Spyware?

[Fez]

This thing popped up in my task manager, looked online to what it does and it's both used by general System32 and Spyware. Scanning in Windows Security Essentials, but you lot are probably much faster:



I re-formatted recently and I've not been on any naughty sites, I scan AppData daily but I'm not sure whether this is dangerous or not.

Cheers, +rep for responses etc.

[Suspective]

Rundll32.exe is an important process of your windows operating system. The process rundll32.exe executes dll files and puts their libraries into your system's memory. Without this process your computer would become instable and very slow.

The process runs from your system directory C:\windows\system32. If it executes or runs from a different location it is most likely a virus or trojan horse. You should scan your computer immediately with a virus scanner. Viruses using the name rundll32.exe are W32.Miroot.Worm. Backdoor.Lastdoor, and Trojan.StartPage (among others).

http://ezinearticles.com/?How-to-Fix...exe?&id=913723

[Fez]

http://ezinearticles.com/?How-to-Fix...exe?&id=913723

"If it executes or runs from a different location it is most likely a virus or trojan horse."

Does that mean it's safe?

[Suspective]

Its running from system32 so its safe. Its basically saying, that if its in another location it might be disguised spyware.

[Fez]

Its running from system32 so its safe. Its basically saying, that if its in another location it might be disguised spyware.

Thanks so much.

[Mary]

For some reason I have that process running a lot it appears when I'm playing TF2 online I think my graphics card uses it for some reason and it appears periodically while defragmenting

[Fez]

I went online a bit and found it's a registered WindowsCOM server or something, the server name.

[RockyHorror]

The problem of using google to search a process is that you'll get different responses because a lot of the sites dedicated to identifying process' are user submitted, so you never know what is accurate.

Also a lot of spyware is masked so that it appears to be a harmless process that should be running, so its hard to differentiate. From the properties, your instances is harmless. But if you're ever in doubt run a few reputable Virus and spyware scans.