Question about a possible virus.

07/06/2009 22:09 Newbb#1
Hey guys/gals,

i just noticed that my mouse wouldn't click anymore, it would move, but no clicking, i tried mousepad and a separate mouse.

So i checked wich programs were running, and found Rundll.exe from the system 32 folder, wich was weird imo.

so i googled it: "What is run32dll.exe?

run32dll.exe is a process belonging to PAL PC Spy. It is a key recorder and screen capture utility that monitors everything that happens on your computer. This process should be removed to ensure your personal privacy. "

Another site says:
"First, we need to look at what exactly does the RUNDLL32.EXE file do. It's a ''helper'' file that's part of the Windows operating system and it helps programs open libraries (DLLs). It also helps open documents by going into the Windows Registry - which, in simplest terms is a file that contains instructions that tell Windows how to open files, what program(s) to open a given file type with, how to display programs (how big to make the window, what colors to use, etc... et al, ad nauseum...) and finding the associated program and launching it. This is how you can double click on a Word document and have Word start up and open the file."

So i scanned with McAfee, nothing came up(whole comp was free of viruses etc .)
so i scanned it with viruschief:
Antivir: Nothing found
ArcaVir: Nothing found
Avast: Nothing found
AVG: Nothing found
BitDefender: Nothing found
F-Prot: Nothing found
Norman: Nothing found
Rising: Nothing found
VirusBlokAda32: Nothing found
VirusBuster: Nothing found

[Only registered and activated users can see links. Click Here To Register...]
Scanned by [Only registered and activated users can see links. Click Here To Register...]


The weird thing about this all is that my laptop was produced this yeah(manufacturing year:2009) and when i checked properties of the .exe this is what i saw:
Created: ‎donderdag ‎2 ‎november ‎2006, ‏‎10:48:33
Last opened: ‎donderdag ‎2 ‎november ‎2006, ‏‎12:39:50
Both on Tuesday 3 years ago, wich is REALY weird..

what should i do, is it harmfull or what, couse i like my archlord account^^

Thx in advance!
07/07/2009 00:13 n3m0k54#2
Maybe try to scan with [Only registered and activated users can see links. Click Here To Register...], because viruschief.com not always show virus. [Only registered and activated users can see links. Click Here To Register...] and [Only registered and activated users can see links. Click Here To Register...] same file..
07/07/2009 10:32 Newbb#3
even jotti sais it empty, but the weird thing is, its running 3 times.

the file itself has Microsoft copyright tho
07/08/2009 11:47 temp0rary#4
rundll32.exe is part of Windows, its not a virus.

However, that doesn't mean it can't be used to run a virus...
07/08/2009 20:39 mrunkown#5
dont worry about it
07/08/2009 23:17 Newbb#6
well since i work at a electronics store, i checked the comps there, and also there, its running 3 times, so ill let it be as it is.
07/09/2009 12:29 _Emme_#7
#closed