rundll32.exe

Discussion in 'ProcessGuard' started by Tony H, Feb 12, 2004.

Thread Status:
Not open for further replies.
  1. Tony H

    Tony H Registered Member

    Joined:
    Dec 5, 2002
    Posts:
    32
    Hi all,

    Running WinXP pro sp1, PG v1.3

    Loaded the defaults into PG and added in Norton proggies AV & NIS 2004.

    On a later reboot I get the following entrys in the log (discovered the log in the prog folder ;) )


    12 Feb 09:08:44 - [P] c:\windows\system32\rundll32.exe [592] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\windows\explorer.exe [764]

    12 Feb 09:08:44 - [P] c:\windows\system32\rundll32.exe [592] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\program files\processguard\procguard.exe [3480]

    12 Feb 09:08:47 - [P] c:\windows\system32\rundll32.exe [592] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on c:\windows\system32\winlogon.exe [812]

    My questions are;

    1/what settings should I give to rundll32.exe in PG?

    2/Is it a candidate for adding to the default settings?

    Thanks in advance.

    T. :)
     
  2. siliconman01

    siliconman01 Registered Member

    Joined:
    Mar 6, 2003
    Posts:
    780
    Location:
    West Virginia (USA)
    Tony H,

    I found I had to give rundll32.exe ALLOW options. I gave it Write, Setinfo, Suspend, Terminate options.

    This is on a Windows XP-xpsp2 Home system.
     
Thread Status:
Not open for further replies.