rundll32.exe

Yes, I know it is not a virus by itself, nor should it be deleted for no reason, because it lets you use the control panel, etc.....

I got 4 rundll32.exe running, 2 of each account on my comp. I saw on another site that it may be normal to have more than 1, but my question has more to do to how can we know if they are all "clean" versions without using a viruscan (I ask without one, cuz it may not detect it anyway)?

Many said it has to do where the program is located on your comp, in "windows files" or in "system", and if it appears in tasklist, not task manager (its ok if its there), but really tasklist, theres big chance its a false version or corrupted version.

Can someone demystify all this please. In other words, can someone tell me where the real one is located normally, and where the false ones are located, etc., how to know one from another, things like that.

Thank you

 

Hi kalossimitar!
Welcome to Major Geeks!

RUNDLL32.EXE is normally found under C:\WINDOWS\System32 or C:\WINDOWS\System32\dllcache. There are also many instances of it in the Prefetch folder. If you do a scan of "My Computer", you should be able to locate all instances of RUNDLL32.EXE on your computer. If they are in these folders, they are normal running processes which your computer needs.

There are several ways to distinguish a good file from a bad file which has the same name. One is its location, another its size, and another is by uploading the file to a scanning utility which scans only that one file. Two such places that will scan individual files for you are VirusTotal and jotti

abri