Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: rundll32.exe processing srrstr.dll?

04 Jul 2010   #1
Carbonyl

Windows 7 RTM
 
 
rundll32.exe processing srrstr.dll?

Hi everyone. Just a quick question: Is anyone familiar with this phenomenon? I left my computer idle to work in the kitchen for about 25 min, and when I returned I found that rundll32.exe was running and processing something over and over again. I checked Process Explorer, and found it was running something called srrstr.dll - Which apparently came digitally signed from Microsoft (though I guess that's easy to forge). I'm not sure what it was doing, but it chugged away for an additional ten minutes before it closed itself. Very strange.

Can anyone please advise if this is a nasty? NOD32 and Malwarebytes didn't catch it, if it is. Thank you.


My System SpecsSystem Spec
.

04 Jul 2010   #2
Corrine

Windows 7 & Windows Vista Ultimate
 
 

Hi, Carbonyl.

srrstr.dll is part of the System Restore process. If a checkpoint was being created, that period of time is a bit lengthy. You may want to check to see if the time the last checkpoint was created approximately matches the time of your investigation.
My System SpecsSystem Spec
05 Jul 2010   #3
A Guy

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
 
 

Quote   Quote: Originally Posted by Carbonyl View Post
Which apparently came digitally signed from Microsoft (though I guess that's easy to forge).
Maybe Corrine can confirm, but I don't think it is "easily done"...perhaps not impossible, but very complex. A Guy
My System SpecsSystem Spec
.


05 Jul 2010   #4
Corrine

Windows 7 & Windows Vista Ultimate
 
 

For background on Digital Certificates, see Microsoft KB Article 195724: Description of Digital Certificates

Note the affected software indicated in this Security Advisory is "none". Microsoft Security Advisory (961509): Research proves feasibility of collision attacks against MD5:

Quote:
General Information

Overview

Purpose of Advisory: To assist customers in assessing the impact of this research announcement on their current certificate deployments.

Advisory Status: Issue Confirmed. No Security Update Planned.
Recommendation: Review the suggested actions and configure as appropriate.
References Identification:
Microsoft Knowledge Base Article 961509

This advisory discusses the following software.
Affected Software: None.
My System SpecsSystem Spec
05 Jul 2010   #5
Bill2

Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86
 
 

You can configure when and how often system restore runs, through the Task Scheduler.

Change How Often System Restore Creates Restore Points in Windows 7 or Vista - How-To Geek
My System SpecsSystem Spec
Reply

 rundll32.exe processing srrstr.dll?




Thread Tools





Similar help and support threads
Thread Forum
How can i improve the processing speed of PC
Hi, I Used my PC from around last 3 years, and i never formatted it. But recently it takes too much time to booting and the processing speed is very slow, after fifteen minutes it becomes normal. it had 4 GB ram. So please advice me how can i improve my processing speed.
Hardware & Devices
Antivirus found infection in srrstr.dll
Okay so I have been without a antivirus for quite a while and really needed one so I was able to get Kaspersky, after installing and updating I did a full system scan. In the scan it found 38 virus's thought it wasn't able to finish the scan due to a blue screen error. Of those 38 I was able to...
System Security
How To Fix Rundll32.exe
Have a problem, when I change the clock this happens I think that the problem in this file (rundll32.exe) How do I solve this problem?
BSOD Help and Support
RUNDLL32.exe HELP
Hey im new here and i was hoping you guys can help me out. so i downloaded opera browser and ever since then i would get the rundll32.exe error saying it stopped working. so i look online for some solutions and what i found was for me to go to task manager and go under processes and see if any...
Hardware & Devices
Slow processing after 2 months.
Before 2 half months i installed 7 it was working very smothly but from past few weaks it is working very slow.But each program is working properly but folders take 1.xx seconds to open whil it took .00xxx secods when i installed it plz tell how can i speed it up without reinstalling a fresh copy....
Performance & Maintenance
Process srrstr.dll
Hi, I have been having an issue lately with srrstr.dll that runs under rundll32 . This will randomly start doing whatever its trying to do and use up 25% of processor resources until I end the process through task manager. From what I found this has something to do with Windows trying to create a...
General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 03:26.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App