Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 1823 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

rundll32.exe

tedz

Hi,

Please see screenshot of rundll32.exe on the link below... sophos didn't recognize this one but i think this is a virus.

http://ge.tt/898tBdN/v/0

Anyone can encounter this issue.

Thanks,

tedz

:29473


This thread was automatically locked due to age.
Parents
  • 0

    Hello Tedz,

    Process Explorer will show you the command line with which the rundll32.exe processes were started. You should also be able to identify their parent process with it. If they are started indirectly by a short-lived process then Process Monitor might be of help. Both tools are available on the Sysinternals Process Utilities page.

    HTH

    Christian

    :33935
Reply
  • 0

    Hello Tedz,

    Process Explorer will show you the command line with which the rundll32.exe processes were started. You should also be able to identify their parent process with it. If they are started indirectly by a short-lived process then Process Monitor might be of help. Both tools are available on the Sysinternals Process Utilities page.

    HTH

    Christian

    :33935
Children
No Data