What folder should rundll32.exe be in?

[Paul]

Hi all,

If you're using XP SP1?

I see in SP2, its in C:\windows\system32

Should it be in the same folder, if u use SP1?

A hijackthis log I checked, (the guy has SP1 installed)
this file is in C:\windows.

Or are there any worms etc that overwrite rundll32.exe?

As this guys My computer wont open, it says this
when he tries to run it.

This file does not have a program associated with it for performing this
action. Create an association in My Computer by clicking View and then
clicking Folder options."

Any ideas whether he's got a worm of some kind?

The rest of his HJT log looks fine, besides rundll32.exe
being in C:\windows, not C:\windows\system32.

Does it sound like rundll32.exe is in the wrong folder on his system? And
why My computer wont run/open?

Any info appreciated

Thanx

 

[S.Sengupta]

Under:
C:\WINDOWS\system32
C:\WINDOWS\ServicePackFiles\i386

If you find it anywhere else then you should be suspicious for sure.

Free Online virus scan:-
http://housecall.trendmicro.com/

regards,
S.Sengupta[MS-MVP]

 

[Paul]

Ta mate, I'll let him know

Thanx

Under:
C:\WINDOWS\system32
C:\WINDOWS\ServicePackFiles\i386

If you find it anywhere else then you should be suspicious for sure.

Free Online virus scan:-
http://housecall.trendmicro.com/

regards,
S.Sengupta[MS-MVP]

Hi all,

If you're using XP SP1?

I see in SP2, its in C:\windows\system32

Should it be in the same folder, if u use SP1?

A hijackthis log I checked, (the guy has SP1 installed)
this file is in C:\windows.

Or are there any worms etc that overwrite rundll32.exe?

As this guys My computer wont open, it says this
when he tries to run it.

This file does not have a program associated with it for performing this
action. Create an association in My Computer by clicking View and then
clicking Folder options."

Any ideas whether he's got a worm of some kind?

The rest of his HJT log looks fine, besides rundll32.exe
being in C:\windows, not C:\windows\system32.

Does it sound like rundll32.exe is in the wrong folder on his system? And
why My computer wont run/open?

Any info appreciated

Thanx