Jump to content

rundll32.exe deleted


Recommended Posts

Can someone please attach a copy of Vista rundll32.exe please .

I only have XP set up here and need to confirm that this is the actual problem .

The lack of a path in the detection from that log makes it seem like it could also be an application glitch .

rundll32.exe (Trojan.Agent) -> Delete on reboot.
Link to post
Share on other sites

O4 - HKCU\..\Run: [bM0d0bece4] Rundll32.exe "C:\Users\user\AppData\Local\Temp\netcowfe.dll",s

This should have been detected by current defs but was not , bet there is a glitch when dealing with rundll32.exe .

I am removing this family of defs for now .

Link to post
Share on other sites

  • 1 month later...

Could someone please share a copy of rundll32.exe for XP Home Edition? Have read all the posts on the rundll32.exe topic and am certain that malwarebytes removed it. I'm currently completely locked out of all Control Panel functions. TIA!

Link to post
Share on other sites

  • 2 weeks later...
Once you get it restored, please run a quick scan and post the results so we can see what it gets detected as.


I had a case, where the rundll32.exe was deleted on a vista machine a couple of days ago with the following MBAM version:

Malwarebytes' Anti-Malware 1.12

Datenbank Version: 790

it still seems to get detected as trojan.agent:

rundll32.exe (Trojan.Agent) -> Delete on reboot.

C:\Users\Alex\AppData\Local\Temp\qdyldqtt.dll (Trojan.Vundo) -> Delete on reboot.

rundll32.exe deleted

greets myrtille

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.