MajorGeeks Support Forums

Go Back   MajorGeeks Support Forums > ----------= PC, Desktop and Laptop Support =---------- > Software
Register FAQ Members List Calendar Casino Mark Forums Read

Software Software such as operating systems like Windows XP, Windows Vista, Windows 7 etc., or specific programs.


Reply
 
Thread Tools Display Modes
  #1  
Old 08-10-11, 18:03
parrotmania parrotmania is offline
Private First Class
 
Join Date: Apr 2009
Location: illinois
Posts: 53
Thanks: 6
Thanked 0 Times in 0 Posts
Wink Suspicious files in Task Manager - No user name, description

In Task Manager I have a few files that, when I right click, will not Open File Location. Each of these - below - list no user name nor description.

csrss.exe, rundll32.exe, winlogon.exe

I always have 2 rundll32.exe files running, but 1 file cannot be found, via Task Manager.

How do I get to these files?

I have Windows 7 Enterprise and an HP DV9700 laptop. I am very familiar with navigating XP, but new to W7.

Thanks!
Reply With Quote
Sponsored links
  #2  
Old 08-10-11, 19:01
Bugballou's Avatar
Bugballou Bugballou is offline
Major Geek
 
Join Date: Apr 2007
Location: Central Florida
Posts: 1,058
Thanks: 0
Thanked 98 Times in 94 Posts
Default Re: Suspicious files in Task Manager - No user name, description

csrss.exe and winlogon.exe are probably legitimate system32 files, you may want to start by looking at start>run>msconfig, the rundll32.exe are probably listed there with file and registry location. An example found here: http://www.bleepingcomputer.com/star...rtup-3803.html
Reply With Quote
  #3  
Old 08-11-11, 02:33
thisisu's Avatar
thisisu thisisu is offline
Malware Consultant
 
Join Date: Apr 2006
Location: Houston, TX
Posts: 8,175
Thanks: 270
Thanked 1,437 Times in 1,356 Posts
Default Re: Suspicious files in Task Manager - No user name, description

Quote:
How do I get to these files?
You can find all of these files in: c:\windows\system32
Reply With Quote
  #4  
Old 08-11-11, 17:29
parrotmania parrotmania is offline
Private First Class
 
Join Date: Apr 2009
Location: illinois
Posts: 53
Thanks: 6
Thanked 0 Times in 0 Posts
Default Re: Suspicious files in Task Manager - No user name, description

The command line is blank, in Task Manager, for the mysterious rundll32.exe file. It has no info as to where it is located. The ONLY info is that it is a
2,140 k sized file

If I knew where "Search" is in Windows7 I could type in rundll32 and find all related files? Search is easy to find on XP, but haven't located yet on W7.
Reply With Quote
  #5  
Old 08-11-11, 18:29
thisisu's Avatar
thisisu thisisu is offline
Malware Consultant
 
Join Date: Apr 2006
Location: Houston, TX
Posts: 8,175
Thanks: 270
Thanked 1,437 Times in 1,356 Posts
Default Re: Suspicious files in Task Manager - No user name, description

Quote:
Originally Posted by parrotmania View Post
The command line is blank, in Task Manager, for the mysterious rundll32.exe file. It has no info as to where it is located. The ONLY info is that it is a
2,140 k sized file

If I knew where "Search" is in Windows7 I could type in rundll32 and find all related files? Search is easy to find on XP, but haven't located yet on W7.
While on your desktop, you can press F3 to open Search.
Or, from the start Menu:


What do you mean command line is blank?
Try the below:

start > cmd >
command prompt opens up
type in:
Quote:
dir c:\windows\system32\rundll32*
press enter
Reply With Quote
Sponsored links
  #6  
Old 08-11-11, 18:45
parrotmania parrotmania is offline
Private First Class
 
Join Date: Apr 2009
Location: illinois
Posts: 53
Thanks: 6
Thanked 0 Times in 0 Posts
Default Re: Suspicious files in Task Manager - No user name, description

Ok, I used the cmd prompt and it says there is only 1 file for rundll32. There are 2 files in Task Manager. My Task Manager says "Command Line" above all the file locations, like "C://ProgramFile...".

I have used that Search before, as you suggested, many times and it is useless. Apparently you can't just type in a file, like you can in XP, and it finds it.

I typed in rundll32.exe and rundll32, etc, and I get "No items match your search". So it doesn't bring up files. Either it isn't as direct as XP's Search and/or you cannot just type in a file and it brings up info. I cannot imagine what else what one would have to do to have it bring results?
Reply With Quote
  #7  
Old 08-11-11, 20:58
Just Playin's Avatar
Just Playin Just Playin is online now
Major Geek
 
Join Date: May 2004
Location: At the bottom of Bass Lake
Posts: 3,882
Thanks: 67
Thanked 316 Times in 273 Posts
Default Re: Suspicious files in Task Manager - No user name, description

Quote:
Originally Posted by parrotmania View Post
Ok, I used the cmd prompt and it says there is only 1 file for rundll32. There are 2 files in Task Manager. My Task Manager says "Command Line" above all the file locations, like "C://ProgramFile...".
There is only one rundll32.exe file but more than one instance of the program can run at once. This link has more info on the purpose of rundll32 and how to see what it is doing:
http://www.howtogeek.com/howto/windo...is-it-running/
(It's for Vista but it sill applies to Windows 7 - I checked.)
__________________
The most dangerous man in the world is the one with nothing to lose.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
no desktop icons, start button, taskbar or new task tab on task manager yonajacksonwinston Malware Removal 1 11-20-09 05:52
Suspicious Files avilo4u Malware Removal 3 01-04-06 23:31
Suspicious .exe files in Task Manager Vantage_Point Malware Removal 58 04-15-05 00:06


All times are GMT -5. The time now is 21:56.

MajorGeeks.Com Menu

MajorGeeks.Com \ All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ NEW! PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads

MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds


All content Copyright MajorGeeks.com source code Powered by vBulletin® Version 3.8.4
Copyright © 2009 vBulletin Solutions, Inc. All rights reserved.
Ad Management by RedTyger