Data Realms Fan Forums
http://45.55.195.193/

problems with rundlll32.exe
http://45.55.195.193/viewtopic.php?f=7&t=14285
Page 1 of 1

Author:  whitty [ Tue Apr 14, 2009 3:33 am ]
Post subject:  problems with rundlll32.exe

So, I open up Task Manager....


Image



And all that is running. If i try to end it, it says "access denied". I am the computer admin.
There are no noticeable problems with my computer.
Anyone care to interpret?

Author:  411570N3 [ Tue Apr 14, 2009 4:10 am ]
Post subject:  Re: problems with rundlll32.exe

It just means a lot of programs are using .dll files...

Author:  mail2345 [ Tue Apr 14, 2009 6:35 am ]
Post subject:  Re: problems with rundlll32.exe

Click show process from all users if you want to kill it anyway.

UAC reasons.

Also looks like a lot of those process are not running under his account.
That seems a bit suspicious.

If it were programs being run under his account, won't rundll be under his account, and not some random account.

Also try to check if the path is right.
If it's not in the right folder(Windows/System32 or something) then it's probably a virus.

Author:  411570N3 [ Tue Apr 14, 2009 6:50 am ]
Post subject:  Re: problems with rundlll32.exe

mail2345 wrote:
Click show process from all users if you want to kill it anyway.

UAC reasons.

Also looks like a lot of those process are not running under his account.
That seems a bit suspicious.

If it were programs being run under his account, won't rundll be under his account, and not some random account.

Also try to check if the path is right.
If it's not in the right folder(Windows/System32 or something) then it's probably a virus.
You could do a scan if you like, but viruses would more likely be run under <Your Username> usernames, not blank or System. It's perfectly normal for there to be a bunch of blank username or system username proccesses.

Author:  mail2345 [ Tue Apr 14, 2009 7:27 am ]
Post subject:  Re: problems with rundlll32.exe

Yes, I know that normally there are a lot of system process, but not all rundll.

Why would an application use rundll as system?

If the virus wanted to protect it self, running as system would be a good idea.

Anyway, there are a good amount of viruses that take up names such rundll32.exe,crss.exe and others to hide.

So it might not be the real rundll.

Author:  411570N3 [ Tue Apr 14, 2009 7:29 am ]
Post subject:  Re: problems with rundlll32.exe

So he has several different viruses all using the same disguise....
Whatever, I still say it's entirely possible nothing's wrong, but I'd scan just in case.
If you don't have anti-virus then you can use this to scan...

Author:  whitty [ Tue Apr 14, 2009 4:10 pm ]
Post subject:  Re: problems with rundlll32.exe

Computer scans itself every night at 3. Nothing ever comes up.

Author:  411570N3 [ Wed Apr 15, 2009 2:17 am ]
Post subject:  Re: problems with rundlll32.exe

Then ignore it...

Author:  Wizard James [ Wed Apr 15, 2009 2:56 am ]
Post subject:  Re: problems with rundlll32.exe

http://technet.microsoft.com/en-us/sysi ... 96645.aspx If you want to know abit more about what each is doing..

Author:  ProjektTHOR [ Wed Apr 15, 2009 2:00 pm ]
Post subject:  Re: problems with rundlll32.exe

Just delete runddl32.exe

Its not a system critical process.

Author:  Ophanim [ Wed Apr 15, 2009 4:53 pm ]
Post subject:  Re: problems with rundlll32.exe

And afterwards we can just have him set fire to his motherboard. You know, maximum idiocy.

Author:  mail2345 [ Thu Apr 16, 2009 5:28 am ]
Post subject:  Re: problems with rundlll32.exe

Process Explorer(what WJ linked to) can show what rundll32.dll is loading, and show what app launched the program.

Should help in identifying if it is a rootkit or glitch.

It is a very useful app.

Page 1 of 1 All times are UTC [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/