rundll.exe

[Guest]

Why the process name of a process initiated by rundll.exe is not set to the
name of the dll, ocx which rundll.exe host/load ?
It will be more clear when looking at the prcoess list....

 

[Rick \Nutcase\ Rogers]

Hi,

Yes, that would be nice. There are other utilities that will allow for this,
here is one:
http://www.sysinternals.com/Utilities/ProcessExplorer.html

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

 

[Wesley Vogel]

Probably because XP uses rundll32.exe and not rundll.exe.

If you have tasklist.exe, you do if you have XP Pro.

tasklist /m /fi "IMAGENAME eq rundll32.exe" >C:\rundll32.txt

What's the suspicious Rundll32.exe process
http://www.mvps.org/sramesh2k/rundll32.htm

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

Thanks you all MS-MVP for your suggestion

All your answers does not explains why the taskmgr does not display the
usable and informative information.

BTW - Wy local HD usage is not presented in TM (like network activity)

ron

 

[Rick \Nutcase\ Rogers]

Hi Ron,

All your answers does not explains why the taskmgr does not display the
usable and informative information.

It wasn't designed to. Your option, as I have noted, is to use a utility
that does. Wesley's tasklist command will give you a simple text file that
shows library files (dll's) loaded by the 32-bit rundll32.exe.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

 

[Wesley Vogel]

Task Manager
http://www.microsoft.com/resources/...00/server/reskit/en-us/core/fneb_mon_oyjs.asp

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In