Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: rundll32.exe processing srrstr.dll?

04 Jul 2010   #1

Windows 7 RTM
rundll32.exe processing srrstr.dll?

Hi everyone. Just a quick question: Is anyone familiar with this phenomenon? I left my computer idle to work in the kitchen for about 25 min, and when I returned I found that rundll32.exe was running and processing something over and over again. I checked Process Explorer, and found it was running something called srrstr.dll - Which apparently came digitally signed from Microsoft (though I guess that's easy to forge). I'm not sure what it was doing, but it chugged away for an additional ten minutes before it closed itself. Very strange.

Can anyone please advise if this is a nasty? NOD32 and Malwarebytes didn't catch it, if it is. Thank you.

My System SpecsSystem Spec
04 Jul 2010   #2

Windows 7 & Windows Vista Ultimate

Hi, Carbonyl.

srrstr.dll is part of the System Restore process. If a checkpoint was being created, that period of time is a bit lengthy. You may want to check to see if the time the last checkpoint was created approximately matches the time of your investigation.
My System SpecsSystem Spec
05 Jul 2010   #3
A Guy

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1

Quote   Quote: Originally Posted by Carbonyl View Post
Which apparently came digitally signed from Microsoft (though I guess that's easy to forge).
Maybe Corrine can confirm, but I don't think it is "easily done"...perhaps not impossible, but very complex. A Guy
My System SpecsSystem Spec

05 Jul 2010   #4

Windows 7 & Windows Vista Ultimate

For background on Digital Certificates, see Microsoft KB Article 195724: Description of Digital Certificates

Note the affected software indicated in this Security Advisory is "none". Microsoft Security Advisory (961509): Research proves feasibility of collision attacks against MD5:

General Information


Purpose of Advisory: To assist customers in assessing the impact of this research announcement on their current certificate deployments.

Advisory Status: Issue Confirmed. No Security Update Planned.
Recommendation: Review the suggested actions and configure as appropriate.
References Identification:
Microsoft Knowledge Base Article 961509

This advisory discusses the following software.
Affected Software: None.
My System SpecsSystem Spec
05 Jul 2010   #5

Windows 7 x64 pro/ Windows 7 x86 Pro/ XP SP3 x86

You can configure when and how often system restore runs, through the Task Scheduler.

Change How Often System Restore Creates Restore Points in Windows 7 or Vista - How-To Geek
My System SpecsSystem Spec

 rundll32.exe processing srrstr.dll?

Thread Tools

Similar help and support threads
Thread Forum
Using why to much processing power
My computer has recently been using up any where between 2-4 gbs of ram while idling, and up to 6 gbs while watching a video or playing a game. My computer has never had an issues running games or programs before, its an i7 4770 3.50 ghz, 8 gb ddr3 ram (2 4 gb sticks), an evga nivida 770. not sure...
Performance & Maintenance
Dear Experts, My Company have a Desktop Error with some programs. I don't know exactly that this error because of low RAM or no? because at the first time, this Computer Running with 8 GB of RAM and After that, one slot was error so i took one RAM out so it's remaining with 6GB that this compute...
General Discussion
Antivirus found infection in srrstr.dll
Okay so I have been without a antivirus for quite a while and really needed one so I was able to get Kaspersky, after installing and updating I did a full system scan. In the scan it found 38 virus's thought it wasn't able to finish the scan due to a blue screen error. Of those 38 I was able to...
System Security
How To Fix Rundll32.exe
Have a problem, when I change the clock this happens I think that the problem in this file (rundll32.exe) How do I solve this problem?
BSOD Help and Support
Process srrstr.dll
Hi, I have been having an issue lately with srrstr.dll that runs under rundll32 . This will randomly start doing whatever its trying to do and use up 25% of processor resources until I end the process through task manager. From what I found this has something to do with Windows trying to create a...
General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 02:28.
Twitter Facebook Google+