Quantcast

Maximum PC

It is currently Sat Aug 30, 2014 4:50 pm

All times are UTC - 8 hours




Post new topic Reply to topic  [ 3 posts ] 
Author Message
 Post subject: happili and rundll32.exe error
PostPosted: Wed Jul 04, 2012 9:48 am 
Little Foot
Little Foot

Joined: Mon Mar 24, 2008 10:53 am
Posts: 107
Location: Texas
A few weeks ago malwarebytes found a trojan called happili on my dad's computer. Malwarebytes removed it, but afterwards he would get a rundll32.exe not responding error whenever he'd try to shut his computer down. It would prompt him to end the process, and then would shutdown normally. Also whenever he'd look at certain PDFs on the web he was be unable to close them. After a bit of digging I found the offending rundll32.exe was connected to a file called dtsoind.dll . I disabled it from starting up in msconfig, and that seemed to fix both issues he was having.

I suspect the process is something leftover from happili, which seems to have caused a lot of people grief. Oddly enough he wasn't having redirect issues, the trojan was found during a routine scan. So the question is, is it safe to delete this process using hijackthis? Or is this a benign process that some how got damaged during the removal of the malware? He's running win7/xp dual boot, the problem is occurring on the XP side, and the malware was found on the XP side as well.

I can provide hijackthis logs if needed

System Hardware/OS:
Win7(64)/XP(32) Dual-boot
Core i7 980 2.8 Ghz
ASUS P6T SE
Nvidia Quadro NVS 440 128Mb
12 Gb DDR3 1333


Top
  Profile  
 
 Post subject: Re: happili and rundll32.exe error
PostPosted: Wed Jul 04, 2012 12:55 pm 
Little Foot
Little Foot
User avatar

Joined: Thu Jul 08, 2004 3:41 pm
Posts: 123
Location: St. Louis, MO USA
Download and install SysInternals from MS:

http://technet.microsoft.com/en-us/sysi ... s/bb842062 <-- the software
http://technet.microsoft.com/en-us/sysi ... 45021.aspx <-- guides

Autoruns shows you all the non-MS apps (the default, MS apps can be displayed too) that were auto-started during boot.

Turn the problem .exe/whatever back on and reboot. Then use Autoruns to get the entire path to the problem .exe/whatever. Then delete the file.

Image


Top
  Profile  
 
 Post subject: Re: happili and rundll32.exe error
PostPosted: Thu Jul 05, 2012 5:50 pm 
Little Foot
Little Foot

Joined: Mon Mar 24, 2008 10:53 am
Posts: 107
Location: Texas
Thank you, I'll give it a try when I have a chance. It looks like a pretty sweet set of tools in that package.


Top
  Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

All times are UTC - 8 hours


Who is online

Users browsing this forum: No registered users and 11 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group