Multiple instances of rundll32.exe in Windows 7 Premium using all RAM - no viruses detected by MSE but PC runs slowly

Processor: AMD Athlon (TM) 9750 Quad-Core 2.40 GHz

4,00 (3.75 usable) GB RAM

System: 64 - bit OS with Genuine Microsoft Windows 7 Premium (purchased separately with distributor online PC)

At startup, there are three instances of rundl32l.exe with no path name Image displayed in the Task Manager.

The three were separated from the PID of 1624, 1634 and 1644.

None has an associated user name.

Used private working memory is listed as 128K, 344K, 520K.

Commit size is listed as 1, 036 K, 1 864 K and 1 940 K.

List page 717, 1 731, and 2 044 defects

Note that the following persons have no associated user name, until I log in as an administrator:

Csrss.exe, nwsvc.exe, until I log in as an administrator, date at which all are listed as belonging to the user of the system.

There are two instances of csrss.exe after I login as an administrator to monitor the system.

Note that as soon as I open MSIE (worm: 9.0.8112.162421 64-bit Edition |) Update: 9.05 (KB2647516) | Encryption level: 256-bit)
The use of the RAM dropped to 1.04 BG of the GB available total 3.75, jumped but still once 3.14 GB and the balloons of the use of network.

as soon as I logged as administrator.  There are multiple instances open for svchost.exe attributed to the system, network and Local Service.

Since I use MacAfee and Microsoft Security Essentials and have found a problem, I wonder if there is a virus that creates multiple

run32dll.exe and this according to the capacity of detection of these two programs.

You know, it's more difficult to follow all the news - just to get a response.  I've restored as soon as possible, has got rid of the programs and the remains, then reinstalled MSE and updated, and, Yes, the computer is updated and better now with the improvement of power, video card and without an easy way to trace this information (you know a feature of Windows that would follow easily everything you ask?) - it seems a big eater of real-time , for questionable results.  I thought that Windows 7 Ultimate would have included more administration tools just to log on and view, copy, paste, rather than the back-and-forth necessary to fill out a form that is as unique as it is not shoot all the tools.  I see that much info required users, and where is the forensic tools easy to use a computer owner should have?  Malware authors certainly use them.  The average owner must be at least as good a handle on reports on what's happening, everything down to the core.

Any tips?

Tags: Windows

Similar Questions

  • Explorer 8 opens multiple instances of rundll32.exe when closing

    When I close Explorer 8, rundll32.exe opens multiple instances and memory in the Task Manager go to more than 800,000 for each instance. After running this ram computer and virtually lock up the computer. If I stop the process, everything works normally until I opens and closes Explorer 8. It is repeatable and consistent.

    I use Vista Business, 4 concerts, Dell Latitude D830. Rundll32.exe have searched and found only one instance... located in C:\Windows\System32. I ran several programs of virus and malware and can't find any problems. Register is also good.

    I had similar problems with changing app crash of video files in a folder list to views of large icons.  I sent a problem report and in return had a fix, I unfortunately deleted after it corrected my problem.   I had to go to the command promp
    and in C:\Windows\System32 I had to modify the command that has been something like the pointed out below.

    Fault Module name: Mpeg2Parser.ax
    I think that if you send an error report that you receive a solution.

    It's because of the problem I had.
    Product

    Windows host process (Rundll32)

    Problem

    Stopped working

    Date

    18/06/2009 15:58

    Status

    More information

    Signature of the problem

    Additional information about the problem

    Bucket ID: 376914080

    Problem event name: APPCRASH

    Application name: RunDLL32.exe

    Application version: 6.0.6000.16386

    Application timestamp: 4549b0e1

    Fault Module name: Mpeg2Parser.ax

    Fault Module Version: 1.2.0.79

    Timestamp of Module error: 38e280dd

    Exception code: c0000005

    Exception offset: 00006210

    The system version: 6.0.6001.2.1.0.768.3

    Locale ID: 2057

    Additional information 1: fd00

    More information 2: ea6f5fe8924aaa756324d57f87834160

    Additional information 3: fd00

    Additional information 4: ea6f5fe8924aaa756324d57f87834160

  • Are all instances of svchost.exe in Windows XP necessary?

    Windows XP (sp3), the instances of svchost.exe 7 boot are started, are all necessary?

    Windows XP (sp3), the instances of svchost.exe 7 boot are started, are all necessary?

    Yes. Read here: http://support.microsoft.com/kb/314056

  • On the task bar of Windows Explorer post work without creating multiple instances of explorer.exe.

    Hi, I tried the workaround solution where you enter "%SystemRoot%\explorer.exe: {20D04FE0-3AEA-1069-A2D8-08002B30309D}" in the target.  However, this doesn't seem to be a full working solution because it creates an instance of "explorer.exe" whenever you access.  I want a solution that allows me to open the 'Workstation' of the taskbar that creates instances fallacious "explorer.exe" (it should stay onlya singleinstance of explorer.exe).

    BTW, no, I don't want to pin 'my computer' icon so I have to hover over windows Explorer and then proceed to my computer.  I want the default location in Windows Explorer my computer and no libraries (which had the idea to do this? this person is a fool, because the majority of people never use libraries)

    -Dan

    Another alternative - using a VBScript script to launch my folder on the computer.

    Copy these lines into Notepad and save the file as "MyComputer.vbs".

    Set objShell = CreateObject
    objShell.ShellExecute "shell: MyComputerFolder ', ' ', ' ', 'open', 1

    Create a shortcut to the script including the full path, as below:

    C:\Windows\System32\wscript.exe "D:\MyScripts\MyComp.vbs."

    Change the shortcut icon, and then PIN to the taskbar.

    How is it a better alternative?

    The script takes 3K of memory (max) and duly ends after launching the folder desktop. It's better than the original situation where each instance explorer.exe taking 20 + K of memory and not end automatically.

    Ramesh Srinivasan . The Winhelponline Blog
    Microsoft MVP, Windows desktop experience

  • Photosmart 7510 running multiple instances of HPNetworkCommunicator.exe

    I have several instances of HPNetworkCommunicator.exe being run, but only 1 printer configured.  An escalation manager HP/engineer? connected to my PC to help solve a problem that I had with Efax.  He used a tool of the scrubber and left all instances previous HP printers I had and then reinstalled the PhotoSmart 7150 software.

    Everything worked fine after that.  However, Windows did an update on my computer and after that I could not the scanner, no printer software worked (to check the ink levels, scanner, etc...).  Responsible for the escalation, said there are problems with Windows updates because after the update, Windows does not see the printer as a scanner and it is a threat to the network, so it disables the scan from the printer part.

    He has reinstalled the printer that a printer wireless and then scan will work again.  However, he had several (3) instances of HPnetworkCommunicator.exe running after that.

    I went into the control panel and saw 2 7510 s PhotoSmart configured, so I deleted one of the printers.  I thought that's why there are several instances of HPneworkCommunicator running, and delete the redundant printer would solve the problem.

    I rebooted and checked everything was working on the printer.  However, I have yet 2 instances of HPnetworkCommunicator running.  Is this normal?

    Hello

    It is normal to have more than one instance running at the time sime because of several communication actions occouring simultanly (e.g. alerts of ink. Front panel to scan, the device status, etc..)

    This is the mode of operation of the specific software version.

    If you see the affected PC performance, it's another story.

    For such a question, I would recommend you to set the alert of ink as shown below, restart the PC and check any changes:

    http://support.HP.com/us-en/document/c03191239

    If performance is still affected, also disable the front panel scan option.

    If the software does not affect the PC somehow, you have really not hae any reason to take action.

    Kind regards

    Shlomi

  • Multiple Instances of werfault.exe

    It is common to have 6 instances of werfault.exe runs?

    Hello Tom,

    Thanks for update.

    It seems that the problem is solved.

    However, if re-problem persists, you can run DISM.

    Please do not hesitate to answer, if you have any other concerns about Windows.

    Thank you

  • How can I create a shortcut to "change user" on the desktop using rundll32.exe in Vista Home Premium?

    I am trying to create the shortcut to "change user" using rundll32.exewithout to create the shortcut to "lock", only to pass the user. I already know that I have to right click on an empty space on the desktop, press New\Shortcut and type%windir%\System32\rundll32.exe user32.dll,but not after the comma. Type so I can only create the shortcut to "change user" and not the shortcut to 'lock '? (This means that I don't want this: %windir%\System32\rundll32.exe user32.dll, LockWorkStation, with LockWorkStation after him.)

    Unfortunately, it can be done in your version of Vista (or so they say, hang on a moment.)  I found the article according to that cllaims to do in Vista Basic and Vista Home Premium in addint a file and shows a set of procedures.  As it is a 3rd party file, do so at your own risk. http://www.vistarevisited.com/2008/08/02/create-a-desktop-shortcut-to-switch-users-in-vista/.  NOTE: This is not how you suggested higher, but if it works who cares?

    In case you don't want to consider the solution above, you have refused, here is the procedure (how to do it in other versions of Vista):http://www.vistax64.com/tutorials/136969-switch-user-desktop-shortcut.html.

    I hope this helps.

    Good luck!

    Lorien - MCSA/MCSE/network + / has + - if this post solves your problem, please click the 'Mark as answer' or 'Useful' button at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

  • Why windows doesn't use all the ram I have available to her?

    new installation of windows 7. card mother support 16 GB of ram, 8 GB installed, windows will only recognize 3 GB, what's up?

    Friday, May 14, 2010 21:12:42 + 0000, bigterry wrote:
     
    > new windows 7 install. card mother support 16 GB of ram, 8 GB installed, windows will only recognize 3 GB, what's up?
     
     
    You are using Windows 7 32 bit?
     
    All versions of Windows 32-bit client (not just Vista/XP/7) have a 4GB
    address space (64-bit versions can use much more). It's the
    theoretical upper limit beyond which you cannot go.
     
    But you can not use all of the 4 GB of address space. Even if you
    have a 4 GB address space, you can use * autour * 3. 1 GB of RAM.
    This is because some of the space is used by the hardware and is not
    available for the operating system and applications. The amount you can
    use varies, depending on what hardware you have installed, but can
    range from as little as 2 GB to 3.5 GB. It's usually around
    3. 1 GB.
     
    Note that the hardware is using the address * space *, not the real
    The RAM itself. If you have a larger amount of RAM, the rest of the RAM
    goes unused because there is no address to map space to.
     
     
    Ken Blake, Microsoft MVP (Windows desktop experience) since 2003
     

    Ken Blake

  • ! 00% CPU use due to Multiple Instances of WerFault.exe running on Vista SP2 computer

    I recently reinstalled Vista (reinstall clean due to the failure of the hard drive to the new hard drive) and SP2 and all updates available. I think WerFault.exe works sporadically (up to 5 instances at a time) using 100% cpu. This makes my system unusable. I end the prossess (s) by using the Task Manager, but they keep restarting. I tried the error report auto disablinf and made many analyses of malware with various reputable antivirus/antispyware programs that have all found nothing sinister. I do not have insalled all programs that I didn't have prior to reintalling Vista. I had never experienced this problem during the four years that I've been running Vista. Any suggestions?

    Werfault.exe is the windows error reporting service. type 'services' in the search from the start menu, right click on the "error reporting service Windows" and choose "Properties". In the drop-down list "Startup type", choose "disabled", then restart your computer.

  • multiple instances of ravbg64.exe

    After completing my process through my task manager, I found that I have about 5 instances of the same RAVBg64.exe running at the same time. I know that at least one of them are legit, but I don't know the others. Also, a lot of my steam games started having drops of solid chassis. Are these additional files virus?

    Sunbro

    This process is your realtek.  I'd install the most recent driver available, even if it is the same date because drivers become corrupt

    There are discussions quite a few issues in this driver.

    RAVBg64 . exe , Realtek HD Audio background process... who eats up to 13% of my system of 2.2 Ghz Core i7-2720 RtkNGUI64.exe.

  • WinHlp32.exe for Windows home Premium

    Windows to Windows 3.1 help no longer works for Windows 7 Home premium.  I have a program I developed in Visual Basic 6.0 by using the Windows 2000 platform.  This program (Tryorb45.exe) is always useful in Windows 7, but I can't launch Winhelp in the program.  I copied Windowsxp Winhelp.exe and Winhlp32.exe.  But Windows 7 Home Edition premium won't let me overwrite Winhlp32.exe.  I can access the help file using OpenWith, but I cannot run it from the program. Any suggestions?

    I copied Windowsxp Winhelp.exe and Winhlp32.exe.  But Windows 7 Home Edition premium won't let me overwrite Winhlp32.exe.  I can access the help file using OpenWith, but I cannot run it from the program. Any suggestions?

    Help XP winhelp and home premium has another, so you can't replace, because Windows Vista and later versions of Windows include no WinHlp32.exe, you must install this component to open files .hlp that have been created in the old help content, that you upgrade Windows XP to Windows Vista or Windows 7. Then, you try to use help in a program that has been installed on your Windows XP system.

    To resolve this problem, obtain Windows Help program (WinHlp32.exe) for versions of Windows that support it. For the version appropriate for your operating system, you must know if you have a 64-bit or 32-bit Windows System.

    For win 7 Click here to download

    http://www.Microsoft.com/en-US/Download/details.aspx?ID=91

  • How directly crop multiple instances of a PDF document in Indesign without using frame borders

    Hi all

    I filled an Indesign document with PDF to help merge data (CS5.5).

    I would like to increase the size of some of them by inserting a page next and put some of the PDF on each side, with a proper culture.

    Surely, I can do this by duplicating the framework and using the edge of the frame to crop.  However, it seems to require a certain hack, to resize the image and maintain the balance of the PDF.

    Ideally, I would be able to crop each copy of the actual PDF file * in Indesign *, but when I try this (deliberately avoiding the Original 'Edit'), it seems to open the link of the PDF in Acrobat and no cropping will then be applied to all instances of the PDF file (I'll avoid the phrase 'destructive', as of course cropping in Acrobat PDF (sometimes notoriously) is not permanent).

    Is it possible to make the crop without use of the frame borders and make several copies of the PDF file?

    Thank you, MT

    Ask in the forum script. Someone may be able to add a script.

  • Document windows does not use all the available on new monitor display area

    Hello

    I have a new monitor - a Benq BL2711.

    I have set up as my secondary monitor on display in Windows 8.

    I can put Photoshop (CS6) on this screen and maximize the it, but there is a vast space not used in the document window, which is not used. I want to show a lot more of my images that I can currently, but the document window will not only fill all that screen real estate. A large part of it is lost.

    The panels occupy the right space to the bottom of the screen, but the window of the document (or the display area?) uses only 60% of the height of the screen.

    What is a limitation or do I have to configure something? (I have reset the workspace of photography).

    Thanks for any help

    Nick

    It is really a shot in the water, but it's the space used by the "timeline" Panel when it is open. Try to check in the menu window and close the bottle.

    Other that that, there are always some good old Reset preferences. Make sure you save the custom actions/brushes/presets and so forth first!

  • Does anyone know why Windows 7 Ultimate using all the available RAM. Have 8 GB of memory and resources system shows 99% used. When I close the memory use programs remains at 99%. How free memory is no longer used by the closed programs.

    System has 4 gig memory upgraded to the always the same question 8 concerts. When I reboot, the memory usage is 25% and less than an hour, I'm 100% without having to open programs.

    Hello CaptainofEngineering,

    Thanks for posting on the Microsoft answers Forums.

    Is there something on your task manager see you take a lot of memory?  Continue your problem if you put your computer in a clean boot State?

    If you need help, please come back and post, we are more than happy to help you.

    Kind regards

    Edgar
    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • I'm looking for on what is excessive calls for rundll32.exe?

    I have something that calls for multiple instances of rundll32.exe to occupy memory.  Little or no use of the processor, use of memory only.

    How can I know which call for them and master them?

    Symantec Endpoint Protection 12.1.671.4971 running.

    Hello KAN-Chis,

    Have you tried to boot the computer to a clean and start to reproduce this error?  How long have you been making this mistake and you did of the software/hardware changes?

    Clean boot:

    http://support.Microsoft.com/kb/310353

Maybe you are looking for

  • Upgrade to 1.1.30, gave rise to the greyed out camera scene mode?

    I bought the Cliq 2 yesterday after having my extended two year contract. I am new to Android platform, after a BlackBerry. I was playing with the functions of the phone and noticed that the scene in camera mode that was working yesterday is no longe

  • Y470 is crazy slow

    All of a sudden, my 3 week old computer has started to go very slowly. I ran 7 antivirus scans and I have no virus. Is this a hardware problem? I am in SafeMode right now

  • Error code: 0X80072EFF (cannot display the Web page)

    My pc is no longer updates windows, nor do an update error code manual 0x80072eff that my pc is proteceted by full protection of Virgin Media and analysis of viruses etc. See the there are no problem I get message internet Explorer cannot display thi

  • KB977896 fails installation

    I tried manual and automatic for kb977896 update and the installation always fails. I use XP Pro and office xp. liquidated all of the programs that would be closed

  • HP lj pro 300 forgotten password

    I need to reset the password for the 'local' to get my printer hp lj 300 pro