I recently found there are always two instance of rundll32.exe running on my computer. I was able to retrieve info about modules that are using them, but what are these modules? Am I infected by a hard to remove virus ? Or worse, my computer is hacked?
Image Name PID Modules
========================= ======== ============================================
rundll32.exe 2892 ntdll.dll, wow64.dll, wow64win.dll,
wow64cpu.dll
rundll32.exe 2956 ntdll.dll, kernel32.dll, KERNELBASE.dll,
USER32.dll, GDI32.dll, LPK.dll, USP10.dll,
msvcrt.dll, imagehlp.dll, ADVAPI32.dll,
sechost.dll, RPCRT4.dll, IMM32.DLL,
MSCTF.dll, saHook.dll, ole32.dll,
OLEAUT32.dll, uxtheme.dll, dwmapi.dll,
CRYPTBASE.dll, CLBCatQ.DLL, CRYPTSP.dll,
rsaenh.dll, RpcRtRemote.dll, HcApi.dll,
HcThe.dll