Avast WEBforum

Other => General Topics => Topic started by: Scan on October 25, 2009, 11:49:04 AM

Title: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: Scan on October 25, 2009, 11:49:04 AM: I have only one in the task manager

C:/WINDOWS/SYSTEM32/RUNDLL32.EXE
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: cinchez on October 25, 2009, 11:52:43 AM: Try Virustotal (http://www.virustotal.com/)^^

-AnimeLover^^
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: YoKenny on October 25, 2009, 11:56:59 AM: Why don't you ask for help in the AVG forum?
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: Scan on October 25, 2009, 12:02:05 PM: because avast didn't check any thing about it.
Tried Virus total mccaffe said "Heuristic.LooksLike.Trojan.PSW.LdPinch.L" , i would like to know if its safe to Remove this...
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: cinchez on October 25, 2009, 12:04:16 PM: Only 2/40?

"Probably" a FP^^

-AnimeLover^^
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: Scan on October 25, 2009, 12:06:58 PM: I sure hope so...
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: Scan on October 25, 2009, 12:16:14 PM: http://www.mediafire.com/download.php?comywtzy3ra

Here is the File
i did scan it with total scan online

http://www.virustotal.com/analisis/dee53d6d332dadd40c0ce34a425a6c0781f611765dcd4299d869f2b1ee80ae66-1256463776
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: SpeedyPC on October 25, 2009, 12:37:30 PM: You might want to check this out before going to far ;)

http://www.howtogeek.com/howto/windows-vista/what-is-rundll32exe-and-why-is-it-running/ (http://www.howtogeek.com/howto/windows-vista/what-is-rundll32exe-and-why-is-it-running/)
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: Scan on October 25, 2009, 12:39:26 PM: I am running XP Thought
i did hear about this file being important

but how do i know its not affected by some thing or its Modified or not? ???
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: SpeedyPC on October 25, 2009, 12:41:03 PM: Good question ??? ??? ??? ??? I really cannot answer this maybe some can.

Or look in here http://www.processlibrary.com/directory/files/rundll32/ (http://www.processlibrary.com/directory/files/rundll32/)
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: YoKenny on October 25, 2009, 12:59:38 PM: Why do you think rundll32.exe is infected?

This is what I see when I navigate to C:\WINDOWS\system32 Folder
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: Scan on October 25, 2009, 01:12:23 PM: because avg doesn't know whats good and whats evil Which is some times bad and some times good
perhaps its time to uninstall it... the only thing i like that its firewall it asks when i Open or when some one Tries to connect to me (Except My ISP Of course) , i don't think avast warns me which makes me feel unsecured but its database sure waaaaaaaaaay better than avg

maybe RunDLL32 is trying to Run a cretin DLL i am not sure it started when i just opened my computer and avg Detected it as malware...
better not to remove RunDLL32.

It also says threat name Unknown
Security level 4
Description : not available
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: Shiw Liang on October 25, 2009, 02:49:00 PM: Hey be careful avg can remove important files also I tried to remove a virus with it.
It made my laptop unbootable!
Careful
Windows system 32 are important files
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: cinchez on October 25, 2009, 03:45:29 PM: Uncertainty brings a lot of major problems^^

So if ur unsure about something, its better to leave it as it is^^

*may some kind of a tip*
I think u should leave that dll alone...then if something wierd happens to ur PC with or without ur consent, its time for a HijackThis log^^

-AnimeLover^^
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: Shiw Liang on October 25, 2009, 03:49:53 PM: Even the virus was in my computer if I let in like it is I could have played a bit more with my computer but by removing these windows files then I can't do anything
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: polonus on October 25, 2009, 04:05:21 PM: Hi Scan,

See whether it isn't a bridge problem (bridgedll.exe) on your machine,delete all instances of bridge.dll

Use regedit to premanently remove the row "rundl32.exe "C:\WINNT\system32\bridge.dll,Load" from the registry
folder "HKLM\Software\Microsoft\Windows\CurrentVersion\Run"

Delete bridge.dll from C:\winnt\system32\folder

So rundll32.exe can be fine, but the association in the registry can be malicious. Do you understand?

polonus
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: Scan on October 25, 2009, 06:17:54 PM: I guess so.
i don't have bridge dll any where tho
Title: Re: RunDLL32.EXE is said to be a malware by a avg Idenity Protection
Post by: SpeedyPC on October 26, 2009, 12:51:39 PM: Scan please run a Hijack log maybe the problem can be solved, Polonus or somebody can review your Hijack log very carefully and may give you more information on what to do.