Should there be such a file as "rundll32.EXE"???

[DannyBoy]

Im sure there is a rundll32.dll but i didnt know there was an EXE version of the file?

I know certain trojans use system filenames such as this to try and cloak themselves.

Im very worried about this as it doesnt appear on any of my other Win XP machines.

Any ideas?

Dan

 

[IamDavid]

I don't have one...

 

[DannyBoy]

Originally posted by: IamDavid
I don't have one...

Exactly my point, none of my other WinXP Machines have it either.

Anyone else who can back this up?

Perhaps a windows expert?

Maybe someone that helped design and code Win NT's platform?

Help please im really concerned 🙁

 

[IamDavid]

Hey, I was wrong. I do have a "rundll32.EXE" file in my windows\sys32.. Its not listed in the running processes though..

 

[Doh!]

It starts when you use windows components (i.e., start "Add/Remove Programs" in control panel, and you'll see it as a running process).

 

[rbayer]

I've got it in C:\windows under Win98SE. My guess would be that the .exe is what powers the dll as dlls can't be executed by themselves. Again, it's just a guess.

 

[DannyBoy]

Well even if im running a Windows Process on another machine, ive just checked and the file isnt there on any others, other than mine 🙁

Also it seems to have itsefl open twice on my machine 😕

I dont trust it :|

Well im going to re-format and install so if it continues I suppose it must be ok.

Laterz

 

[Mooncalf]

I'm on a new build that just has XP Pro, SP1 and critical updates, DirectX 9, 2.03 and 41.09 drivers and I have one in the windows/sys32 folder. nVidia control panel uses it on launch for me.

 

[stevewm]

RunDll32.exe is a integral part of the OS. Its used to actually execute functions/sections in DLLs.


MrFiTTy - There are many reasons RunDll32.exe is in your process list. Many applications use it, and so do many drivers. Personally I would not go through the hassle of a re-install just because its in there! There is no reason to!

Check what programs you have running at startup (use MSCONFIG)...

 

[DannyBoy]

Well it appears nView is using one Rundll32.exe, but as for the other there is something called CMI which is trying to run.

I have a feeling thats sumthing to do with Audio.

I have an SBLive 5.1 & onboard AC97 audio so ??

Any ideas?

Dan

 

[Mooncalf]

I would find the file name and type it in to Google. I have had good luck finding what stuff is that way.