5 Replies Latest reply on Aug 4, 2015 2:42 PM by exbrit

    Numerous rundll32.exe and rundll32.exe *32 Processes


      On some of our Windows Server 2008 R2 Enterprise virtual servers, in Windows Task Manager, we are seeing multiple instances of the following:


      Image Name                Memory                         Command Line

      rundll32.exe                1,172 K (varies)            rundll32.exe notesins.dll,UninstallCustomAction 0

      rundll32.exe *32        1,540 K (varies)            C:\Windows\SysWOW64\rundll32.exe notesins.dll,UninstallCustomAction 0


      When I say multiple, I mean anywhere between 50-300 instances of these Processes. Although Performance doesn't always suffer, when it does, it will spike to 100% CPU Usage or 100% Physical Memory, which makes it impossible to work on the server.  Also, Agent to Server communication fails on some servers.  We have uninstalled/reinstalled DLP, and the FramePkg, but these only resolve the problem temporarily.


      Has anyone else experience this issue?  What caused it?  What did you do to resolve it?





      McAfee HBSS Engineer

      ePO 4.6, Agent 4.5, HIP 8.0, SA 2.0, ABM 3.5, SC 5.1, VSE 8.8, MSP 3.0, VSE Linux 1.9, BE 6.2, PA 6.2