:36:26 Pacific
Reply:

I've also just found IEXPLORE.exe on my task manager and I've never found that particular program running before....PLease, somebody explain to an ignorant, computer novice just what this is and could it be causing some of my previously aforementioned problems? Thanks!!!


0

Related Posts

See More



Response Number 6
Name: Chuck 2
Date: March 7, 2004 at 10:43:02 Pacific
Reply:

Click on the "Task List Programs" link that I gave you, to find your answers there.


0

Response Number 7
Name: pcfixinguy
Date: March 7, 2004 at 10:44:21 Pacific
Reply:

JennyLee,
More and more viruses and malware are using variations of the valid RUNDLL32.exe file. They change it, rename it,, and generally screw up your PC. Try these programs and see if you find anything:-

1. Mcafee's STINGER:-
vil.nai.com/vil/stinger/

2. CWShredder:-
http://www.spywareinfo.com/~merijn/downloads.html
(read the instructions carefully with this program.)

3. Ad-Aware:-
www.lavasoftusa.com/ (there will be many mirror download sites for this one. Make sure you UPDATE the reference file as soon as you have installed the progrma, and BEFORE you run it)

4. Spywareblaster:-
www.javacoolsoftware.com/ (Make sure you UPDATE this program once installed. It sits resident on your PC and protects you from attack)

5. SpywareGuard:-
www.javacoolsoftware.com/ (Same as 4. it also sits quietly and protects you from attacks)

6. SpyBot Search and Destroy:-
www.safer-networking.org/index.php?page=download
(make sure you UPDATE this program once you have installed it and BEFORE you run it. Also, use the IMMUNIZE and Browser BLOCKER to further protect you)

All these programs work fine alongside each other. SOme, like STINGER, might appear to freeze, which usually means it has found a virus in the RESTORE folders. To clean these folders, you must turn off the RESTORE function.

Finally, many people also use a neat program called HighjackThis, which hscans your PC for running processes and all the programs run at startup. many of these entries are malware on infected machines. However, be warned, HighjackThis produces a large log file and although there are many people who are becoming very adept at understanding the log and advising on what to delete and what to leave alone, most forums now will not entertain the posting of these logs. New forums are springing up with the specific purpose of posting HighjackThis logs. Try all the above first and see what nasties reveal themselves. Blast em away as necessary. If a PC is infected in a big way, it can take several attempts with combinations of the above programs to clean the system. Get back with your adventure. Oh, it goes without saying that you should also have a good virus scanner and firewall too.

Safe Computing...:o)


0

Response Number 8
Name: Mark Long
Date: March 7, 2004 at 10:48:26 Pacific
Reply:

Download and install AdAware 6 then run it and delete anything it finds. It is free and available over the Web. Type in Google AdAware 6 and follow your pointer.

Also there is a program call Spybot that you would do well to download but read the instructions before you run it. Try AdAware 6 first as you can't go wrong. Check for updates for AdAware before you run it.

M


0

Response Number 9
Name: pcfixinguy
Date: March 7, 2004 at 11:20:38 Pacific
Reply:

JennyLee,
IEXPLORE is a browser highjacker. You are definitely infected. Try all the things I have posted above. Ad-Aware will get rid of IEXPLORE. When you have given all the above items a try, get back and let's see what you have left..:o)

Safe Computing..:o)


0

Response Number 10
Name: jennylee
Date: March 7, 2004 at 12:00:24 Pacific
Reply:

I ran a Norton virus scan and this is what is said:

C:\WINDOWS\rundll32.exe is infected with Trojan Horse
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\TI7NLAT6\counter[2].htm is infected with Trojan.Bookmarker.F

Now, how do I get rid of it?


P.S. I do have Ad-Aware,CWShredder, Spywareblaster, SpyBot Search and Destroy. I run them all on a regular basis, but I guess I still had an infected file. Time for me to get better educated PC wise!


0

Response Number 11
Name: Michelle67
Date: March 7, 2004 at 14:45:48 Pacific
Reply:

IEXPLORE.EXE is your web browser. If you open your task manager while you are on the internet then this will show up. If it is showing up and you are not on the internet then I would be worried about it. It will show up because it is a "running process" while it is open. Close internet explorer and open your task manager, see if it is still there. My bet is that it's not.

<<< What life deals you is not your choice. How you play your hand, is. >>>


0

Response Number 12
Name: pcfixinguy
Date: March 7, 2004 at 22:16:20 Pacific
Reply:

JennyLee,
This virus is a new one. Norton has details on it. Go to this link, and read through the information it contains. You may have to remove this virus manually:-

http://www.symantec.com/avcenter/venc/data/trojan.bookmarker.f.html

As for IEXPLORE.EXE, yes I am sorry, that is a valid Windows system file. I misread what you had posted and thought of the IEXPLORER.exe (note the R), which is virus infection...:o)

Safe COmputing...:o)


0

Response Number 13
Name: pietereee
Date: March 9, 2004 at 13:34:54 Pacific
Reply:

I have another problem. In my list of running processes, i have two times rundll32.exe. This is the first time this is there (i check it once and a while). when i end the process it doesn't go away.
So i can't end them. I think they are part of a dialer called instant access. But i already removed that program and the registry keys of it ( so normally it should be gone)


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home


Sponsored links

Ads by Google


Results for: Getting rid of rundl32.exe

How to get rid of svchost.exe www.computing.net/answers/windows-xp/how-to-get-rid-of-svchostexe/65067.html

how 2 get rid of libsys32 .exe prob www.computing.net/answers/windows-xp/how-2-get-rid-of-libsys32-exe-prob/143149.html

How to get rid of spoclsv.exe www.computing.net/answers/windows-xp/how-to-get-rid-of-spoclsvexe/161420.html