rundll32.exe

LINEAGE.BDP

rundll32.exe. Is it a virus?

The rundll32.exe could be a LINEAGE.BDP. Sometimes it’s called LINEAG-ABD, WOWCRAFT, LINEAGE-BI, WAYIC-A, VB-ZD, RANKY.W, RBOT.AIE, LEGMIR-AS, LINEAG-ADI, LINEAGE-JH, AGENT-EZ, LINEAGE-BP, DVLDR, IRCBOT, SANKER, LINEAG-ADR, WHIPSER-B and LINEAGE.BDP.

It’s not absolutely clear which product this file is part of and who is its author. It’s a hidden file. Rundll32.exe is usually located in the %SYSTEM% sub-folder and its usual size is 70,344 bytes.

This file is a trojan. Trojans can steal important data from your computer. This file is a network worm. Worms can significantly decrease your Internet connection speed and download new malware onto your computer. This file enables a culprit to access your computer, steal your data, and take total control over your computer.

Recommendation

Disable and delete the rundll32.exe process as soon as possible. Most likely it is a virus, a trojan, or some other malware. Before disabling this file make sure it is not a legitimate file that is also called rundll32.exe.

Checks

Malware risk: Scan your PC for viruses and Trojans
Some viruses infect computers while disguised in the form of legitimate files, like poqexec.exe. Run an antivirus scan to ensure your PC is clean and safe. Registry Errors: Free scan (run Registry Cleaner)Uninstallation: N/A Uninstall (run Unistall Manager)Disk & Memory Usage: N/A Free scan (run Task Manager)

Details

Process: LINEAGE.BDPCommon path(s): subfolder in %SYSTEM%
subfolder in C:
%PROGRAM_FILES_COMMON%
subfolder in %WINDOWS%Keywords(s): trojan, backdoor, monitor, worm, hiddenFilesize(s): 70,344 bytes, 61,545 bytes, 35,328 bytes, 51,238 bytes, 34,816 bytes, 36,352 bytes

User opinions

rundll32.exe has the following rating: 2.0

based on 2 user opinions.

Add your comment

Thank you for your comment!

by Ryan on Jul 21, 2012 at 09:45 PM

mano ese esped hacker e pro lieagne 2 tnt e e pra ataca + rapido como usa e funfa pode mi passa o link mi add msn cunado addd manda uma mensg junto con convit disendo da onde add pra eu saber pfv vlw a tds

0 | 1

by Tom W on Oct 31, 2010 at 06:09 PM

It is my understanding that this file is actually rundii32.exe where the ii is capitalized. Due to the font used the capital ii looks like ll. May be wise to double check this before deleting anything.

1 | 0