F5F Stay Refreshed Hardware Desktop This process is expected to run.

This process is expected to run.

This process is expected to run.

K
Killerman1834
Posting Freak
885
06-26-2016, 01:27 PM
#1
Hey everyone. As described, your laptop is showing 56 instances of rundll32.exe active at once, which can feel unsettling in the Task Manager. This situation has persisted for about a month. Is this typical behavior, or could it indicate something more concerning?
K
Killerman1834
06-26-2016, 01:27 PM #1

Hey everyone. As described, your laptop is showing 56 instances of rundll32.exe active at once, which can feel unsettling in the Task Manager. This situation has persisted for about a month. Is this typical behavior, or could it indicate something more concerning?

K
Krzywy
Member
150
07-11-2016, 12:41 AM
#2
You're using which operating system? Rundll32 works within Windows, though attackers sometimes exploit it for higher access. If concerned, perform a scan with Malwarebytes. Look at the startup applications via Task Manager. Consider using Process Explorer to inspect each process https://learn.microsoft.com/en-us/sysint...s-explorer. It should reside mainly in System32 and syswow64, though it may appear elsewhere. If found in a "temp" directory, it's likely malicious.
K
Krzywy
07-11-2016, 12:41 AM #2

You're using which operating system? Rundll32 works within Windows, though attackers sometimes exploit it for higher access. If concerned, perform a scan with Malwarebytes. Look at the startup applications via Task Manager. Consider using Process Explorer to inspect each process https://learn.microsoft.com/en-us/sysint...s-explorer. It should reside mainly in System32 and syswow64, though it may appear elsewhere. If found in a "temp" directory, it's likely malicious.

P
Pottsiee
Junior Member
17
07-12-2016, 02:13 PM
#3
You're on Windows 11 23H2 and trying to install Malwarebyte, but Process Explorer isn't showing any process details. This could indicate unusual behavior or a potential issue with the installation. It's wise to investigate further.
P
Pottsiee
07-12-2016, 02:13 PM #3

You're on Windows 11 23H2 and trying to install Malwarebyte, but Process Explorer isn't showing any process details. This could indicate unusual behavior or a potential issue with the installation. It's wise to investigate further.

F
frenchtaco12
Junior Member
46
07-19-2016, 11:42 PM
#4
After the scan, isolate the detected trojans and run a full system check. Consider using updated antivirus tools and ensure your software is current.
F
frenchtaco12
07-19-2016, 11:42 PM #4

After the scan, isolate the detected trojans and run a full system check. Consider using updated antivirus tools and ensure your software is current.

K
Kontgezicht
Junior Member
13
07-21-2016, 10:48 PM
#5
OOF... Have the rundll32 tasks disappeared? I’m on Windows 11 and don’t see any of them running. Even if they’re locked away, I’d probably reinstall Windows just to be sure. There could be more lurking in the background. Don’t forget to reset your router as well. Depending on the extent of the issue, these malware might have altered DNS settings and redirects. I don’t know how you came across these threats—maybe avoid doing that without proper security measures going forward. Windows Defender only works as well as your caution with online activities.
K
Kontgezicht
07-21-2016, 10:48 PM #5

OOF... Have the rundll32 tasks disappeared? I’m on Windows 11 and don’t see any of them running. Even if they’re locked away, I’d probably reinstall Windows just to be sure. There could be more lurking in the background. Don’t forget to reset your router as well. Depending on the extent of the issue, these malware might have altered DNS settings and redirects. I don’t know how you came across these threats—maybe avoid doing that without proper security measures going forward. Windows Defender only works as well as your caution with online activities.

H
HCFEotw
Member
132
07-22-2016, 04:52 PM
#6
Currently the rundll32 tasks are missing. Now I see many svchost.exe entries, which could be typical or indicate a trojan. I’m hoping I won’t need to reinstall Windows, but if I can’t, I might have to
H
HCFEotw
07-22-2016, 04:52 PM #6

Currently the rundll32 tasks are missing. Now I see many svchost.exe entries, which could be typical or indicate a trojan. I’m hoping I won’t need to reinstall Windows, but if I can’t, I might have to

2
2__PAC
Junior Member
19
07-29-2016, 06:18 AM
#7
Remove the quarantined files and use Malwarebytes daily. Since you obtained the bitcoin miner, you're likely to encounter it again; reinstalling Windows won't solve this permanently. Also, update all your passwords.
2
2__PAC
07-29-2016, 06:18 AM #7

Remove the quarantined files and use Malwarebytes daily. Since you obtained the bitcoin miner, you're likely to encounter it again; reinstalling Windows won't solve this permanently. Also, update all your passwords.

N
Nnanek95
Member
55
07-29-2016, 07:44 AM
#8
I back this completely. You can't be sure they weren't also keyloggers.
N
Nnanek95
07-29-2016, 07:44 AM #8

I back this completely. You can't be sure they weren't also keyloggers.