[filename.info logo]
[cn rundll.exe][de rundll.exe][es rundll.exe][fr rundll.exe][gb rundll.exe][it rundll.exe][jp rundll.exe][kr rundll.exe][nl rundll.exe][pt rundll.exe][ru rundll.exe][us rundll.exe]
 

rundll.exe

Die Datei rundll.exe ist nicht noch in unserer Datenbank.

rundll.exe wurde in den folgenden Reports gefunden:

Backdoor.LoxoScam

Technische Details
...It attempts to replace %windir%Rundll.exe and C:Progra~1Micros~1OfficeFindfast.exe with the file Exec.hlp....
...It modifies the value from LoadPowerProfile Rundll32.exe powerprof.dll,LoadCurrentPwrScheme...
...to LoadPowerProfile Rundll.exe powerprof.dll,LoadCurrentPwrScheme...
Entfernungs-Anweisungen
...%windir%Sys.bat if they exist. Restore Rundll.exe and Findfast.exe. Reverse the changes that it...
...%windir%Sys.bat if they exist. To restore Rundll.exe and Findfast.exe: Using Windows Explorer, copy...
...If the vlaue LoadPowerProfile Rundll.exe powerprof.dll,LoadCurrentPwrScheme...
...exists, modiify it to LoadPowerProfile Rundll32.exe powerprof.dll,LoadCurrentPwrScheme...
Quelle: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.loxoscam.html

Backdoor.SchoolBus.B

Technische Details
...Copies code that is contained in the Trojan as %System%Rundll.exe. NOTES:...
...C:WindowsSystem32 (Windows XP). Rundll.exe itself is a Trojan. It attempts to do the following:...
...%System%Explorer.exe (This file is executed by Rundll.exe, and is used to send system information to a hacker.)...
...Adds the value: rundll    "c:windowssystem undll.exe"...
...Adds the values: rundll    "c:windowssystem undll.exe"...
...rundll32  "c:windowssystem undll32.exe" to the registry key:...
...HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsActive Setup Installed ComponentsRundll Creates the WindowsVCM folder...
Entfernungs-Anweisungen
...right pane, delete the value: rundll    "c:windowssystem undll.exe"...
...HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsActive Setup Installed ComponentsRundll In the right pane, delete...
...the value: rundll    "c:windowssystem undll.exe"...
...rundll32  "c:windowssystem undll32.exe" Exit the Registry Editor....
Quelle: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.schoolbus.b.html

Backdoor.LittleWitch.B

Über Backdoor.LittleWitch.B
...to a compromised computer. The presence of the file Rundll.exe is an indicator of a possible infection....
Technische Details
...It copies itself as %system%Rundll.exe. It creates the file %windir%Usr.dat....
...The Trojan creates the value Rundll    Rundll.exe in the registry key...
Entfernungs-Anweisungen
...Scroll through the list, and look for Rundll.exe. If you find the file, click...
...right pane, delete the value Rundll    Rundll.exe Exit the Registry Editor....
Quelle: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.littlewitch.b.html

Backdoor.LittleWitch.C

Über Backdoor.LittleWitch.B
...The presence of the file, Rundll.exe, in the %System% folder is an indicator of a possible infection....
Technische Details
...Copies itself as %System%Rundll.exe. Creates the file, %Windir%Usr.dat....
...Creates the value: Rundll    Rundll.exe in the registry key:...
Entfernungs-Anweisungen
...Scroll through the list and look for Rundll.exe. If you find the file, click...
...right pane, delete the value: Rundll    Rundll.exe Exit the Registry Editor....
Quelle: http://securityresponse.symantec.com/avcenter/venc/data/backdoor.littlewitch.c.html

W32.Bajar.Worm.Int

Technische Details
...The .vbs script also deletes the file C:WindowsRundll.exe. Finally, after executing the...
Entfernungs-Anweisungen
...If the worm deleted Autoexec.bat, Rundll.exe (Windows 95/98/Me only), or Regedit.exe, you must restore them from a clean backup...
Quelle: http://securityresponse.symantec.com/avcenter/venc/data/w32.bajar.worm.int.html

VBS.Bajar.B@mm

Risikoeinschätzung
...deletes c:windowssystemWsock32.dll, c:windows undll.exe, c:windows undll32.exe, and overwrites other system files....
Technische Details
...C:WindowsSystemWsock32.dll C:WindowsRundll32.exe C:WindowsRundll.exe...
Quelle: http://securityresponse.symantec.com/avcenter/venc/data/vbs.bajar.b@mm.html

W32.Bajar.B@mm

Risikoeinschätzung
...deletes c:windowssystemWsock32.dll, c:windows undll.exe, c:windows undll32.exe, and overwrites other system files....
Technische Details
...C:WindowsSystemWsock32.dll C:WindowsRundll32.exe C:WindowsRundll.exe...
Quelle: http://securityresponse.symantec.com/avcenter/venc/data/w32.bajar.b@mm.html

VBS.Over.Trojan

Technische Details
...User.exe Rundll.exe Rundll32.exe...
Quelle: http://securityresponse.symantec.com/avcenter/venc/data/vbs.over.trojan.html

Trojan.Zeraf

Technische Details
...C:WindowsSystem.ini C:WindowsRundll.exe C:WindowsRundll32.exe...
Quelle: http://securityresponse.symantec.com/avcenter/venc/data/trojan.zeraf.html

W97M.Mandir.A

Technische Details
...SystemTrays     rundll.exe user,exitwindows to the registry key...
Entfernungs-Anweisungen
...SystemTrays     rundll.exe user,exitwindows Click Registry, and then click...
......
Quelle: http://securityresponse.symantec.com/avcenter/venc/data/w97m.mandir.a.html



Valid HTML 4.01!