Suspicious "rundll32.exe -localserver ***" running in Task Manager, possibly a network worm

[Abdulqadir Aliyev]

My PC is running Windows 10 21H2 Build 19044.2130 (or 19045.2130, I don't remember). I was gone and put my laptop on sleep, when I finally came back after some time, I saw rundll32.exe running in Task Manager. I know that rundll32 is a Windows component commonly used to run DLL files as apps (advanced information, don't worry if you don't understand it). Normally I see rundll32.exe with command line like this: rundll32.exe DllFileName.dll,Something. Although, rundll32.exe this time has command line equal to rundll32.exe -localserver *some guid, like 71eec927-27c0-466d-954d-e61f81be3d5d (I rand

Continue reading...