Re: Multiple rundll32.exe appearing under processes

1 Jul 2009 3:40 AM

rvgr12

In my case (and I guess others), the amount of rundll.exes showing up is causing an issue with performance.

More notably the command line parameters are troubling and unexplainable in every avenue that I turn.

"-Command Line: rundll32.exe gnfue.k,XXXXXXX

XXXXXX being a different parameter for each instance of the file. specific examples are: rundll32.exe gnfue.k,aymab, rundll32.exe gnfue.k,daozb, rundll32.exe gnfue.k,fedciyv to name a few-."

Recently the gnfue.k part of the command line parameters has changed. I can post more samples here. Maybe it would help but I really do not want to spam. Let me know and I will -- rvgr12 ------------------------------------------------------------------------ rvgr12's Profile: http://forums.techarena.in/members/86723.htm View this thread: http://forums.techarena.in/windows-server-help/1127217.htm http://forums.techarena.in

1 Jul 2009 5:36 AM

ahrazu

I think it is the problem with conficker virus, as the virus creates one job then one rundll32.exe process runs, i tried with virus cleaner provided by kaspersky, it cleans the jobs but after restart comes again. i asked for kaspersky corporate support hope they will find any way. i will let you know if there is improvement. -- ahrazu ------------------------------------------------------------------------ ahrazu's Profile: http://forums.techarena.in/members/110059.htm View this thread: http://forums.techarena.in/windows-server-help/1127217.htm http://forums.techarena.in

1 Jul 2009 3:56 PM

Phillip Windell

"ahrazu" <ahrazu.3umtbb@DoNotSpam.com> wrote in message
news:ahrazu.3umtbb@DoNotSpam.com...
>
> I think it is the problem with conficker virus, as the virus creates one
> job then one rundll32.exe process runs, i tried with virus cleaner
> provided by kaspersky, it cleans the jobs but after restart comes again.
> i asked for kaspersky corporate support hope they will find any way. i
> will let you know if there is improvement.

Find out if they only return like that with one particular user profile. I
have had problems like that and solved it be backing up required parts of
the profile (Desktop, My Doc, Favorites, etc). Then delete the
profile,...run the AV to clean up,...log the user in to recreate the
profile,...copy the saved data back to the profile. Then reboot and see if
it comes back again.

--
Phillip Windell

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

Thread options