Share via

Multiple instances of rundll32.exe in Windows 7 Premium using all of RAM - no virus detected by MSE but PC runs slowly

Anonymous
2012-03-05T15:33:36+00:00

Processor: AMD Phenom(tm) 9750 Quad-Core 2.40 GHz

RAM 4.00 GB (3.75 usable)

System: 64-bit OS with Genuine Microsoft Windows 7 Premium (bought separately with PC from online distributer)

On start-up, there are three instances of rundl32l.exe with no Image Path Name listed in Task Manager.

The three have separate PID's of 1624, 1634, and 1644.

None have an associated user name .

Private Working Memory used is listed as 128K, 344K, 520K.

Commit Size is listed as 1,036K, 1,864K, and 1,940K.

Page Faults list as 717, 1,731 and 2,044

Note that the following have no associated User Name, until I log in as Administrator:

csrss.exe, nwsvc.exe, until I log in as Administrator, at which time all are listed as belonging to System User.

There are two instances of csrss.exe after I login as Administrator to monitor the system.

Note that as soon as I opened MSIE (Ver: 9.0.8112.162421 64-bit Edition | Update: 9.05 (KB2647516) | Cipher Strength: 256-bit)

The RAM usage dropped to 1.04 BG of the total 3.75 GB available, but jumped again to 3.14 GB and the Network usage balloons,

 as soon as I logged in as Admin.  There are several instances open for svchost.exe ascribed to System, Network Service and Local Service.

Since I use MacAfee and Microsoft Security Essentials and neither have found a problem, I wonder if there is a virus that creates the multiple

run32dll.exe and can do this under the detection capabilities of those two programs.

Windows for home | Previous Windows versions | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous
2012-05-04T00:56:43+00:00

You know, it was more trouble to track all the info - just to get an answer.  I restored to earlier, got rid of programs and vestiges, then reinstalled MSE, and updated, and, yes the computer is updated and better now with better power, video card, and without an easy way to trace this information ( do you know of a feature in Windows that would easily track all that you ask for?) - it seems a real time hog, for dubious results.  I thought Windows 7 Ultimate would have included more Admin tools just to log and look through, copy, paste, rather than the back-and-forth required to fill in a form that is as unique as it doesn't draw on any tools.  I see a lot of info demanded of users, and where is the easy to use forensic tools that a PC owner should have?  Malware writers certainly use them.  The average owner needs to have at least as good a handle on reporting on what happens, all the down to the kernal.

Any tips?

Was this answer helpful?

0 comments

5 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2013-05-18T04:43:14+00:00

    Eventually, I redid the system, and ordered a Win 7 Pro from Microsoft, as a downgrade, and later added more RAM, a better set of cards, and an SSD drive.  It runs much better, with both Trend Micro Ultimate Internet Security and Microsoft Security Essentials

    • they play nicely... and still, I get errors.  Still, it is less buggy, but I don't load as much software on the hard drive.  Not using the Cloud version of Office 360, but am using some cloud apps, and more data on networked drives.

     Papa Bear, your request for information is still too cluttered.  I wish there were some click-to-insert way to fill your request for info.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2012-05-04T05:49:58+00:00

    Please see my revised post above, including the following references:

    Do I need both Microsoft Security Essentials and another antivirus software program installed?

    http://blogs.msdn.com/b/securitytipstalk/archive/2010/09/08/do-i-need-both-microsoft-security-essentials-and-another-antivirus-software-program.aspx 

    Check list for installing Microsoft Security Essentials

    http://answers.microsoft.com/thread/bf757e6a-e320-4a67-92bc-767e6acb26c4

    Note that the list of updates in #7 has been substantially revised.

    ===================================================================

    Disclaimer: This is not an official Microsoft Support forum and MS MVPs neither represent nor work for Microsoft

    Was this answer helpful?

    0 comments
  3. Anonymous
    2012-04-10T17:47:14+00:00

    cf. http://answers.microsoft.com/en-us/protect/forum/protect_start/how-do-i-prevent-error-0x800106be-msse-service/7cb442d0-2b10-4773-9f8f-f256ccf56f1d?page=2

    Please answer each of the following diagnostic questions in a correspondingly-numbered list in your very next reply (no need to quote this post):

    1a. When (approx. date) did you purchase the computer?

    1b. Did Win7 come preinstalled on the computer when you bought it, did you do a clean install of Win7, or did you upgrade from Vista to Win7?

    2a. Is Windows 7 Service Pack 1 (already) installed? See...

       • Which version of the Windows operating system am I running?

          http://windows.microsoft.com/en-us/windows7/help/which-version-of-the-windows-operating-system-am-i-running

    2b. Is it a Win7 64-bit computer?  See...

       • Is my PC running the 32-bit or 64-bit version of Windows?

          http://windows.microsoft.com/en-us/windows7/find-out-32-or-64-bit

    <EDIT> 

    3a. You have a McAfee application and Microsoft Security Essentials (MSE) both installed & loading at boot, is that correct?

    </EDIT>

    3b. In Windows Explorer [WinKey+E], navigate to & right-click on

        • **C:\Program Files**Microsoft Security Client <=this folder

    Select Properties: What is the Created date displayed on the resulting General tab?

    **<EDIT>**4. When (approx. date) was the McAfee application installed and when does your current subscription expire?

    1. Has any other McAfee application or a Norton application EVER been installed on the computer?

    </EDIT>

    1. Did a McAfee free-trial or a Norton free-trial [pick one] come preinstalled on the computer when you bought it? (Doesn't matter if you never used or Activated it.)

    **<EDIT>**7. Are ALL of the following updates listed in View installed updates (not Update History)? [1]

        (a) KB2675157 & KB2653956;

        (b) KB2621440, KB2667402, KB2641653, KB2665364 & KB2647518;

        (c) KB2654428, KB2631813, KB2644615, KB2584146 & KB2585542;

        (d) KB2656372 or KB2656373 [<=TELL ME WHICH ONE]

        (e)  KB2633879 or KB2633873 [<=TELL ME WHICH ONE]

        (f) KB2633171 or KB2556532 [<=TELL ME WHICH ONE]

        (g) KB2656355 or KB2656356 [<=TELL ME WHICH ONE]

        (h) KB2544521 or Windows Internet Explorer 9 [<=TELL ME WHICH ONE]

    </EDIT>

    1. Is Firefox, Chrome or any other alternate browser installed?
    2. Are you in the habit of using "Registry cleaners" (e.g., Registry Mechanic; System Mechanic; RegCure; RegClean Pro; Advanced SystemCare; AVG PC TuneUp; Norton Registry Cleaner; PCTools Optimiser; SpeedUpMyPC; CCleaner)?
    
Related references may include:

**&lt;/EDIT&gt;** Do I need both Microsoft Security Essentials and another antivirus software program installed?  

[http://blogs.msdn.com/b/securitytipstalk/archive/2010/09/08/do-i-need-both-microsoft-security-essentials-and-another-antivirus-software-program.aspx](http://blogs.msdn.com/b/securitytipstalk/archive/2010/09/08/do-i-need-both-microsoft-security-essentials-and-another-antivirus-software-program.aspx)

**&lt;/EDIT&gt;**

Check list for installing Microsoft Security Essentials  

[http://answers.microsoft.com/thread/bf757e6a-e320-4a67-92bc-767e6acb26c4](http://answers.microsoft.com/thread/bf757e6a-e320-4a67-92bc-767e6acb26c4)

Can I install Microsoft Security Essentials [or any other anti-virus/anti-spyware application] to clean up my already-infected computer?  

[http://answers.microsoft.com/thread/87058857-d181-4019-a723-efd9a49d9275](http://answers.microsoft.com/thread/87058857-d181-4019-a723-efd9a49d9275)

==================================================  

[1] **Start | Control Panel | Programs and Features | View installed updates** (in left-hand menu)

[*Last Revised (as marked) - 04 May 2012, 05:44 UTC*]

    Was this answer helpful?

    0 comments
  4. Anonymous
    2012-03-05T15:44:22+00:00

    Sorry, the OS on this PC is actually Windows 7 Ulimate.  I did find some references on the web that suggest that multiple rundll32.exe's indicate malware is replicating this dll, as there are never multiple instances of rundll32.exe in a valid operating environment for Windows.  Is this true?  It pointed me to various software downloads, which may help find a well-hidden malicious code.

    Was this answer helpful?

    0 comments