none
Run32dll.exe

    Question

  • hi all,
    i just figured out that run32dll is an executable files LOL then i kindof got fraustrated coz i wanted to create a specific publisher rule for that "DLL" so my Dll rules would look much safer hehe..unfortunately its an  .exe ok i have already created blocking rules for that .exe and all the %windir% .exe files....but im looking for using specific DLL rules for the most used and important or essentials Dll files...i already have DLL rules but its just path rules and i think by  creating extra scoped rules it would be much better,so i already created blocking rules the the following DLL which is named : Comdlg32.dll something like that which is something about common dlls library...my question is: is there any specific/important DLL rule(s) that can be created which i dont know yet?
    will be looking forward for any input here!
    Kind regards,
    RR
    Sunday, January 17, 2010 7:07 PM

Answers

  • Nevermind ppl,
    i fogot i can create custom rules so for the file names i just put * then the rule is used for all the files with that signature and etc etc...
    thanks anyways but if anyone want to make any comment here then feel welcome for that!
    Kind regards,
    RR
    • Marked as answer by Vivian Xing Wednesday, January 27, 2010 9:18 AM
    Monday, January 18, 2010 12:50 AM

All replies

  • What do you mean by rules?  It sounds like you're setting up your antivirus to block DLL's from executing, which I would highly discourage.




    If this was helpful, please vote by clicking the green triangle. If it solves the issue, click Propose as Answer. Thanks!
    Monday, January 18, 2010 12:49 AM
  • Nevermind ppl,
    i fogot i can create custom rules so for the file names i just put * then the rule is used for all the files with that signature and etc etc...
    thanks anyways but if anyone want to make any comment here then feel welcome for that!
    Kind regards,
    RR
    • Marked as answer by Vivian Xing Wednesday, January 27, 2010 9:18 AM
    Monday, January 18, 2010 12:50 AM