rundll + wild tangent

[Guest]

Hi,

My sister bought and loaded 2005 Norton Anti-virus (basic version) and
started having troubles…an application thingy started popping up called
“rundll†and she can’t get rid of it. The Norton people are telling her to
uninstall “rundll†which doesn’t make sense to me. My sister said that now
when she boots her system there is a “wild tangent†that pops up…is this a
worm or virus?

Any ideas on:
1. is it safe to uninstall something called rundll? If so, how do I do that?
2. What is wild tangent and how do we get rid of it?

Funny thing is little things are starting to go wrong which makes me think
she might be infected…her printer is no longer an option and when I reinstall
it, it disappears a short time later….

Does this stuff warrant her formatting C:? If it were my system I would do
that to try and get rid of icky things…

Any ideas on any/all of this stuff?

THANKS in advance for ANY advice anyone can provide!!!!

Kathy

 

[PA Bear]

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/archive/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/

When all else fails, HijackThis v1.99.1
(http://aumha.net/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your log to http://forums.spywareinfo.com/,
http://castlecops.com/forum67.html or http://aumha.net/viewforum.php?f=30
for expert analysis, not here.**

 

[Donny Broome]

Sounds like you may have some lingering spyware/adware/malware infections
that Norton did not resolve. You might try scanning your system using one of
the tools listed on this page:

http://www.broomeman.com/spyware/


--

 

[Guest]

I am asking if it sounds like this is virus or spyware related...so are you
saying it sounds like it is? I am confused...

 

[Wesley Vogel]

Kathy,

1. rundll32.exe is a Windows XP file that loads *.dll files. Some
*.dll files can be spyware/scumware/malware, but not all. Rundll32.exe can
popup with errors that say Rundll blah blah. These errors have something to
do with whatever *.dll file(s) that rundll32.exe is trying to load.

Sometimes these spyware/scumware/malware *.dll files are poorly written. Or
are actually missing because an anti-spyware application removed all of the
*.dll files but not the start reference, so rundll32.exe is still looking
for them. These two reasons can cause rundll errors.

2. The deal with WildTangent is it's underhanded method of getting
installed on a users machine without their knowledge. Mostly by being
installed along with other software. A lot of antispyware programs consider
WildTangent to be spyware.

[[WildTangent will share your name, address, email address, phone number,
and other information. Collects system configuration information such as
your computer's CPU speed, video card configuration, and DirectX version.
Collects product usage information such as the number of product launches
and time spent using a product. WildTangent can retrieve and install
additional software. It will deliver advertisments to your computer when you
are playing the game.]]
From...
http://www.spyany.com/program/article_spw_rm_WildTangent.html

WildTangent has something to do with playing games.

If WildTangent is not needed, remove it.

WildTangent - Bundled software removal instructions
http://www.kephyr.com/spywarescanner/library/wildtangent/index.phtml

WildTangent Removal
http://www.iamnotageek.com/a/245-p1.php

PC Hell: How to Remove WildTangent
http://www.pchell.com/support/wildtangent.shtml

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[PA Bear]

It sounds like hijackware/Trojanware, yes. Your best bet is to check. At
the very least, you'll be ruling it *out*.

 

[Mr.Clean]

It sounds like hijackware/Trojanware, yes. Your best bet is to check. At
the very least, you'll be ruling it *out*.

WildTangent is a game developer and they use special drivers
to play their games.

 

[Wesley Vogel]

The deal with WildTangent is it's underhanded method of getting
installed on a users machine without their knowledge. Mostly by being
installed along with other software. A lot of antispyware programs consider
WildTangent to be spyware.

[[The program will share your name, address, email address, phone number,
and other information. Collects system configuration information such as
your computer's CPU speed, video card configuration, and DirectX version.
Collects product usage information such as the number of product launches
and time spent using a product. WildTangent can retrieve and install
additional software. It will deliver advertisments to your computer when you
are playing the game.]]
From...
Remove WildTangent
http://www.spyany.com/program/article_spw_rm_WildTangent.html

[[The being installed without you asking for it isn't cool at all.]]
From...
WildTangent Removal
http://www.iamnotageek.com/a/245-p1.php

[[Although its not technically considered spyware it does have built in
components to update itself and gather information about the computer system
including
a.. Operating System Version
b.. CPU Type and Speed
c.. Memory Amount
d.. Video Card type and Driver Version
e.. Sound Card type and Driver Version
f.. DirectX Version
g.. Location that the Web Driver was installed from ]]
From...
PC Hell: How to Remove WildTangent
http://www.pchell.com/support/wildtangent.shtml

[[This program is effectively harmless. However, it can be installed on the
victim machine without the user's knowledge or consent. ]]
From...
Viruslist.com - not-a-virus:AdWare.WildTangent.a
http://www.viruslist.com/en/viruses/encyclopedia?virusid=66323

[[The primary reason WildTangent is listed is because it is silently
installed with many programs. ]]
From...
Tenebril - Spyware Research Center - WildTangent
http://www.tenebril.com/src/info.php?id=101408978

[[Online game publisher WildTangent has signed on as the latest company to
integrate ads into its gaming network. The effort is part of a new
partnership with 24/7 Real Media.

Under the agreement, the Redmond, WA-based publisher will implement 24/7
Real Media's Open AdStream ad management technology into games, which
inserts in-game ads and tracks the number and duration of impression each ad
generates. The technology can change or rotate ads to keep them fresh.]]
From...
WildTangent Puts Ads in Games, Jeep Signs On
http://promomagazine.com/news/breakingnews/wildtangent_ads_042105/

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Mr.Clean]

The deal with WildTangent is it's underhanded method of getting
installed on a users machine without their knowledge. Mostly by being
installed along with other software. A lot of antispyware programs consider
WildTangent to be spyware.

<SNIP>

This contradicts all you said:

"WildTangent Web Driver is a media player similar to Macromedia's flash.
It enables you to play online games and other interactive content
published by WildTangent or other third parties. According to the their
privacy policy, WildTangent Web Driver does NOT collect personally
identifiable information. It only collects anonymous system
configuration information such as your computer's CPU speed, video card
configuration, and DirectX version. After installation, you can change
its update management options via Web Driver Control Panel, which can be
accessed in Windows Control Panel."

 

[Wesley Vogel]

Apparently this page has been updated....

Remove WildTangent
http://www.spyany.com/program/article_spw_rm_WildTangent.html

Well, then by all means, install WildTangent and have fun.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In