ZoneAlarm Fire Wall

[FrankSG]

I have ZoneAlarm as my firewall. Today I was going to download Real Player and I got that Pop-Up alert from ZoneAlarm that asked, "Do you want to run a DLL as an App?" I clicked on "No" because I wasn't sure what it meant. Does anyone know? Thanks

------------------
"No one stands so tall as when they stoop to help a child"

[FrankSG]

Originally posted by FrankSG:
I have ZoneAlarm as my firewall. Today I was going to download Real Player and I got that Pop-Up alert from ZoneAlarm that asked, "Do you want to run a DLL as an App?" I clicked on "No" because I wasn't sure what it meant. Does anyone know? Thanks



Sorry, Pete--But I somehow made a mistake and put this one on twice. Will you delete one of them? Thanks
Frank

------------------
"No one stands so tall as when they stoop to help a child"

[John0904]

Are you referring to something like this?
<center>
http://www.easystreet.com/~hades/pics/pic.jpg
</center>

I got this while updating RealPlayer.
It is safe. http://www.PCGuide.com/ubb/smile.gif

But you were smart in telling ZA no if your unsure of the program trying to access the internet.

Hope this helps.

[FrankSG]

[QUOTE]Originally posted by John0904:
Are you referring to something like this?
<center>
http://www.easystreet.com/~hades/pics/pic.jpg
Yes, that's exactly what I got--and it was when I was downloading Real Player. Does anyone know what it means when they ask if you want to run a DLL as an app?

------------------
"No one stands so tall as when they stoop to help a child"

[ErnieK]

If you click YES Does this not mean that every time you go on-line Real Player will be able to access the net? Do not know if it is listed as SPYWARE or not so to be safe check it out. Or am I just paranoiac? http://www.PCGuide.com/ubb/rolleyes.gif

------------------
Ernie

[John0904]

ErnieK,
Yes. If you click "Yes" RealPlayer will access the internet anytime it needs it. And another yes. ZoneAlarm will catch any Spyware that I know of. Any program that needs output to the internet, ZA will catch.
There are a few exceptions I guess. If the Spyware run through http then it could run through your browser. (In which case, you need ZA permission for your browser to access the internet anyway).


FrankSG,
The only thing I can think of is that RUNDLL32.EXE actually starts any program first before the actual program and that ZA caught it at the same time when Realplayer needed access to the internet.
I haven't been able to reproduce this. I'm sure if you tried it again, it would show the proper name.
All I do know is that RUNDLL32.EXE is a Windows program. If it keeps happening, then maybe a virus changed the contents of that file and actually needs to access the internet. In which case, a full scale virus scan is needed.
Either way, you can click "Remember and No" for this program. It doesn't need access to the internet.
Wish I could tell you more.

[Paleo Pete]

Notice the line just above the Yes and No buttons. "Remember this answer the next time I use this program". If you do not check that box, ZA will pop up and ask every time until you do check it. That lets you allow the program to connect only when you want it to, but not every time. If you check the box, then it will connect every time and not ask. I leave Winamp set this way so if I don't want to bother with it getting a song list from the Internet I can simply tell it "No, just shut up and play the stupid CD"...

I also noticed the <center> tag. HTML does not work on the forums, only UBB. No UBB tag exists that I know of to center an image.

A dll trying to access the internet is a new one on me, I don't know what it might be trying to do, but with Real Player there's no telling. It could be the online registration trying to run.

------------------
Support the right to keep and arm bears.
Note: Please post your questions on the forums, not in my email.

Computer Information Links (http://www.dreamwater.com/paleopete/computer.htm) has been moved, please update your bookmarks.

[John0904]

Paleo Pete,

After I posted, I noticed that this forum didn't accept html tags. http://www.PCGuide.com/ubb/biggrin.gif
I didn't feel like editing the post just to remove those two tags.

It was a RUNDLL32.EXE file that was trying to access the internet. Not a dll file. Not sure why ZA stated as "Run a DLL" file.
I don't think dynamic link libraries can access the internet.
At least I've never seen ZA stop one.

[Vic 970]

I uninstalled Real Player the other day after reading a link to the 'suspicious' behaviour of 'Real' posted on one of the forums (never used it anyway)

I would suggest that you have a look at it before telling ZA to give any Real Product access to the internet.

------------------
for every question there's an answer. Then a load more questions.

Regards..,
Vic.

[mjc]

It gets more interesting all the time...the address is to a DNS at easystreet.com

And I think that possibly these uses of rundll may apply....Installs an .inf file Rundll32.exe setupx.dll, InstallHinfSection DefaultInstall 132 Path\FileName...or this one: Connect a network drive Rundll32.exe user,wnetconnectdialog...or this one: Control Panel icons See the list of CPL files;PrefsCpl.cpl Real Player G2...notice the bold section...

If you look up the properties page for rundll32 you'll find that the description of it (by MS) is: Run a dll as an app, which is what ZA called it...

PS: After a little more searching, maybe I should have done it first the file rpap3260.dll uses rundll32.exe...so yes it is part of the update process for Realplayer...but what part???

------------------
mjc
Links list:Computer Links (http://www.dreamwater.org/tech/mjc/index.htm)

Celts are the men that heaven made mad, For all their battles are merry and their songs are all sad.


[This message has been edited by mjc (edited 10-17-2001).]

[John0904]

mjc,
EasyStreet is my ISP. http://www.PCGuide.com/ubb/biggrin.gif

[mjc]

Ok...

------------------
mjc
Links list:Computer Links (http://www.dreamwater.org/tech/mjc/index.htm)

Celts are the men that heaven made mad, For all their battles are merry and their songs are all sad.

[FrankSG]

Originally posted by mjc:


You're right, mjc. I just looked it up under Properties and the discription of rundll32.exe is "Run a DLL as an app" So, I'm glad I checked, "No" since I'm not sure just exactly what it would have done. I did a little more research on Real Player and found out that it does a little snooping around on your harddrive(spy ware). I could be wrong--but I don't trust it so I'm not installing it.
Thanks to everyone for all of the info.
Frank


------------------
"No one stands so tall as when they stoop to help a child"