RunDLL32.exe

92VINCE · 09-12-2005, 11:33 AM

How do I tell if the RunDLL32.exe running is the virus or the legitimate executable?

09-12-2005, 02:10 PM

Google search will come up with a lot of results. Also check out www.sysinfo.org

Geekgirl · 09-13-2005, 05:50 AM

The rundll32.exe file is located in the c:\windows\System32 folder. In other cases, rundll32.exe is a virus, spyware, trojan or worm!

92VINCE · 09-13-2005, 09:21 AM

So if RunDLL32.exe is in the c:\Windows\system32 file then it's fine, but if it is elsewhere it is a virus/worm/trojan/malevolent?

Geekgirl · 09-13-2005, 09:29 AM

To my knowledge yes

You may want to have an analyst take a look at a HiJackThis Log for you.
Here are the instructions if you decide to do that. Make sure you post the HJT log in the correct forum. (link provided below)

Download and install: HiJackThis.

(Always create a Folder for HiJackThis anywhere but your Temp/Temporary Internet Folders or Desktop. A good place to make a folder would be in My Documents, as this is where it will save the backup files needed if there's a problem.)

Then doubleclick HijackThis.exe, and hit "Do A System Scan And Save Log". Make sure all Windows and Browsers are closed.
When the scan is finished, best to save your text file in the same folder as where you put HiJackthis.

IMPORTANT!!!
Create a New Topic and include a fresh HJT log in the HiJackThisLog Help Forum and Copy/Paste the info from your saved Hijackthis log file into your new topic.

09-12-2005, 11:33 AM	#1 (permalink)
92VINCE Registered User Join Date: Oct 2004 Posts: 44 OS: Win98	RunDLL32.exe How do I tell if the RunDLL32.exe running is the virus or the legitimate executable?

09-13-2005, 05:50 AM	#3 (permalink)
Geekgirl Assistant Manager, Microsoft Support Join Date: Jan 2005 Location: Six-burgh, Pennsylvania Posts: 14,171 OS: XP Home SP3/XP Pro SP3/Vista Ultimate SP2/Windows 7 Professional	The rundll32.exe file is located in the c:\windows\System32 folder. In other cases, rundll32.exe is a virus, spyware, trojan or worm! __________________ Compare NOD32 to your current antivirus and anti-spyware solution, HERE How to back up and restore the registry in Windows XP and Windows Vista Or Windows 7 How to back up and restore the registry in Windows 98/ ME / NT 4.0 / 2000 I DO NOT ACCEPT EMAILS AND WILL NOT REPLY TO THEM !!!!! TSF DOES NOT SUPPORT ASSISTANCE THROUGH EMAIL OR PRIVATE MESSAGES, PLEASE KEEP ALL QUESTIONS IN THE OPEN FORUM *The Pittsburgh Steelers - 6 X Superbowl Champions !!!!!!!* *The Pittsburgh Penguins - 2009 Stanley Cup Champions !!!!!!!*

09-13-2005, 09:21 AM	#4 (permalink)
92VINCE Registered User Join Date: Oct 2004 Posts: 44 OS: Win98	I think I understand So if RunDLL32.exe is in the c:\Windows\system32 file then it's fine, but if it is elsewhere it is a virus/worm/trojan/malevolent?

09-13-2005, 09:29 AM	#5 (permalink)
Geekgirl Assistant Manager, Microsoft Support Join Date: Jan 2005 Location: Six-burgh, Pennsylvania Posts: 14,171 OS: XP Home SP3/XP Pro SP3/Vista Ultimate SP2/Windows 7 Professional	To my knowledge yes You may want to have an analyst take a look at a HiJackThis Log for you. Here are the instructions if you decide to do that. Make sure you post the HJT log in the correct forum. (link provided below) Download and install: HiJackThis. (Always create a Folder for HiJackThis anywhere but your Temp/Temporary Internet Folders or Desktop. A good place to make a folder would be in My Documents, as this is where it will save the backup files needed if there's a problem.) Then doubleclick HijackThis.exe, and hit "Do A System Scan And Save Log". Make sure all Windows and Browsers are closed. When the scan is finished, best to save your text file in the same folder as where you put HiJackthis. IMPORTANT!!! Create a New Topic and include a fresh HJT log in the HiJackThisLog Help Forum and Copy/Paste the info from your saved Hijackthis log file into your new topic. __________________ Compare NOD32 to your current antivirus and anti-spyware solution, HERE How to back up and restore the registry in Windows XP and Windows Vista Or Windows 7 How to back up and restore the registry in Windows 98/ ME / NT 4.0 / 2000 I DO NOT ACCEPT EMAILS AND WILL NOT REPLY TO THEM !!!!! TSF DOES NOT SUPPORT ASSISTANCE THROUGH EMAIL OR PRIVATE MESSAGES, PLEASE KEEP ALL QUESTIONS IN THE OPEN FORUM *The Pittsburgh Steelers - 6 X Superbowl Champions !!!!!!!* *The Pittsburgh Penguins - 2009 Stanley Cup Champions !!!!!!!*

09-12-2005, 02:10 PM	#2 (permalink)
PurpleSky Guest Posts: n/a OS:	Google search will come up with a lot of results. Also check out www.sysinfo.org