rec.autos.simulators

OT: ZoneAlarm and RUNDLL32.EXE

Ed Solhei

OT: ZoneAlarm and RUNDLL32.EXE

by Ed Solhei » Tue, 14 May 2002 02:41:00

Zonealarm reports from time to time that RUNDLL32.EXE want to contact
certain addresses...
What exactly does this program do and what privliges should I give it (in
ZA)

Now, I've just preformed a virus scan of my system so I'm 100% sure that the
file version of RUNDLL32..EXE is legit and not infected with the SirCam
virus.

--
ed_

Joachim Trens

OT: ZoneAlarm and RUNDLL32.EXE

by Joachim Trens » Tue, 14 May 2002 06:12:50

It was probably Schumacher's fault. I haven't figured out how, but I'm
pretty sure it must have been him... ;-)

But seriously, I'd prohibit it. For all I know Rundll32 has no business of
its own on the Internet. Although there may be something I'm not aware of.
Something similar to MS Messenger trying to call home whenever Outlook
Express is open (not Messenger).

AFAIK Rundll is used to call operating system functions and services from
the GUI (you can use it from the Start-Run input line) or from within
programs. You could call Rundll as well if you wanted to use OS functions
(like for example the shutdown function).

It is not unusual for Windows functions to try and access the Internet
although you wouldn't think they need to. I've seen this two or three times,
have always disallowed it, and never had a problem with that.

Achim




rec.autos.simulators is a usenet newsgroup formed in December, 1993. As this group was always unmoderated there may be some spam or off topic articles included. Some links do point back to racesimcentral.net as we could not validate the original address. Please report any pages that you believe warrant deletion from this archive (include the link in your email). RaceSimCentral.net is in no way responsible and does not endorse any of the content herein.