my friend is a ****ing ******* and gave me a virus, i hate that dumb piece of ****

anyway, after running a million scans and stuff i cant figure it out, my new anti virus

when i open up task manager it says im running 2 rundll32.exe, could one be a virus/spyware program?

my computer is running like ****, and everytime i open IE it opens up a second version of IE and i constantly get bombarded and flooded with spam windows opening

im about to lose it.


help me.

I thought you were talking about herpes or something there for a minute

rundll32 is used for some windows stuff like the bluetooth tray icon, and some of the control panels. You have to look at the parameters it was launched with using process explorer or whatever to figure out what it's doing.

Boot into safe mode and do a scan. It might help.

For starters, you should dispose of your friend.

Also set windows to show the welcome screen after the screen saver as well as when resuming from suspend. And make sure your account is password protected and optionally turn the Guest account off (this will also force your folder shares to require a valid user account) and also assign the default "Administrator" account a password*.

(* Do this with: "net user Administrator *")

i paid all this money for zone alarm and its awful, just awful, even when it detects stuff it normally just tells me how screwed i am and doesnt do anything, and it STILL cant find this virus

i think its shutting off random apps too because my mouse software keeps going unresponsive and i think it got explorer.exe once, im going to shoot that son of a *****

For starters, get spybot (it's free). Run it and see what it cleans up.

Second, do you have a restore point before you think you were infected? It doesn't sound like you have a virus, just some general malware.

If you have problem getting to or using your system restores, then it may be a virus (though viruses are not very common anymore).

i read more about rundll32.exe and it says malware can hide behind it, and seeing as i have two running, anyone know any way which i can check if ones bad or not

thanks for the help so far, i have spybot running right now

i really appreciate the help bros

Run HiJackThis and then paste your log here

Boot in safe mode run a search for rundll32.exe and delete the bad one. Hopefully there are no back doors.

Why has no one pointed this out yet?

There's your problem. Internet Explorer.

.

thanks guys, as far as i can see i busted like over 30 viruses/spyware, thanks you guys are sweet

rundll32 is a system application, used for stuff like the bluetooth tray icon and several control panels. Be careful not to wipe a legitimate one.

Have you given Malwarebytes a chance at it yet?

I said it before and I will say it again:
How do you know that you got everything and there isn't something that is unknown to anybody still lurking?

Backup and wipe everything.
And hit your friend.

Such a letdown... I also was expecting a health thread.

http://forums.massassi.net/vb3/showthread.php?t=53221