Hundreds of rundll32.exe running

Collapse
This topic is closed.
X
X
 
  • Time
  • Show
Clear All
new posts
  • Malnutrition
    PCHF Moderator
    • Jul 2016
    • 7045

    #31
    Ok, I will check these out, I am going to be in and out a lot today, so you may not have a response till much later.

    Comment

    • Malnutrition
      PCHF Moderator
      • Jul 2016
      • 7045

      #32
      [ol]
      [li]Open a command prompt with administrative privileges on the device.[/li][li]Enter the following commands one at a time hitting enter after each.[/li][COLOR=rgb(184, 49, 47)]sc stop dam
      [COLOR=rgb(85, 57, 130)]sc config dam start= disabled
      [/ol]

      [ICODE]Dump: 010524-16468-01.dmp (05.01.2024 07:07:14) Code: 0x14F - PDC_WATCHDOG_TIMEOUT Process: ctfmon.exe, probably caused by: dam.sys Third-party modules in the Raw Stack: KMPDC.sys FAILURE_BUCKET_ID: 0x14F_DAM_IMAGE_dam.sys[/ICODE][/COLOR][/COLOR]

      Comment

      • maxim123
        PCHF Member
        • Aug 2017
        • 466

        #33
        Originally posted by Malnutrition
        [ol]
        [li]Open a command prompt with administrative privileges on the device.[/li][li]Enter the following commands one at a time hitting enter after each.[/li][COLOR=rgb(184, 49, 47)]sc stop dam
        [COLOR=rgb(85, 57, 130)]sc config dam start= disabled
        [/ol]

        [ICODE]Dump: 010524-16468-01.dmp (05.01.2024 07:07:14) Code: 0x14F - PDC_WATCHDOG_TIMEOUT Process: ctfmon.exe, probably caused by: dam.sys Third-party modules in the Raw Stack: KMPDC.sys FAILURE_BUCKET_ID: 0x14F_DAM_IMAGE_dam.sys[/ICODE]
        [/COLOR][/COLOR]
        [COLOR=rgb(184, 49, 47)][COLOR=rgb(85, 57, 130)]
        Hi, did it, but the content in the “code” is just info and nothing to do about it right?[/color][/color]

        Comment

        • maxim123
          PCHF Member
          • Aug 2017
          • 466

          #34
          Hi, there seems to be serious issues with BSOD. First time turning on the laptop today. It gave BSOD in welcome screen. Then restarted immediately, couldn’t even see what error, and gave BSOD again. then restarted immediately.
          It went to BIOS screen, I just clicked save changes and exit and it went to troubleshoot option in the windows logo screen, where I clicked continue to win 11, and it just opened now.
          I checked minidump immediately but the file there still shows one from January and not the recent BSOD logs.

          the minidump creation is enabled, maybe because the pc immediately restarts after the BSOD, in 0% of error collection?

          [ATTACH type=“full”]13872[/ATTACH]

          Comment

          • maxim123
            PCHF Member
            • Aug 2017
            • 466

            #35
            I have disabled the automatic restart in hopes of knowing what the error is the next time the BSOD appears again.

            Comment

            • Malnutrition
              PCHF Moderator
              • Jul 2016
              • 7045

              #36
              Ok. I had to go out of town for work. I’ll be back around Sunday morning. Sorry for any inconvenience.

              Comment

              • maxim123
                PCHF Member
                • Aug 2017
                • 466

                #37
                Originally posted by Malnutrition
                Ok. I had to go out of town for work. I’ll be back around Sunday morning. Sorry for any inconvenience.
                No no, I should be thankful that you are willing to help. No inconvenience at all. Please take your time.

                Comment

                • maxim123
                  PCHF Member
                  • Aug 2017
                  • 466

                  #38
                  I didn’t BSOD yesterday, but got today right at the start. It seems to usually happen when starting laptop for the first time. and doesn’t happen throughout the day.

                  the error collection doesn’t go beyond 0% even though I let it run for a while.

                  [ATTACH type=“full” alt=“1720335658656.png”]13874[/ATTACH]

                  Comment

                  • maxim123
                    PCHF Member
                    • Aug 2017
                    • 466

                    #39
                    not sure if it is related, but explorer stops responding randomly (not often but maybe once or twice a day sometimes). When I end it in task manager or restart it, it takes some time, and even task manager stops responding for a while. CPU usage also spikes a little at that time.

                    Comment

                    • Malnutrition
                      PCHF Moderator
                      • Jul 2016
                      • 7045

                      #40
                      sorry for the delay, work took longer than expected.

                      Download AV block remover .
                      Unzip to your C:\Windows\System32 folder.
                      To do that hit the windows key and R at the same time, copy and paste C:\Windows\System32 into the run box hit ok.
                      Drag and drop–Unzip the program inside this folder.
                      Right click run as admin and follow the instructions. If it does not start, rename the AVbr.exe file to, for example, AV_br.exe
                      Click yes to reset hosts file.
                      After the machine reboots then there will be a logfile in the new folder created, post that please.

                      Comment

                      • Malnutrition
                        PCHF Moderator
                        • Jul 2016
                        • 7045

                        #41
                        After the above, then a repair is in order.

                        This tutorial will show you how to do a repair install of Windows 11 by performing an in-place upgrade without losing anything. If you need to repair or create a new recovery partition or having problems with the Windows 11 operating system on your PC, and the usual solutions will not fix it...

                        Comment

                        • maxim123
                          PCHF Member
                          • Aug 2017
                          • 466

                          #42
                          Originally posted by Malnutrition
                          sorry for the delay, work took longer than expected.

                          Download AV block remover .
                          Unzip to your C:\Windows\System32 folder.
                          To do that hit the windows key and R at the same time, copy and paste C:\Windows\System32 into the run box hit ok.
                          Drag and drop–Unzip the program inside this folder.
                          Right click run as admin and follow the instructions. If it does not start, rename the AVbr.exe file to, for example, AV_br.exe
                          Click yes to reset hosts file.
                          After the machine reboots then there will be a logfile in the new folder created, post that please.
                          Hi, I couldn’t directly extract the zip file in sys32 folder cause it said cannot access output file, access is denied. then i extracted it outside and pasted it to sys32 folder.

                          but got this error.

                          [ATTACH type=“full”]13885[/ATTACH]

                          Comment

                          • Malnutrition
                            PCHF Moderator
                            • Jul 2016
                            • 7045

                            #43
                            Can you extract/unzip the program in your photos folder please. This program was designed to be not be ran from desktop or my documents folder.

                            Comment

                            • maxim123
                              PCHF Member
                              • Aug 2017
                              • 466

                              #44
                              Originally posted by Malnutrition
                              Can you extract/unzip the program in your photos folder please. This program was designed to be not be ran from desktop or my documents folder.
                              After unzipping to the photos folder, I have to copy it to system32 folder right?
                              I did that just now and gives the same error. Even downloaded it anew to users\username\pictures folder and extracted it there since I couldn’t extract in sys32 folder and pasted it to sys32 folder and ran it. but the same error.

                              shows this when I try to extract it in sys32.

                              [ATTACH type=“full”]13908[/ATTACH]

                              Comment

                              • Malnutrition
                                PCHF Moderator
                                • Jul 2016
                                • 7045

                                #45
                                Just run it from desktop if nothing else works.

                                Go ahead with the repair install as well.

                                Comment

                                Working...