rundll32.exe

[FreeLover]

Virustotal Result : 1/40 (2.50%)

http://www.virustotal.com/analisis/6dbf38438d7b39d025a9ec0d7a525c013d8edd5b8ec90d8b27e6b8a507c3d923-1244624815

 

OS : Windows XP SP2 Korean

[333halfevil]

Virustotal Result : 1/40 (2.50%)

http://www.virustotal.com/analisis/6dbf38438d7b39d025a9ec0d7a525c013d8edd5b8ec90d8b27e6b8a507c3d923-1244624815

 

OS : Windows XP SP2 Korean

 

Interesting...Could you please zip the file and upload it so I am able to analyze it :smile:

[FreeLover]

Interesting...Could you please zip the file and upload it so I am able to analyze it :smile:

 

Thank you for your support.

rundll32.zip

[333halfevil]

Yes, definitely malware. Good catch on Security 360's part. Almost no one detects it 8-)

[FreeLover]

Yes, definitely malware. Good catch on Security 360's part. Almost no one detects it 8-)

 

Wonderful! Thanks. ....

I'm really looking forward to Beta 2.

[Damned]

Yes, definitely malware. Good catch on Security 360's part. Almost no one detects it 8-)

 

Only one A-V? Report will be false positive!

Rundll32.exe in C:\Windows\system32 is legally file for Win XP.

Rundll32.exe in C:\Windows\ can be it malware.

[Keway]

rundll32 exe

 

Hi Hybrid34

 

Thanks for your report - we will investigate this further. If it is a false positive, it will be removed from detection. If you would like to upload the file to the forum, zip the file and password protect it with the password infected.

 

Regards,

 

Andy

Lavasoft Malware Labs

[333halfevil]

Only one A-V? Report will be false positive!

Rundll32.exe in C:\Windows\system32 is legally file for Win XP.

Rundll32.exe in C:\Windows\ can be it malware.

 

It isn't a FP. I checked Prevx's report as well. Definite detection.

[Damned]

It depends on position file rundll32.exe.

[Damned]

Check my rundll32.exe8-) At position C:\Windows\system32

rundll32.zip

[333halfevil]

Check my rundll32.exe8-) At position C:\Windows\system32

 

Interesting...Seems Mcafee is getting false positives, and nProtect is following the detection. Same detection for my rundll32.exe...Hmmm...

 

Well mines 100%, and so is yours :smile:

[Razer]

False Alert (iun6002.exe)

 

inu6002.exe is part of setup factory 6.0 module from Indigorose.....it is used to install/uninsall lots of programs.

 

If it is removed....the only effect would be that any programs you have that use it for uninstall....will not uninstall properly.

 

inu6002.exe has been on my computer since 12/29/06, Iobit Security 360 is the first security progam to identify this as a threat (that's many scans with good security prgrams since 06).

 

Indigorose Quote:The file is harmless an does not need to be removed.