Tuesday, October 20, 2009

Rundll32.exe??? Why do I have 3 of rundll32.exe? Are 2 of them viruses?

I have 3 rundll32.exe. I am worried that my computer has been infected by virus. Here are the following.



Rundll32.exe



Rundll32.exe



Rundll32.exe



As you can see, they are all the same except one thing. Memory usage and PID. I am not sure which 2 are the viruses, if you have a Rundll32.exe in your processes, then can you tell me how much K and PID it takes?



Oh and here are the K's and PIDs for the Rundll.exe



1. Rundll32.exe...1720PID...4 428K



2. Rundll32.exe...1556PID...4 524K



3. Rundll32.exe....432PID.....5 840K



Oh and if you only have one Rundll32.exe tell me which one of these is right. THANKS



Rundll32.exe??? Why do I have 3 of rundll32.exe? Are 2 of them viruses?auto protect



Rundll32 is a host program that is part of windows...



What it does is it lets you call program functions that are in a DLL without having a whole other program to do it.



Viri and trojans do use this method to run processes under this ananymous host program...



Same thing happens with scvhost.exe as well...they can run files that dont normally run like functions in a DLL



Normally if you have a newer computer (xppro or later) then this file should not be running at all times, mostly it runs during a program setup when it will calls system32.dll for some registration functions.



You can search the registry and get more information there.

No comments:

Post a Comment