Tech Support Forum banner
Status
Not open for further replies.

Rundll32.exe mulitplying and freezing Vista

1.6K views 2 replies 2 participants last post by  Katana  
#1 ·
Hi,

I am trying to fix my Cousin's laptop which seems to have some malware on it. He is running Vista on an Acer Aspire 5315 (2GHz Processor, 1GB Ram).

The problem I am seeing on this machine is that it is literally opening a new rundll32.exe every second until there are well over 100 of them running, there is no memory left and the machine grinds to a halt.

I am trying to install hijackthis and spybot but I am unable to even do that as the machine completely freezes before the install can complete.

I am at a loss as to what I can do as I have about 5 minutes of a slow machine before it completely freezes and all I am able to do is do a hard reboot.

All of the rundll32.exe files are running a *.mat file in the c:\Users\[Username]\Roaming directory. An example of one of these filenames is c00D200E.mat.

Any help would be much appreciated.
Kind Regards
Cain
 
#2 ·
Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.

If you think you have similar problems, please post a log in the HJT forum and wait for help.

Hello and welcome to the forums

My name is Katana and I will be helping you to remove any infection(s) that you may have.

Please observe these rules while we work:
  1. Please Read All Instructions Carefully
  2. If you don't understand something, stop and ask! Don't keep going on.
  3. Please do not run any other tools or scans whilst I am helping you
  4. Please continue to respond until I give you the "All Clear"
    (Just because you can't see a problem doesn't mean it isn't there)

If you can do those few things, everything should go smoothly
Image


Please Note, your security programs may give warnings for some of the tools I will ask you to use.
Be assured, any links I give are safe


----------------------------------------------------------------------------------------

I apologize for the delay in responding, but as you can probably see the forums are quite busy.
Unfortunately there are far more people needing help than there are helpers.

If you still require help please do the following


Download and Run RSIT
  • Please download Random's System Information Tool by random/random from here and save it to your desktop.
  • Double click on RSIT.exe to run RSIT.
  • Click Continue at the disclaimer screen.
  • Once it has finished, two logs will open:
    • log.txt will be opened maximized.
    • info.txt will be opened minimized.
  • Please post the contents of both log.txt and info.txt.
 
Status
Not open for further replies.
You have insufficient privileges to reply here.