Rundll.exe

[Tigre]

Had this try to access a port in my firewall from my operating system. I know what dll's are, but what would have caused this to want access? I have run Ad-aware and anti-virus and nothing showed up. Blocked the port it was trying to open. Have remote access and auto update turned off. Any suggestions? Googled it and all is mentioned is malware, but nothing shows up. Anyone have this happen?

[Marb]

All I know is that DLL's are one of the, if not THE most important things on your computer. It's like removing some of the system files of a game and you'll have to reinstall it :p

Dangerous things, dangerous things.

[allied56]

i dont see why it would want to access the internet, but dont remove it, its a registry file i think so scan ur registry wiht some software, you find one on google

[00025]

There are two types of Rundll.exe, one is a really important system process in the Windows OS that allows you to open an executable file. The other is a backdoor program that usually registers as Backdoor.SchoolBus.B trojan in most antivirus softwares. The problem is that its hard to distinguish which is which. Your best bet is to run Hijack This! (http://www.merijn.org/files/hijackthis.zip) and look at the processes that runs at startup, most likely the real rundll.exe will not show up there and the trojan will. Put a check on the malware and fix it. After that turn off automatic updates and System Restore in the Control Panel, restart in Safe Mode with Networking and run an online virus sweeper like Trendmicro Housecall (http://housecall.trendmicro.com/) (http://housecall.trendmicro.com/). Other than that you could contact me on MSN and I'll send you a Trojan Remover.

[mOle]

i /bow for the Hijack this thing... my other PC was in huge need to kill some boots programs... thank you...