rundll32.exe

Discussion in 'ProcessGuard' started by Tony H, Feb 12, 2004.

Thread Status:
Not open for further replies.
  1. Tony H

    Tony H Registered Member

    Joined:
    Dec 5, 2002
    Posts:
    32
    Hi all,

    Running WinXP pro sp1, PG v1.3

    Loaded the defaults into PG and added in Norton proggies AV & NIS 2004.

    On a later reboot I get the following entrys in the log (discovered the log in the prog folder ;) )


    12 Feb 09:08:44 - [P] c:\windows\system32\rundll32.exe [592] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\windows\explorer.exe [764]

    12 Feb 09:08:44 - [P] c:\windows\system32\rundll32.exe [592] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\program files\processguard\procguard.exe [3480]

    12 Feb 09:08:47 - [P] c:\windows\system32\rundll32.exe [592] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\windows\system32\winlogon.exe [812]

    My questions are;

    1/what settings should I give to rundll32.exe in PG?

    2/Is it a candidate for adding to the default settings?

    Thanks in advance.

    T. :)
     
  2. siliconman01

    siliconman01 Registered Member

    Joined:
    Mar 6, 2003
    Posts:
    786
    Location:
    West Virginia (USA)
    Tony H,

    I found I had to give rundll32.exe ALLOW options. I gave it Write, Setinfo, Suspend, Terminate options.

    This is on a Windows XP-xpsp2 Home system.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.