解决Comodo报告“rundll32后台运行dll”的问题

cocoacc

这两天用回comodo firewall 3了，发现comodo报告rundll32在后台运行其他程序（之前用comodo firewall 3时没遇到），简单搜了一下看到卡饭的同学也有问这个问题不过没有找到一个确切的答案，于是又google了几次， 发现了comodo论坛的帖子，感觉比较靠谱
问题的根源是ms会在后台收集用户体验数据，即使你不参加用户体验增强计划，也只是做到不会上传你的数据，但仍然会扫描你的程序，而启动这个rundll32的是系统的任务计划，所以只要修改任务计划的设置就可以解决了

操作步骤
1.在开始菜单输入搜索关键词“任务”，运行“任务计划程序”
2.依次选择左侧的 任务计划程序库->Microsoft->Windows->Application Experience
3.你会看到AitAgent和ProgramDataUpdater两个任务，在ProgramDataUpdater上右键选择“禁用”
4.重启机器

原帖地址：http://forums.comodo.com/defense-sandbox-help-cis/defense-alerts-rundll32exe-is-trying-to-execute-different-dll-exe-files-t40265.0.html;msg384911#msg384911

The Comodo rundll32.exe alerts were driving me nuts....
Running malware/spyware scanners etc. will not resolve this problem as the cause is with Microsoft Windows 7 collecting customer data:
I found this resolution on an Everybody Geek Blog:

"Why do you get these warnings?
Whenever your computer is idle, Windows 7 collects program telemetry information that is used for the Microsoft Customer Experience Improvement Program, if opted-in.
This information is collected, even if you selected not to participate in the Microsoft Customer Experience Improvement Program. The information is simply not used.

How do I fix this?
Stopping these warnings about rundll32.exe to pop up is very easy. All you have to do is disable the scheduled task that is responsible for collecting program telemetry information.

Open the Task Scheduler
•   Click the Start button and enter 'Task Scheduler' in the search box
•   Click 'Task Scheduler'
or
•   Open Start => Control Panel
•   Select 'System and Security'
•   Under Administrative Tools, select 'Schedule Tasks'
Disable the scheduled task
•   In the Task Scheduler, navigate to: Task Scheduler Library => Microsoft => Windows => Application Experience
•   You should see two scheduled tasks: AitAgent and ProgramDataUpdater
•   Right click 'ProgramDataUpdater' and select 'disable'
•   Reboot your computer

That's all. No more Defense+ warnings about rundll32.exe trying to execute different dll files.
Posted by Everybody Geek"

My pc is now free of these rundll32.exe alerts
Many thanks to Everybody Geek

e4500

楼主翻译有误!不过比我强!感谢分享!

je-eee

止前没有这个问题，不过文章还是收藏备查。。

cocoacc

回复2楼：
可否说明一下错误具体在哪，我修改一下

slm513

回复 1楼 cocoacc 的帖子

应该是win7系统吧？其实win7下面的计划任务只留4个即可，其余的都可以禁用

cocoacc

回复 5楼 slm513 的帖子

恩，我是windows7系统，请问是哪4个任务？

slm513

回复 6楼 cocoacc 的帖子



水印很烦人啊
下面两个是：SystemTask和UserTask

cocoacc

回复 7楼 slm513 的帖子

感谢大侠的指点，有两个疑问
1.图片里这几个任务计划是都显示在一起的，而我的分散在好几个文件夹里了，请问怎么做到
2.有很多的任务计划，一下关到只有四个，对使用有影响吗，需要注意哪些问题

slm513

回复 8楼 cocoacc 的帖子

1.你把其他的计划都禁用了这几个自然就显示在一起了
2.没有任何影响，我已经这样很久了，放心吧

cocoacc

谢谢slm513大侠解答！感谢lorchid大侠加人气！