C:/Windows/system32/winlogin.exe - Windows NT Login Application (I'm using XP)
C:/Windows/system32/rundll32.exe - Run a DLL as an App (Its meant to be a dll... right?)
Both are the root of my Ad problem. The problem is, I don't know if they are real system files, and also I can't delete them anyway.
I'm using AVG and Sygate Personal Firewall but that don't pick it up (Sygate is blocking the files but I want to get rid of them), so can someone show me something that can rip these apart?
ID:185248
 Mar 23 2006, 7:48 am
|
|
Well, try the others. Also, use spybot's advanced tools, but be wearing, you can mess up your system if you do things you shouldn't.
| |
rundll32.exe is found on my system, I believe it does basiclly what it says, but malware could be using it to run something with a .dll extention as an executable, which makes the .dll the problem, not rundll32.
Winlogin.exe is not found on this sytem, don't know if it is malware or not. | |
Both of those are legit Windows XP system files; however, it's very possible that something else is using them for its own nefarious purposes. Particularly rundll32.exe, since that's basically a way to execute a DLL.
How do you know that those files are the problem? | |
Adaware
Windows Defender
These should be able to help you out, and all of them are free.