wextract_cleanup0 rundll32.exe
| Item Name: | wextract_cleanup0 | File Name: | rundll32.exe |
| Usefulness Rating: | |||
| Users Opinions: | |||
| Paul T |
|
0 0 Report Abuse | |
| This is virus if in C:\\WINNT\\system32\\advpack.dll,DelNodeRunDLL32 C:\\DOCUME~1\\mike\\LOCALS~1\\Temp\\IXP000.TMP\\ Registry or Startup Folder: HKLM: Run Onc | |||
| Gary O. |
|
0 0 Report Abuse | |
| I don't know if this is the bastard that caused me untold hardships running svghost.exe multiple times, eating up my CPU cycles, but if it is, thanks for alerting me. | |||
| cardoso |
|
1 0 Report Abuse | |
| how to delete it? Como deletar ele? | |||
| Dorival | 0 0 Report Abuse | ||
| Do que se trata esta entrada? De qual programa? O que ele faz? | |||
| Arkangeln |
|
0 0 Report Abuse | |
| No hay peligro en esta entrada | |||
| elcazador65 |
|
0 0 Report Abuse | |
| The "wextract_cleanup0" is a cleanup command used typically by Microsoft's IExpress/WExtract self-extracting executables. Up until recently, typical Windows Update packages utilized the WExtract library (and still do for certain things -- eg. MSN, WMP installations etc). When the SFX is run, it creates a temp setup folder, typically "IXP0000.tmp", which then gets deleted automatically after installation completes. The runonce command you've posted is the command used to delete this folder. PS - AdvPack.dll is not malware or spyware, but an Internet Explorer file which contains commands for running "AdvancedINF" setup scripts. Nothing to worry about here. | |||
