Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

rundll32.exe runs all the time, Firefox crashes on open


  • Please log in to reply
7 replies to this topic

#1 robwats83

robwats83

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:01:27 AM

Posted 30 September 2011 - 07:09 PM

Windows XpPro SP3. 2.6ghz processor. 2.5gb ram.

This program, rundll32.exe is now running at startup, and not allowing Firefox to run ( when I open Mozilla, it brings up the 'Firefox Crashed' dialog exery time, regardless) . No other negative effects that I'm aware of while it's running. If I end the process using Task Manager, Mozilla cranks up fine. In safe mode, the process does not run at startup, and Mozilla runs fine.

Problems started approx. 2 week ago, using Firefox doing some general surfing, no high-risk stuff that I know of - trusted sites - gmail, Bass Pro Shops, Cabelas shopping sites, etc, a few online forums for information, but nothing I haven't visited before - and it just crashed on me. Wouldn't come backup either. Had my little brother look at it a few days later ( he is more computer savvy ) and he somehow identified the 'rundll32.exe' process as the problem. He tells me it is a good filename, but that it shouldn't come up at startup and stay there, so it's something funky going on, but that was the end of his know-how about it.

I have run MBAM and Spybot under normal conditions. No luck.

It's not like this is an A1 Emergency right-this-minute type thing, but if it is Trojan/Spy/Malware type stuff, I reckon it's better to fix it instead of lettin it run every startup and just ending it. I'm open to whatever is necessary. Thanks a bunch.

BC AdBot (Login to Remove)

 


#2 Spartacus1

Spartacus1

  • Members
  • 86 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:27 AM

Posted 30 September 2011 - 07:35 PM

Try running RKill (http://www.bleepingcomputer.com/download/anti-virus/rkill) and post your results here please
May thou virus bow at thy mercy when you come to me...

#3 robwats83

robwats83
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:01:27 AM

Posted 30 September 2011 - 07:44 PM

Alright, here we go...

This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 09/30/2011 at 20:43:44.
Operating System: Microsoft Windows XP


Processes terminated by Rkill or while it was running:



Rkill completed on 09/30/2011 at 20:43:47.

#4 Spartacus1

Spartacus1

  • Members
  • 86 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:27 AM

Posted 30 September 2011 - 07:56 PM

Now that RKill came back clean, run SUPERAntiSpyware (http://www.superantispyware.com/)(Update before scanning), and MalwareBytes (http://www.malwarebytes.org/)(Update Before scanning)
May thou virus bow at thy mercy when you come to me...

#5 robwats83

robwats83
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:01:27 AM

Posted 30 September 2011 - 08:25 PM

Would you like logs for those scans as well?

#6 robwats83

robwats83
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:01:27 AM

Posted 30 September 2011 - 08:34 PM

I should mention also that the problem seems to have cleared up - I believe the Superantispyware got it. After that, MBAM found nothing and I did a quick restart. The rundll32.exe was gone from the processes, and mozilla cranked right up.

#7 robwats83

robwats83
  • Topic Starter

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:01:27 AM

Posted 30 September 2011 - 08:37 PM

Thanks so much for your help. Hope this helps someone else too.

#8 Spartacus1

Spartacus1

  • Members
  • 86 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:27 AM

Posted 30 September 2011 - 10:01 PM

Glad to hear the issue was resolved!
May thou virus bow at thy mercy when you come to me...




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users