[MsMystic]

Ok I bought my computer in April of 99 Yes I know it's old lol. When I bought it, it was brand new. Over the past year I have had alot of problems, yet since finding this site a few days ago I have been able to fix some of them so I am hoping to get help with this one. I did a search to see what programs were running in the background by hitting cntrl alt delete. I found Rdmrdll when I checked it's properties it got me worried a bit. Here is what it said.
Type: Application Location C:\\WINDOWS Size 18.5KB(18,944 bytes),20,480 bytes used MS-DOS name RDMRDLL.EXE Created Monday July 11, 2005 3:50:22 PM Modified Tuesday, December 12, 1989 10:10:10 AM
In the attributes the boxes for read only hidden and system are checked yet with the system one it does not give the option to uncheck it. The fact that is says it was modified 10 years before I even got the computer has me worried. So anyone have any ideas? They would be greatly appreciated.. Thanks

Edited by MsMystic, 10 August 2005 - 09:52 PM.

[Advertisements]

There are no google hits for this file. Also no RDMRDLL.EXE on my Win98 partition. Are you sure of the file name. Please check again.

[makai]

There are no google hits for this file. Also no RDMRDLL.EXE on my Win98 partition. Are you sure of the file name. Please check again.

[MsMystic]

Ok I downloaded that and after it ran I leep getting a "this program has performed an illegal operation and will close" here is the error details
EVEREST caused a segment not present fault
in module GDI.EXE at 0008:00003cb0.
Registers:
EAX=18a77b9c CS=0557 EIP=00003cb0 EFLGS=00000202
EBX=00000640 SS=288f ESP=00007a80 EBP=00007bc6
ECX=00003abf DS=068f ESI=00000000 FS=0000
EDX=00003abf ES=18df EDI=0000ffff GS=0000
Bytes at CS:EIP:
ff 5e fa 8b f0 ff 76 fe 6a 00 6a 5a 9a 2c 00 4f
Stack dump:
00000000 00000000 0000000a 7b9c269f 016f288f 016f1297 786c7777 642e7973 00007672 00000000 00000000 00000000 00000000 00000000 00000000 00000000
But I did manage to get this info for you.I have Microsoft windows 98 SE
Motherboard CPU type AMD K6-2,5000 MHz (5x100)
Video Adapter Trident Blade3D/MVP4 (63) (8 MB)
Video accelerator Trident Blade 3D i7
Memory 56.0 MB of RAM 52% free
file system and virtual memory 32-bit
No PC Card sockets are installed
I hope that is what you needed. Ok when I do a file search for rdmrdll I find
rdmrdll.exe in C:\\ Windows size 19KB Type Application Modified 12/12/89 10:10:10 am ( this is 10 years before I got my computer)
in the properties section it says version 1.00 description Update monitor Internal name UpdMon Origional filename UpdMon.exe
I do not have the same monitor that came with the computer.. would that have anything to do with it?
Oh yeah the computer is store bought.. it is a compaq presario 7360

Edited by MsMystic, 10 August 2005 - 08:40 PM.

[makai]

Please go here, follow the steps/directions and if your problem persists, please create a post in the Malware forum.

[MsMystic]

After I responded I looked up UpdMon.exe and found out it is a trojan. I have used and tried many different scans and none of them caught it. However. I downloaded a program called super ad blocker and it found 17 infections. Including 3 that I was suspicious of because of files names that only showed up when I hit cntrl alt delete. So far after 3 reboots these files have not shown back up, no pop ups thus far and my computer is running faster than it has in a year. Thank you for trying to help tho. This is the first forum I have been to where help has not only been advertised but actually offered and used. Thank you so much.