D0CE0C16B1 is some sort of a parasite. Either you still have it or you have
removed it with Anti Virus or Anti-Spyware applications and the start
reference has not been removed.
Info here...
Bleeping Computer - rundll32.exe D0CE0C16B1,D0CE0C16B1 - File Information
http://www.bleepingcomputer.com/startups/rundll32.exe_D0CE0C16B1D0CE0C16B1-9087.html
It starts from one of these registry keys:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In