PDA

View Full Version : wrong forum right people


rybones
03-27-2005, 08:17 PM
sorry, I know this is the wrong place, but you are the people I trust. I have some sort of virus or spyware issue? Everything began to go bad this morning. All kinds of fatal exceptions and "this program has performed and illegal opperation". Then when I went to open foxefire there was the message that i did not have enough memory to open and I would need to close some programs before I opened. When I opened my task list 22 programs were running and I only recognized 5 or 6. Alas, here is the list of programs. does anyone know if any are spyware or virus? Also note, I did run a spyware and virus scan with my nortons and pc-cillin and they found nothing?

Rundll32 (i have no idea)
Hpqtra08 (i think this is hewlet packer printer/scannner/coppier software)
Hpzipm12 (i think this is hewlet packer printer/scannner/coppier software)
Hpcmpmgr (i think this is hewlet packer printer/scannner/coppier software)
Pfppop70 (I have no idea)
Wzqkpick (I have no idea)
Rundll32 (I have no idea, and why is it running twice)
Em_exec (I have no idea)
Realplay (i assume this is ms real player, but does it need to be running?
Hplamp (i think this is hewlet packer printer/scannner/coppier software)
Directcd (I have no idea)
Osa (I have no idea)
Rundll (I have no idea, running a 3rd time but no"32" at end)
Hpsjvxd (i think this is hewlet packer printer/scannner/coppier software)
Hpwuschd (i think this is hewlet packer printer/scannner/coppier software)
Stimon (I have no idea)
Winmgmt (I have no idea)
Speedkey (I have no idea and I am worried this is spyware)
Tsc (I have no idea)
Hpdarc i think this is hewlet packer printer/scannner/coppier software)

Any help on what these programs are and/or how to remove them or keep them from autmatically running would be great.

Thanks,

Ryan

citanul
03-27-2005, 08:26 PM
google would be a good place to start.

citanul

KenProspero
03-27-2005, 08:26 PM
Ok, let's take this slowly.

1. If your anti-virus and spyware detector are showing no spyware, maybe you don't have any.

The First thing you should do is reboot your computer. Lots of problems go away when you turn it off and turn it on.

If this doesn't work, and you're competent with your computer, try the following.

First, determine what processes are running on your computer. You can do this by hitting <alt>+<ctrl>+<del>

Then, you can check out each of the processes that are running on this site -- www.processlibrary.com (http://www.processlibrary.com) -- it will show you whether the process is a virus, spyware, etc, and whether it's safe to remove it from your system.

If you are running spyware, processlibrary, or the Norton sites will probably have removal instructions.

rybones
03-27-2005, 08:37 PM
Thanks,

I have rebooted several times so that is not the issue. The site you gave me is great. thanks!!! Now, do you know how to remove or stop programs from automatically running if I do not need them to be running. It appears most of these 22 programs are starting up when I boot the computer.

Ryan

RicP
03-27-2005, 08:38 PM
[ QUOTE ]


Rundll32 (i have no idea)


[/ QUOTE ]
Normal
[ QUOTE ]

Hpqtra08 (i think this is hewlet packer printer/scannner/coppier software)
Hpzipm12 (i think this is hewlet packer printer/scannner/coppier software)
Hpcmpmgr (i think this is hewlet packer printer/scannner/coppier software)


[/ QUOTE ]
I'd agree
[ QUOTE ]

Pfppop70 (I have no idea)


[/ QUOTE ]
WordPerfect 7 job to handle printing
[ QUOTE ]

Wzqkpick (I have no idea)


[/ QUOTE ]
Winzip Quickpick
[ QUOTE ]

Rundll32 (I have no idea, and why is it running twice)


[/ QUOTE ]
normal
[ QUOTE ]

Em_exec (I have no idea)


[/ QUOTE ]
Logitech Mouse stuff
[ QUOTE ]

Realplay (i assume this is ms real player, but does it need to be running?


[/ QUOTE ]
not "MS" RealPlayer but a "safe" process

[ QUOTE ]

Hplamp (i think this is hewlet packer printer/scannner/coppier software)


[/ QUOTE ]
Yeap

[ QUOTE ]

Directcd (I have no idea)


[/ QUOTE ]
CD Burner software
[ QUOTE ]

Osa (I have no idea)


[/ QUOTE ]
Microsoft Office start up assistant
[ QUOTE ]

Rundll (I have no idea, running a 3rd time but no"32" at end)
Hpsjvxd (i think this is hewlet packer printer/scannner/coppier software)
Hpwuschd (i think this is hewlet packer printer/scannner/coppier software)


[/ QUOTE ]
Yeap safe

[ QUOTE ]

Stimon (I have no idea)


[/ QUOTE ]
You running 98 or ME? MS Still Image Monitor
[ QUOTE ]

Winmgmt (I have no idea)


[/ QUOTE ]
More windows stuff
[ QUOTE ]

Speedkey (I have no idea and I am worried this is spyware)


[/ QUOTE ]
You have a MS "Intelligent" keyboard?

[ QUOTE ]

Tsc (I have no idea)


[/ QUOTE ]
TrendMicro stuff... did you say you had PC-cillin?

[ QUOTE ]

Hpdarc i think this is hewlet packer printer/scannner/coppier software)


[/ QUOTE ]

Yeap

rybones
03-27-2005, 09:04 PM
Wow,

Thanks!!! I do have a followup question for you though. I know you said not to worry about rundll32, but with 3 instances of it running I am worried because of something I just read. I went to the website mentioned by another poster http://www.processlibrary.com and this is what it said about rundll32:

"This program is important for the stable and secure running of your computer and should not be terminated. Note: rundll32.exe is also a process which is registered as the W32.Miroot.Worm. This Trojan allows attackers to access your computer, stealing passwords and personal data. It is a registered security risk and should be removed immediately"

Should I be worried that one of the instances is a virus/spyware?

Also, many of these are non-essential so how do I stop them from starting up when I boot my computer?

Thanks, Ryan

RicP
03-27-2005, 09:14 PM
Online Scan (http://housecall.trendmicro.com/)

Never said what OS but go to Start, Run and type in msconfig and hit enter

Go to the start up tab and "deselect" items you don't want to start at boot time.

Run the Online scan first.... if one of the "rundll"'s is a worm it'll be detected.

PhilipBass
03-27-2005, 09:26 PM
I am far from an expert, but I suggest you do the following.

1. Re-install windows from scratch. Re-format your hard drive to NTFS.

2. Download all the windows updates from microsoft.com

3. Install a firewall and virus protection. I use e-trust. It's not free, but it's worth it.

4. Download spybot, adaware, microsoft spyware removal, spywareblaster, and spywareguard. These are all free.

5. Update everything I suggested you download and run it.
Spyware accumulates on unprotected computers without being firewalled THE VERY SECOND they're connected to the internet.

6. After everything is set up, look up how much memory is in your computer. Consider upgrading memory to your computer's full capability.

7. Someone may have a better response.

microbet
03-27-2005, 10:45 PM
Citanul,

When you want to write this type of post the proper way to do it is the following:

"I think you'll find the answer here. (http://www.fuckinggoogleit.com) "

----
I'm not a mean bastard like citanul, so I wouldn't do that.

KenProspero
03-27-2005, 11:11 PM
msconfig should work. I agree

Paul2432
03-27-2005, 11:22 PM
I would suggest taking a look at the security forum at www.techguy.org (http://www.techguy.org) These guys have been very helpful to me in the past.

Paul