Re: Many (runaway?) RunDLL32.exe processes starting - help
From: Malke (malke_at_nospoonnotreally.com)
Date: 08/03/04
- Next message: Mike Woods: "Strange error message..."
- Previous message: R. C. White: "Re: Problem opening 16 bit application"
- In reply to: Help: "Many (runaway?) RunDLL32.exe processes starting - help"
- Next in thread: Help: "Re: Many (runaway?) RunDLL32.exe processes starting - help"
- Reply: Help: "Re: Many (runaway?) RunDLL32.exe processes starting - help"
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 03 Aug 2004 05:57:36 -0700
Help wrote:
> Hi,
>
> I have had a laptop passed back to me by one of my users. After
> booting up there were getting the RPC error... "Windows must now
> restart because the RPC service terminated unsuccessfully" - and the
> countdown.
>
> Although the machine is patched, I assumed that a sasser variant had
> got in...
>
> When I got the machine, I booted it up in safe mode and ran a scan and
> found the RBOT-AM virus on, which I removed. I also ran spybot - S&D
> and adaware and remove a few bits but nothing dramatic.
>
> When I start up in normal mode, a load of rundll32 processes are
> running .. a couple of hundred .. and they just seem to spawn until
> there is no VM left and the machine shuts itself down.
>
> When I start in Safe Mode, I can use the machine excpet for accessing
> the control panel. When I try to access the control panel, I get the
> window up and then the searchlight icon spinning around. If I try to
> get into task manager, then I see a lot of rundll32 processes again
> and the machine runs out of VM again.
>
> One of the last things the user did before the problem occurred was to
> install a BTBroadband CD. I uninstalled what I could of it .. mainly
> an Intel DSL program, but, because I can't get to the control panel, I
> can't get to Add/Remove programs.
>
> If I stop the shutdown with a shutdown -a, I only really delay the
> inevitable because the machine still runs out of VM.
>
> Any help appreciated ...
>
> Anyone have any ideas as to why control panel fails in safe mode ?
>
> Is there anyway of finding out what might be triggering all the
> rundlls ? What is the direct command to launch the Add/Remove programs
> window ?
>
It sounds like the system is infested with viruses and spyware. At this
point - particularly if you are a busy sysadmin - the easiest and most
efficient way is to format and start over.
Malke
-- MS MVP - Windows Shell/User Elephant Boy Computers www.elephantboycomputers.com "Don't Panic!"
- Next message: Mike Woods: "Strange error message..."
- Previous message: R. C. White: "Re: Problem opening 16 bit application"
- In reply to: Help: "Many (runaway?) RunDLL32.exe processes starting - help"
- Next in thread: Help: "Re: Many (runaway?) RunDLL32.exe processes starting - help"
- Reply: Help: "Re: Many (runaway?) RunDLL32.exe processes starting - help"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
