Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

multiple rundll32.exe process/computer beeps every hour


  • Please log in to reply
1 reply to this topic

#1 rkmalen

rkmalen

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:12:56 PM

Posted 09 June 2011 - 03:01 PM

We have multiple machines running Windows XP, both service pack 2 and 3, that beep multiple times every hour and multiple rundll32.ese files show up in Processes. These rundlls take up around 5k of memory each, and with 30 or 40 running, that drastically slows down our machines. I have run our VIPRE anti-virus, as well as Malware Bytes and Lavasoft Adaware. Everything comes up clean. I have run the Process Explorer to determine what is running the file. The command line shows rundll32.exe tlfueu.yzb,kkmrm

the tlfueu.yxb was a Confiker file that was supposedly deleted by our virus software and other Conficker removal tools show that the machine does not have Conficker.

Not sure how to stop this.

BC AdBot (Login to Remove)

 


#2 Allan

Allan

  • BC Advisor
  • 8,582 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:01:56 PM

Posted 09 June 2011 - 03:04 PM

1) If I were you I'd uninstall AdAware. It's very old school and MalwareBytes and / or Super AntiSpyware are the current best of breed
2) Also if I were you, I'd post in the Am I Infected forum on this site - because your system most certainly is infected.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users