Re: More apparent M$ spyware

From: Tim Smith (reply_in_group_at_mouse-potato.com)
Date: 03/28/05 

Date: Mon, 28 Mar 2005 19:28:03 GMT

In article <1112021464.784030.23380@g14g2000cwa.googlegroups.com>, Yef
wrote:
> But clearly there is a DLL that is a part of Service Pack 2 that is the
> second program trying to send out info.

That doesn't follow from your data. Rundll32 is a DLL execution shell that
has been in Windows since the begining of time. What is happening on your
system is that *something* is using rundll32 to run some DLL. At this
point, you have no idea what the something is or what DLL is involved. 

-- 
--Tim Smith

Relevant Pages

  • Run a dll as an app
    ... >My son uses windows xp and zone alarm free firewall ... >the program control information of zone alarm. ... >As this seems to be a legitimate DLL within ... RUNDLL and RUNDLL32 do not normally appear in the Task ...
    (microsoft.public.windowsxp.general)
  • strange file
    ... Microsoft's "Run a DLL as an App". ... software which does not end up gobbling up memory through ... RUNDLL and RUNDLL32 do not normally appear in the Task ... virus scan on your PC. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: More apparent M$ spyware
    ... >>But clearly there is a DLL that is a part of Service Pack 2 ... >>that is the second program trying to send out info. ... they just make really crappy operating systems." ...
    (comp.security.misc)
  • RE: run DLL as an app
    ... > and the alert message says "run DLL as an app is trying ... Microsoft Windows programs that need to be used to load DLLs into memory so ... RUNDLL and RUNDLL32 do not normally appear in the ... software, boot into Safe Mode, and run a full virus scan on your PC. ...
    (microsoft.public.windowsxp.general)
  • Re: Creating DLL Entry Point
    ... I've created a DllMain routine and set it as the entry ... RunDll32 is likely not even loading your DLL. ...
    (microsoft.public.vc.language)