NEED HELP ABOUT "Rundll32.exe"

[hoggar]

Hi, I have WIndows 7 64-bit. I have two "rundll32.exe" processes in task manager. The first one "rundll32.exe" is in location: "C:\Windows\System32" (that one is for Windows 64-bit), the second one "rundll32.exe *32" is in location: "C:\Windows\SysWOW64" (that one is for Windows 32-bit). Does that mean that I have at the moment opened 32-bit applications and 64-bit applications???
Btw sory for my bad english :/

 

[xcrossroadsx]

rundll32.exe is an executable that allows the computer to run .dll (dynamic link library) files which support rundll32.exe as if they were an executable file. Basically, it lets special .dll files be run independent of another application. It just means that either you have some .dll applications running in the background or that a specific program you have running utilizes .dll files in a strange way such that instead of utilizing the .dll files as libraries it instead accesses them as a separate application.

 

[corroded]

bet you have an Nvidia GPU too...

 

[hoggar]

rundll32.exe is an executable that allows the computer to run .dll (dynamic link library) files which support rundll32.exe as if they were an executable file. Basically, it lets special .dll files be run independent of another application. It just means that either you have some .dll applications running in the background or that a specific program you have running utilizes .dll files in a strange way such that instead of utilizing the .dll files as libraries it instead accesses them as a separate application.

So thats normal to have two "Rundll32.exe" files opened (one is 32-bit and one is 64-bit) ?

 

[hoggar]

bet you have an Nvidia GPU too...

No, I have ATI/AMD, why?

 

[xcrossroadsx]

If you define "normal" as standard out of the box, no. But it isn't a sign of something going wrong. It just means that some application you use utilizes rundll32.exe, which isn't necessarily a bad thing. Having two open is fine, as one is used for 32-bit applications while the other is used for 64-bit applications.

 

[corroded]

typically they should not be running unless you are doing "system" activities.... However some applications use it. They shouldn't. Spyware will also use them to mask themselves as a system function.

Get Ccleaner and look at what is in your startup and "Disable" (not Delete) all except you anti virus to start with. Then restart the computer and look at the process' ... Still there?

Run Malwarebytes from Safe Mode and remove all it finds. Restart again and check....

 

[corroded]

oh yeah... once you get rid of it, turn back on (Enable) the Startup things you NEED besides the AV...

 

[hoggar]

If you define "normal" as standard out of the box, no. But it isn't a sign of something going wrong. It just means that some application you use utilizes rundll32.exe, which isn't necessarily a bad thing. Having two open is fine, as one is used for 32-bit applications while the other is used for 64-bit applications.

Ok, Thanks, Yep I asked that in question "Does that mean that I have at the moment opened 32-bit applications and 64-bit applications???"

 

[hoggar]

typically they should not be running unless you are doing "system" activities.... However some applications use it. They shouldn't. Spyware will also use them to mask themselves as a system function.

Get Ccleaner and look at what is in your startup and "Disable" (not Delete) all except you anti virus to start with. Then restart the computer and look at the process' ... Still there?

Run Malwarebytes from Safe Mode and remove all it finds. Restart again and check....

I had 3 "Rundll32.exe" files before and that is what you think I have now.... www.tomshardware.co.uk/answers/id-2020251/rundll32-exe-virus-fast.html . But why not delete it??? maybe this??... http://www.tomshardware.co.uk/answers/id-2024501/found-virus-hack-tool-idk.html

 

[corroded]

If they come up as infected by AV or anti malware, yes... Otherwise they are OS files... Delete them on your own... Things like the Control panel, add/remove programs and such use them.

 

[hoggar]

If they come up as infected by AV or anti malware, yes... Otherwise they are OS files... Delete them on your own... Things like the Control panel, add/remove programs and such use them.

But that wasnt OS file that was a malware...
http://www.herdprotect.com/mdi064.dll-180ce5aaa0b13c69834087d0c6ac129a63f92fd3.aspx