rundll32 consuming all resources

[Guest]

I am having a problem with the pcs in our school. What happens is that
randomly, a computer will start rundll32 and keep opening more and more
copies. You must have taskmanager up before this starts happening or you cant
see what is going on. Once this has started the computer is unusable and the
number of rundll32's continues to climb. One pc is currently at 202 running
processes. All drivers have been updated and windows is up to date fully. Out
of 30 schools that we look after, this only happens at one. All the computers
are identical hardware wise and were ghosted from a reference machine 6
months ago. I have run antivirus checks using sophos and stinger and various
anti spyware programs, but nothing.

Any help would be greatly appreciated.
Gareth.

 

[Guest]

I am having a problem with the pcs in our school. What happens is that
randomly, a computer will start rundll32 and keep opening more and more
copies. You must have taskmanager up before this starts happening or you cant
see what is going on. Once this has started the computer is unusable and the
number of rundll32's continues to climb. One pc is currently at 202 running
processes. All drivers have been updated and windows is up to date fully. Out
of 30 schools that we look after, this only happens at one. All the computers
are identical hardware wise and were ghosted from a reference machine 6
months ago. I have run antivirus checks using sophos and stinger and various
anti spyware programs, but nothing.

Any help would be greatly appreciated.
Gareth.

Use this Tool to monitor the running processes in the background and see
what application causing it:
http://www.microsoft.com/technet/sysinternals/utilities/processexplorer.mspx

or AutoRun:
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Autoruns.mspx

Some scenarios and resolutions:

http://www.microsoft.com/communitie...&pt=&catlist=&dglist=&ptlist=&exp=&sloc=en-us
HTH.
Let us know.
Regs,
nass

 

[Guest]

I managed to get processexplorer running before the system froze up and the
process thats causing it is svchost under services which itself is under
winlogon in system. Hope that makes sense.

 

[Guest]

GarethJ,
1= Try to perform a clean boot and see what application is causing this,
turn the windows Update OFF for Now.
"How to perform a clean boot in Windows XP"
http://support.microsoft.com/kb/310353

2 = Open Windows Explorer and locate this path:
C:\Windows\INF, you will see a folder named sr.inf right click on it and
select Install when finished Restart your computer.
Also Open a Run command and type in:
sfc /scannow click [OK] and let it run, get your XP CD handy if the
Operating system asked/prompted you to do so.

A description of Svchost.exe in Windows XP Pro
http://support.microsoft.com/kb/314056


3= What's Rundll32.exe process?:
http://www.mvps.org/sramesh2k/rundll32.htm

What the version, date and the size of your Rundll32.exe here:
C:\Windows\System32\Rundll32.exe ?.
HTH.
Let us know.
Regards,
nass