Re: Rundll32.dll - Finding who the parent app is?

From: Rock (rock_at_comcast.nospam.net)
Date: 08/12/04 

Date: Wed, 11 Aug 2004 21:54:39 -0700

jim wrote:

> On Win XP Rundll32 starts on my machine at various odd times and consumes
> 99% of my cpu. I try to end the task from Windows Task Manager (ahe
> application list remains empty) but it either does not end (or restarts so
> quickly I can't tell which). I must shut down to kill it. I reviewed the
> various locations where programs are initiated at startup such as Start
> Menu, registry:
>
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
> HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
>
> the Management Console's Services etc but have found no clues or did not
> recognize the offending service.
> Anyone know how I can find out the name of the application that kicked off
> this dll so I can find the offender?
>
> thanks.
>
>

Check your system for malware and viruses using Spybot, Adaware,
Cwshredder, Bazooka Spyware Scanner and HiJackThis. Run several of the
online virus scans. If your system is clean then do some clean boot
troubleshooting to identify the cuprit.

How to Troubleshoot By Using the Msconfig Utility in Windows XP
http://support.microsoft.com/?id=310560

How to perform advanced clean-boot troubleshooting in Windows XP
http://support.microsoft.com/?id=316434

Run these programs to check for spyware/malware. After installing
update them, then boot into safe mode and run them. You should update
and run them weekly.

Cwshredder
http://209.133.47.200/~merijn/files/CWShredder.exe

Ad-aware
http://www.lavasoftusa.com

Spybot Search and Destroy
http://www.safer-networking.org

Bazooka Adware and Spyware Scanner
http://download.com.com/3000-2144-10247783.html

After your system is clean use these programs to help keep it clean:

Spywareblaster
www.javacoolsoftware.com/sbdownload.html

Spywareguard
http://www.javacoolsoftware.com/sgdownload.html

IE-SPYAD
http://www.staff.uiuc.edu/~ehowes/resource.htm

For viruses:

Online and Downloadable Virus Scanning:

Bit Defender Online Virus Scan:
http://www.bitdefender.com/scan/license.php

Symantec Online Virus and Security Scan:
http://security.symantec.com/ssc/home.asp

TrendMicro:
http://housecall.trendmicro.com/housecall/start_corp.asp

McAfee Online Virus Scan:
http://www.mcafee.com/myapps/mfs/default.asp

Panda ActiveScan
http://www.pandasoftware.com/activescan/com/activescan_principal.htm

RAV AntiVirus - Scan Online
http://www.ravantivirus.com/scan/

McAfee Stinger, Downloadable Virus Scanner:
http://us.mcafee.com/virusInfo/default.asp?id=stinger

Relevant Pages

  • Re: Spyware: how to clean registry and stop returns
    ... | dedicated side of mwe wants to try to clean up the little | Spyware demons and liberate my machine. ... Is that firewall the same as | the one called "Internet Connection Firewall"?? ... |>| Symantec Online Virus and Security Scan: ...
    (microsoft.public.windowsxp.general)
  • Re: Spyware: how to clean registry and stop returns
    ... Then start over clean. ... The systems detect |> hundreds of Spyware items, remove many of these malicious |> files, and clean up some of their registry entries. ... | Symantec Online Virus and Security Scan: ...
    (microsoft.public.windowsxp.general)
  • Re: Rundll32.dll - Finding who the parent app is?
    ... > Check your system for malware and viruses using Spybot, Adaware, ... Bazooka Spyware Scanner and HiJackThis. ... If your system is clean then do some clean boot ... > Bit Defender Online Virus Scan: ...
    (microsoft.public.windowsxp.general)
  • Re: Spyware: how to clean registry and stop returns
    ... dedicated side of mwe wants to try to clean up the little ... Spyware demons and liberate my machine. ... Is that firewall the same as ... >| Symantec Online Virus and Security Scan: ...
    (microsoft.public.windowsxp.general)
  • Re: Kernnel goes to 100% every 70 seconds
    ... > If you run the task manager you can count the CPU graph ... After your system is clean use these programs to help keep it clean: ... Symantec Online Virus and Security Scan: ... How to perform advanced clean-boot troubleshooting in Windows XP ...
    (microsoft.public.windowsxp.general)
Loading