Question about the Famous:: Rundll32.exe >.<

hey guys,
just bought a new pc..
i look in processes and i saw Rundll32.exe ..hmm
i know it as the biggest virus on the net
but i only installed kaspersky internet security,
Internet download manager,
Winrar 3.7 with Keygenerat,
( i didnt use the keygen from winrar)
but i have no clue if its just “Normal”
if this process is running.. i DO know it IS normal on a Vista OS to have it running. mainly it keeps all the Memory of the running things in place right’?
because it takes only 1.243 kb (1.24 mb) and i dunno if this is right
or wrong.
Thanks! Note:
Kaspersky didnt detect Anything.
Guys, if i type RUN>msconfig> in the list “startup” is the app, but its under the “Nvmactray” and so far as i know thats from my Nvidia?? Screenshot:

Thanks for any help
Answer #1
well, what i mostly do (becuz its a trojan), is watch the HDD size remaining, if it reduces dramaticly in a few hours or a day, u should handle it, if not, its ok
*post 751*
Answer #2
hey je bent ook nederlands! haha cool maargoed..ik had da eerst inderdaad wel dat ineenkeer geen plek meer was van 20 GB naar 1 mb LOL
This is an English speaking forum, so please, post all your posts in English only. Thanks ~ hecos
Answer #3
Guys, if i type RUN>msconfig> in the list “startup” is the app, but its under the “Nvmactray” and so far as i know thats from my Nvidia??
Screenshot.

Answer #4
In this case it isn’t a virus, but many viruses are named that. That’s part of the nVidia driver install.
Answer #5
Aw happy! Thanks
Answer #6
Rundll isn’t itself a virus (although there are virri that name themselves as rundll, and overwrite it).
It’s part of windows, and calls a dll file as if it was a program, passing the required entry routine to the dll. It gets used VERY often by windows, which is why virii use it too.
(by the way – that nvidia program is non essential and can be stopped from starting if you want to save memory and boot time)
Answer #7
its usually ran with items that require access to Windows API such as the Nvidia tray crap.
Answer #8
The rundll32.exe file is located in the folder C:\Windows\System32
if found installed in any other location rundll32.exe is a virus, spyware, trojan or worm!
Answer #9
Yea its located in System32, the icon is a DLL but the name is an EXE LOL!
Answer #10
Yea its located in System32, the icon is a DLL but the name is an EXE LOL!
Mine..

I cant really have you validate the size, but GENERALLY when an important system file gets changed windows will have a shitten fit (Windows File Protection) and ask you for the WIndows CD etc etc.
Try running from a command prompt (start->run->cmd)
sfc /scanonce
Shouldnt do anything until you restart…