iceangel89 Posted November 1, 2008 Share Posted November 1, 2008 (edited) i get alerts from COMODO firewall that rundii32.exe wants to do something. i blocked it as i think its a trojan, so now how should i remove it?i just did a hijackthis attached loghijackthis.txt Edited November 1, 2008 by iceangel89 Link to comment Share on other sites More sharing options...
Tarun Posted November 1, 2008 Share Posted November 1, 2008 There's nothing showing in your log that would be malicious. Try renaming HijackThis to scanner.exe and running as administrator for a new log. Link to comment Share on other sites More sharing options...
iceangel89 Posted November 2, 2008 Author Share Posted November 2, 2008 (edited) here is the new log, renamed hijackthis to scanner and run as administratorbtw, i blocked rundii32.exe in COMODO (CFP3), yesterday, is there any place i can find that log? i also rmb that it said rundii32.exe was running from a temp file. (.tmp file) its probably gone, since its a tmp file.and i seem to rmb that it happened soon after my Nero 9 trial or winrar 3.8 install? it happened 2 times. once b4 i re-vlite-ed by vista, once after (so a clean format and install)EDIT: btw, i read that rundii32.exe seem to be a trojan when i did a search on google http://www.techsupportforum.com/security-c...2-exe-what.html but seems like i dont have it in my hijackthis so i seem to be good. btw, i am using:Vista SP1 x64COMODO Firewall Pro 3Avast Home Edition 4.8...hijackthis.txt Edited November 2, 2008 by iceangel89 Link to comment Share on other sites More sharing options...
Tarun Posted November 2, 2008 Share Posted November 2, 2008 Your log is clean. If you want to double check, feel free to get some of the recommend programs found in my Anti-Malware Toolkit. Link to comment Share on other sites More sharing options...
MCT Posted November 2, 2008 Share Posted November 2, 2008 your logfile looks clean still, search your computer for the file & see where its located? Link to comment Share on other sites More sharing options...
cluberti Posted November 3, 2008 Share Posted November 3, 2008 Any possibilities that this is rundLL32.exe (capitalizations for clarity), not rundii32? Can you post a screenshot of the Comodo dialog box? Link to comment Share on other sites More sharing options...
iceangel89 Posted November 4, 2008 Author Share Posted November 4, 2008 hmm thanks all for ur replies.i did a search for rundii32.exe in C:\WINDOWS dir where i last rmb it was and it seems like it not there anymore. i think its in a tmp file so its gone by now.oh and i dont get the dialogs anymore. so i cant take a screenshot. but i am quite sure it was rundii32i think i am clean. if i get anymore of those dialogs i will post here.Thanks ! Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now