Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 908
  • Last Modified:

rundll32.exe

If I open the task manager on the Win2k3 box with Exch2k7 there are 128 processes of rundll32.exe.  What is the problem or what is causing this.
0
technolutions
Asked:
technolutions
  • 2
  • 2
1 Solution
 
flaphead_comCommented:
k drop to powershell and run
get-process rundl32.exe

I will show u what modules are running.  Also task manager shows you the User Name .. Is it the same for al l instances?
0
 
samiam41Commented:
I don't believe powershell or that command will work with Windows 2003.  The powershell is a feature of server 2008.
0
 
samiam41Commented:
Process Explorer (from sysinternals) should show you what you are looking for.  Be aware though, most of the problems associated with that many instances of rundll32.exe signal an infection.  Verify again that all of the Windows updates are installed, patches applied and your AV is up to date.  May not hurt to use a product like Malware Bytes as a compliment to your existing AV.

Process explorer -> http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx 
0
 
flaphead_comCommented:
samiam41: Windows powershell DOES work with Windows 2003, you just need to download it.

Windows PowerShell 1.0 RTW currently supports Windows XP Service Pack 2, Windows Server 2003, Windows Vista and Windows Server 2008.
http://www.microsoft.com/windowsserver2003/technologies/management/powershell/download.mspx
0

Featured Post

Become an Android App Developer

Ready to kick start your career in 2018? Learn how to build an Android app in January’s Course of the Month and open the door to new opportunities.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now