Reply

Join Date: Jun 2004
Posts: 10
Reputation: pokok is an unknown quantity at this point 
Solved Threads: 0
pokok pokok is offline Offline
Newbie Poster

Re: rundll32.exe problems

 
0
  #1
Jun 6th, 2004
I cant find this bridgedll.exe in my notebook. I m using winxp home. I just dont know what's happening to my system. While I m using it, my cpu usage just went up to 100% and wont come down. All of the other software were slow coz of this 100%. When I tried to restart/shutdown , a window pop out
"end task - rundll32.exe" , I clicked end task. but it just wont end and hang. I have to press power button to shutdown. Pls.Pls..anyone ..pls tell me what was going on.
Below is the backlog from Hijackthis.
Logfile of HijackThis v1.97.7
Scan saved at 下� 07:35:22, on 2004/6/6
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\KKman\script\aceagent.exe
C:\WINDOWS\System32\LVComS.exe
C:\WINDOWS\System32\taskmgr.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\QCONSVC.EXE
C:\WINDOWS\System32\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\TpKmpSVC.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\KKman\KKMAN.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Documents and Settings\ahter\Local Settings\Temp\暫時目錄 2 用於 hijackthis.zip\HijackThis.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: ????? - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [S3TRAY2] S3Tray2.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [BMMLREF] C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE
O4 - HKLM\..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [ibmmessages] C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
O4 - HKLM\..\Run: [QCWLICON] C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [script] C:\Program Files\KKman\script\kkscript.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [PHIMETIPSYNC] C:\Program Files\Common Files\Microsoft Shared\IME\IMTC60\Phonetic\TINTLCFG.EXE /PHIMETIPSync
O4 - HKCU\..\Run: [ibmmessages] C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: .plugin141.trace
O4 - Startup: AD.html
O4 - Startup: KKman.ini
O4 - Startup: lastopen.ini
O4 - Startup: ntuser.dat
O4 - Startup: ntuser.dat.LOG
O4 - Startup: ntuser.ini
O4 - Startup: ~
O4 - Global Startup: NTUSER.DAT
O4 - Global Startup: NTUSER.DAT.LOG
O9 - Extra button: ICQ Pro (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O9 - Extra button: Yahoo! Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O11 - Options group: [JAVA_IBM] Java (IBM)
O16 - DPF: {74FFE28D-2378-11D5-990C-006094235084} (IBM Access Support) - https://www-3.ibm.com/pc/support/acc...t/IbmEgath.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab
O16 - DPF: {E598AC61-4C6F-4F4D-877F-FAC49CA91FA3} (acpRunner Class) - https://www-3.ibm.com/pc/support/acc...AcpControl.cab
O16 - DPF: {F9043C85-F6F2-101A-A3C9-08002B2F49FB} (Microsoft Common Dialog Control, version 5.0 (SP2)) - http://activex.microsoft.com/controls/vb5/comdlg32.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{36108366-D353-40A6-BCC5-31F5A4A54BB2}: NameServer = 168.95.192.1 168.95.1.1
Reply With Quote Quick reply to this message  
Join Date: Feb 2004
Posts: 9,982
Reputation: crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold 
Solved Threads: 754
Moderator
Featured Poster
crunchie's Avatar
crunchie crunchie is offline Offline
Spyware Killer

Re: rundll32.exe problems

 
0
  #2
Jun 6th, 2004
Originally Posted by pokok
I cant find this bridgedll.exe in my notebook. I m using winxp home. I just dont know what's happening to my system. While I m using it, my cpu usage just went up to 100% and wont come down. All of the other software were slow coz of this 100%. When I tried to restart/shutdown , a window pop out

Have split your post out to it's own thread where it will be easier for you to follow.
Reply With Quote Quick reply to this message  
Join Date: Feb 2004
Posts: 9,982
Reputation: crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold 
Solved Threads: 754
Moderator
Featured Poster
crunchie's Avatar
crunchie crunchie is offline Offline
Spyware Killer

Re: rundll32.exe problems

 
0
  #3
Jun 6th, 2004
Go here for an on-line scan & set it to autoclean for you.

Also, can you tell me anything about these entries:

O4 - Startup: .plugin141.trace
O4 - Startup: AD.html
O4 - Startup: KKman.ini
O4 - Startup: lastopen.ini
O4 - Startup: ntuser.dat
O4 - Startup: ntuser.dat.LOG
O4 - Startup: ntuser.ini
O4 - Startup: ~
O4 - Global Startup: NTUSER.DAT
O4 - Global Startup: NTUSER.DAT.LOG

Did you place them in the startup folder?
Reply With Quote Quick reply to this message  
Join Date: Jun 2004
Posts: 10
Reputation: pokok is an unknown quantity at this point 
Solved Threads: 0
pokok pokok is offline Offline
Newbie Poster

Re: rundll32.exe problems

 
0
  #4
Jun 9th, 2004
ya...i installed them in the startup.
O4 - Startup: .plugin141.trace
O4 - Startup: AD.html
these 2 are for spy bot and adware

O4 - Startup: KKman.ini
this one is kind of like explorer

O4 - Startup: lastopen.ini
O4 - Startup: ntuser.dat
O4 - Startup: ntuser.dat.LOG
O4 - Startup: ntuser.ini
O4 - Startup: ~
O4 - Global Startup: NTUSER.DAT
O4 - Global Startup: NTUSER.DAT.LOG
Ther truth is ..I have no ideas what are those.

What may seems to be the problems? I have 2 notebook here.
In 1 I found there's no Rundll32.exe
and the other one have. Can I deleted this .exe ?
What will happened if I deleted it?
Thanks~~
Reply With Quote Quick reply to this message  
Join Date: Feb 2004
Posts: 9,982
Reputation: crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold 
Solved Threads: 754
Moderator
Featured Poster
crunchie's Avatar
crunchie crunchie is offline Offline
Spyware Killer

Re: rundll32.exe problems

 
0
  #5
Jun 10th, 2004
Originally Posted by pokok
O4 - Startup: lastopen.ini
O4 - Startup: ntuser.dat
O4 - Startup: ntuser.dat.LOG
O4 - Startup: ntuser.ini
O4 - Startup: ~
O4 - Global Startup: NTUSER.DAT
O4 - Global Startup: NTUSER.DAT.LOG
Ther truth is ..I have no ideas what are those.

What may seems to be the problems? I have 2 notebook here.
In 1 I found there's no Rundll32.exe
and the other one have. Can I deleted this .exe ?
What will happened if I deleted it?
Thanks~~
Make sure that HijackThis is in it's own permanent folder (very important) & rescan with HijackThis & with all windows closed, fix the above entries.
Reboot.
I do not quite understand what you are saying in the last part of your post about the .exe . Are you asking if you can delete the rundll32.exe?
Reply With Quote Quick reply to this message  
Join Date: Jun 2004
Posts: 10
Reputation: pokok is an unknown quantity at this point 
Solved Threads: 0
pokok pokok is offline Offline
Newbie Poster

Re: rundll32.exe problems

 
0
  #6
Jun 10th, 2004
mmmh...I can't fix those problems. HijackThis won't let me.
Yes. That's what I m trying to say. Can I delete Rundll32.exe?
Reply With Quote Quick reply to this message  
Join Date: Dec 2003
Posts: 6,439
Reputation: DMR will become famous soon enough DMR will become famous soon enough 
Solved Threads: 363
Team Colleague
DMR's Avatar
DMR DMR is offline Offline
Wombat At Large

Re: rundll32.exe problems

 
0
  #7
Jun 10th, 2004
Originally Posted by pokok
Can I delete Rundll32.exe?
NOOOOO!!!

Rundll32.exe is a critical Windows system file responible for loading other Windows components. Spyware programs use/abuse this function by telling rundll32 to load their components as well; it is their programs which cause the errors, not rundll32 itself.
"May the Wombat of Happiness snuffle through your underbrush."
- Ancient Aborigine blessing


Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.

However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.
Reply With Quote Quick reply to this message  
Join Date: Jun 2004
Posts: 10
Reputation: pokok is an unknown quantity at this point 
Solved Threads: 0
pokok pokok is offline Offline
Newbie Poster

Re: rundll32.exe problems

 
0
  #8
Jun 13th, 2004
No virus found after whole system scanned.
I've already format and reinstall. But same prob. still exist.
What can I do.
But If I close that rundll32.exe after pc started, this prob will be gone.
Do you guys have any experinces dealing with this kind of problem?
Sorry if you are not really clear abt my question.
Reply With Quote Quick reply to this message  
Join Date: Feb 2004
Posts: 9,982
Reputation: crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold crunchie is a splendid one to behold 
Solved Threads: 754
Moderator
Featured Poster
crunchie's Avatar
crunchie crunchie is offline Offline
Spyware Killer

Re: rundll32.exe problems

 
0
  #9
Jun 13th, 2004
Go to Start/Run & type in Msconfig & go to the start up Tab & ensure that all programs are checked to start. Reboot & post a new HJT log.
Do you mean that you have just done a new Reformat?? If so, you should not have any problems at all.
Reply With Quote Quick reply to this message  
Join Date: Jun 2004
Posts: 10
Reputation: pokok is an unknown quantity at this point 
Solved Threads: 0
pokok pokok is offline Offline
Newbie Poster

Re: rundll32.exe problems

 
0
  #10
Jun 13th, 2004
yes. I did reformat and reinstall a new OS. But same problem still there.
checked Msconfig /start up tab.
I'll post another HJK Log shortly.
Thanks for your advise.
Reply With Quote Quick reply to this message  
Reply

This thread is more than three months old.
Perhaps start a new thread instead?
Message:



Similar Threads
Other Threads in the Viruses, Spyware and other Nasties Forum
Thread Tools Search this Thread



About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC