Jump to content

rundll32 Status not monitored by Behavior Blocker


Recommended Posts

It's a Windows System File, and it won't be monitored. Malware can't abuse it without another executable (such as a trojan) doing something to launch rundll32.exe or create a startup item for it, and the Behavior Blocker will alert you when that happens.

Link to comment
Share on other sites

So the BB will still see how executables are using rundll32?

If an executable that is not trusted tries to launch rundll32.exe, or create a startup item of any kind (whether it be to launch rundll32.exe at startup or another program at startup), the Behavior Blocker will display an alert.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...