Witam
Za co odpowiada plik kernel32.dll
KERNEL32.DLL posiada funkcje umożliwiające zarządzanie niskopoziomowymi funkcjami systemu operacyjnego, które między innymi umożliwiają zarządzanie:
-
pamięcią,
-
zadaniami,
-
plikami,
-
modułami,
-
oraz obsługą zasobów.
-to oznacza że w każdym procesie czy aplikacji jest używany KERNEL32.DLL??
chodzi mi ze jak w procesie nie bedzie używany kernel32.dll to oznacza błąd:
Nazwa obrazu PID Moduy
========================= ====== =============================================
System Idle Process 0 Brak
System 4 Brak
smss.exe 400 ntdll.dll
csrss.exe 468 ntdll.dll, CSRSRV.dll, basesrv.dll,
winsrv.dll, USER32.dll, KERNEL32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll, sxs.dll
winlogon.exe 492 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, AUTHZ.dll, msvcrt.dll,
CRYPT32.dll, USER32.dll, GDI32.dll,
MSASN1.dll, NDdeApi.dll, PROFMAP.dll,
NETAPI32.dll, USERENV.dll, PSAPI.DLL,
REGAPI.dll, Secur32.dll, SETUPAPI.dll,
sfc_os.dll, WINTRUST.dll, ole32.dll,
IMAGEHLP.dll, VERSION.dll, WINSTA.dll,
WS2_32.dll, WS2HELP.dll, MSGINA.dll,
SHELL32.dll, SHLWAPI.dll, COMCTL32.dll,
ODBC32.dll, comdlg32.dll, comctl32.dll,
odbcint.dll, SHSVCS.dll, sfc.dll, sxs.dll,
WINSCARD.DLL, WTSAPI32.dll, uxtheme.dll,
WINMM.dll, cscdll.dll, WlNotify.dll,
WINSPOOL.DRV, MPR.dll, rsaenh.dll,
SAMLIB.dll, cscui.dll, msv1_0.dll,
wdmaud.drv, NTMARTA.DLL, WLDAP32.dll,
msacm32.drv, MSACM32.dll, midimap.dll,
COMRes.dll, OLEAUT32.dll, CLBCATQ.DLL
services.exe 536 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, USER32.dll,
GDI32.dll, USERENV.dll, SCESRV.dll,
AUTHZ.dll, umpnpmgr.dll, WINSTA.dll,
NCObjAPI.DLL, secur32.dll, eventlog.dll,
WS2_32.dll, WS2HELP.dll, PSAPI.DLL,
wtsapi32.dll, netapi32.dll
lsass.exe 548 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, LSASRV.dll, msvcrt.dll,
Secur32.dll, USER32.dll, GDI32.dll,
SAMSRV.dll, cryptdll.dll, DNSAPI.dll,
WS2_32.dll, WS2HELP.dll, MSASN1.dll,
NETAPI32.dll, SAMLIB.dll, MPR.dll,
NTDSAPI.dll, WLDAP32.dll, msprivs.dll,
kerberos.dll, msv1_0.dll, netlogon.dll,
w32time.dll, MSVCP60.dll, iphlpapi.dll,
netman.dll, MPRAPI.dll, ACTIVEDS.dll,
adsldpc.dll, ATL.DLL, ole32.dll,
OLEAUT32.dll, rtutils.dll, SETUPAPI.dll,
RASAPI32.dll, rasman.dll, TAPI32.dll,
SHLWAPI.dll, WINMM.dll, SHELL32.dll,
WZCSvc.DLL, WMI.dll, DHCPCSVC.DLL,
CRYPT32.dll, WTSAPI32.dll, WINSTA.dll,
USERENV.dll, comctl32.dll, comctl32.dll,
schannel.dll, wdigest.dll, rsaenh.dll,
scecli.dll, ipsecsvc.dll, oakley.DLL,
WINIPSEC.DLL, pstorsvc.dll, mswsock.dll,
wshtcpip.dll, psbase.dll, dssenh.dll
svchost.exe 724 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, rpcss.dll, msvcrt.dll,
WS2_32.dll, WS2HELP.dll, USER32.dll,
GDI32.dll, Secur32.dll, userenv.dll,
CLBCATQ.DLL, ole32.dll, OLEAUT32.dll,
COMRes.dll, VERSION.dll
svchost.exe 760 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, ole32.dll, GDI32.dll,
USER32.dll, shsvcs.dll, msvcrt.dll,
SHLWAPI.dll, shell32.dll, comctl32.dll,
comctl32.dll, WINSTA.dll, UxTheme.dll,
dhcpcsvc.dll, DNSAPI.dll, WS2_32.dll,
WS2HELP.dll, iphlpapi.dll, netman.dll,
MPRAPI.dll, ACTIVEDS.dll, adsldpc.dll,
NETAPI32.dll, WLDAP32.dll, ATL.DLL,
OLEAUT32.dll, rtutils.dll, SAMLIB.dll,
SETUPAPI.dll, RASAPI32.dll, rasman.dll,
TAPI32.dll, WINMM.dll, Secur32.dll,
WZCSvc.DLL, WMI.dll, CRYPT32.dll,
MSASN1.dll, WTSAPI32.dll, mswsock.dll,
wshtcpip.dll, rsaenh.dll, rastls.dll,
SCHANNEL.dll, USERENV.dll, WinSCard.dll,
CLBCATQ.DLL, COMRes.dll, VERSION.dll,
raschap.dll, msv1_0.dll, schedsvc.dll,
NTDSAPI.dll, IMAGEHLP.dll, audiosrv.dll,
wkssvc.dll, NTMARTA.DLL, cryptsvc.dll,
WINTRUST.dll, certcli.dll, CRYPTUI.dll,
WININET.dll, ESENT.dll, pchsvc.dll,
trkwks.dll, srsvc.dll, seclogon.dll,
srvsvc.dll, es.dll, ersvc.dll, dmserver.dll,
SXS.DLL, w32time.dll, MSVCP60.dll, sens.dll,
browser.dll, wmisvc.dll, wbemcomn.dll,
VSSAPI.DLL, winrnr.dll, comsvcs.dll,
MTXCLU.DLL, WSOCK32.dll, colbact.DLL,
CLUSAPI.DLL, RESUTILS.DLL, mtxoci.dll,
wbemcore.dll, esscli.dll, FastProx.dll,
wmiutils.dll, repdrvfs.dll, wmiprvsd.dll,
NCObjAPI.DLL, wbemess.dll, termsrv.dll,
ICAAPI.dll, AUTHZ.dll, mstlsapi.dll,
NETSHELL.dll, credui.dll, RASDLG.dll,
REGAPI.dll, rasadhlp.dll, hnetcfg.dll,
ncprov.dll, wbemsvc.dll
svchost.exe 828 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, dnsrslvr.dll, msvcrt.dll,
USER32.dll, GDI32.dll, DNSAPI.dll,
WS2_32.dll, WS2HELP.dll, iphlpapi.dll,
netman.dll, MPRAPI.dll, ACTIVEDS.dll,
adsldpc.dll, NETAPI32.dll, WLDAP32.dll,
ATL.DLL, ole32.dll, OLEAUT32.dll,
rtutils.dll, SAMLIB.dll, SETUPAPI.dll,
RASAPI32.dll, rasman.dll, TAPI32.dll,
SHLWAPI.dll, WINMM.dll, SHELL32.dll,
Secur32.dll, WZCSvc.DLL, WMI.dll,
DHCPCSVC.DLL, CRYPT32.dll, MSASN1.dll,
WTSAPI32.dll, WINSTA.dll, comctl32.dll,
comctl32.dll, mswsock.dll, wshtcpip.dll
svchost.exe 840 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, ole32.dll, GDI32.dll,
USER32.dll, lmhsvc.dll, msvcrt.dll,
iphlpapi.dll, netman.dll, MPRAPI.dll,
ACTIVEDS.dll, adsldpc.dll, NETAPI32.dll,
WLDAP32.dll, ATL.DLL, OLEAUT32.dll,
rtutils.dll, SAMLIB.dll, SETUPAPI.dll,
RASAPI32.dll, rasman.dll, WS2_32.dll,
WS2HELP.dll, TAPI32.dll, SHLWAPI.dll,
WINMM.dll, SHELL32.dll, Secur32.dll,
WZCSvc.DLL, WMI.dll, DHCPCSVC.DLL,
DNSAPI.dll, CRYPT32.dll, MSASN1.dll,
WTSAPI32.dll, WINSTA.dll, comctl32.dll,
comctl32.dll, webclnt.dll, WININET.dll,
wsock32.dll, alrsvc.dll, regsvc.dll
explorer.exe 1108 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
USER32.dll, SHLWAPI.dll, SHELL32.dll,
ole32.dll, OLEAUT32.dll, BROWSEUI.dll,
SHDOCVW.dll, UxTheme.dll, comctl32.dll,
comctl32.dll, appHelp.dll, CLBCATQ.DLL,
COMRes.dll, VERSION.dll, cscui.dll,
CSCDLL.dll, themeui.dll, Secur32.dll,
MSIMG32.dll, USERENV.dll, netapi32.dll,
urlmon.dll, mlang.dll, mshtml.dll, msi.dll,
SETUPAPI.dll, LINKINFO.dll, ntshrui.dll,
ATL.DLL, WININET.DLL, CRYPT32.dll,
MSASN1.dll, NETSHELL.dll, credui.dll,
WS2_32.dll, WS2HELP.dll, iphlpapi.dll,
netman.dll, MPRAPI.dll, ACTIVEDS.dll,
adsldpc.dll, WLDAP32.dll, rtutils.dll,
SAMLIB.dll, RASAPI32.dll, rasman.dll,
TAPI32.dll, WINMM.dll, WZCSvc.DLL, WMI.dll,
DHCPCSVC.DLL, DNSAPI.dll, WTSAPI32.dll,
WINSTA.dll, shdoclc.dll, webcheck.dll,
msimtf.dll, MSCTF.dll, stobject.dll,
BatMeter.dll, POWRPROF.dll, MSLS31.DLL,
IMM32.DLL, printui.dll, WINSPOOL.DRV,
CFGMGR32.dll, MPR.dll, drprov.dll,
ntlanman.dll, NETUI0.dll, NETUI1.dll,
NETRAP.dll, davclnt.dll, SXS.DLL,
browselc.dll, DUSER.dll, wdmaud.drv,
msacm32.drv, MSACM32.dll, midimap.dll,
sensapi.dll, WINTRUST.dll, IMAGEHLP.dll,
rsaenh.dll, AcroIEHelper.ocx, SDHelper.dll,
olepro32.dll, msohev.dll, shmedia.dll,
MSVFW32.dll, AVIFIL32.dll, WMVCore.DLL,
WMASF.DLL, wmpshell.dll, actxprxy.dll,
MSGINA.dll, ODBC32.dll, comdlg32.dll,
odbcint.dll
svchost.exe 1276 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, wiaservc.dll, msvcrt.dll,
USER32.dll, GDI32.dll, OLEAUT32.dll,
OLE32.DLL, SHLWAPI.dll, CFGMGR32.dll,
setupapi.DLL, USERENV.dll, mscms.dll,
WINSPOOL.DRV, WINSTA.dll, VERSION.dll,
CLBCATQ.DLL, COMRes.dll, actxprxy.dll,
sti.dll
vsmon.exe 1296 Brak
zlclient.exe 1392 Brak
IEXPLORE.EXE 736 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, SHLWAPI.dll, SHDOCVW.dll,
comctl32.dll, SHELL32.dll, comctl32.dll,
ole32.dll, uxtheme.dll, BROWSEUI.dll,
browselc.dll, appHelp.dll, CLBCATQ.DLL,
OLEAUT32.dll, COMRes.dll, VERSION.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
Secur32.dll, cscui.dll, CSCDLL.dll,
SETUPAPI.dll, USERENV.dll, AcroIEHelper.ocx,
SXS.DLL, SDHelper.dll, olepro32.dll,
urlmon.dll, shdoclc.dll, mlang.dll,
wsock32.dll, WS2_32.dll, WS2HELP.dll,
mswsock.dll, wshtcpip.dll, RASAPI32.DLL,
rasman.dll, NETAPI32.dll, TAPI32.dll,
rtutils.dll, WINMM.dll, sensapi.dll,
DNSAPI.dll, winrnr.dll, WLDAP32.dll,
rasadhlp.dll, iphlpapi.dll, netman.dll,
MPRAPI.dll, ACTIVEDS.dll, adsldpc.dll,
ATL.DLL, SAMLIB.dll, WZCSvc.DLL, WMI.dll,
DHCPCSVC.DLL, WTSAPI32.dll, WINSTA.dll,
mshtml.dll, msimtf.dll, MSCTF.dll,
IMM32.DLL, msohev.dll, jscript.dll,
msxml3.dll, MSLS31.DLL, vbscript.dll,
Flash.ocx, comdlg32.dll, wdmaud.drv,
msacm32.drv, MSACM32.dll, midimap.dll,
mshtmled.dll, actxprxy.dll, dispex.dll,
imgutil.dll
IEXPLORE.EXE 460 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, SHLWAPI.dll, SHDOCVW.dll,
comctl32.dll, SHELL32.dll, comctl32.dll,
ole32.dll, uxtheme.dll, BROWSEUI.dll,
browselc.dll, appHelp.dll, CLBCATQ.DLL,
OLEAUT32.dll, COMRes.dll, VERSION.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll,
Secur32.dll, cscui.dll, CSCDLL.dll,
SETUPAPI.dll, USERENV.dll, AcroIEHelper.ocx,
SXS.DLL, SDHelper.dll, olepro32.dll,
urlmon.dll, shdoclc.dll, mlang.dll,
wsock32.dll, WS2_32.dll, WS2HELP.dll,
mswsock.dll, wshtcpip.dll, RASAPI32.DLL,
rasman.dll, NETAPI32.dll, TAPI32.dll,
rtutils.dll, WINMM.dll, sensapi.dll,
DNSAPI.dll, winrnr.dll, WLDAP32.dll,
rasadhlp.dll, iphlpapi.dll, netman.dll,
MPRAPI.dll, ACTIVEDS.dll, adsldpc.dll,
ATL.DLL, SAMLIB.dll, WZCSvc.DLL, WMI.dll,
DHCPCSVC.DLL, WTSAPI32.dll, WINSTA.dll,
mshtml.dll, msimtf.dll, MSCTF.dll,
IMM32.DLL, msohev.dll, jscript.dll,
msxml3.dll, MSLS31.DLL, vbscript.dll,
Flash.ocx, comdlg32.dll, wdmaud.drv,
msacm32.drv, MSACM32.dll, midimap.dll,
mshtmled.dll, ddrawex.dll, DDRAW.dll,
DCIMAN32.dll, dxtrans.dll, dxtmsft.dll,
imgutil.dll, iepeers.dll, WINSPOOL.DRV,
pngfilt.dll, actxprxy.dll, dispex.dll
winamp.exe 440 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
SHELL32.dll, msvcrt.dll, SHLWAPI.dll,
COMCTL32.dll, ole32.dll, comdlg32.dll,
comctl32.dll, uxtheme.dll, Polski.lng,
in_cdda.dll, OLEAUT32.dll, WINMM.dll,
in_midi.dll, read_file.dll, in_mod.dll,
in_mp3.dll, WSOCK32.dll, WS2_32.dll,
WS2HELP.dll, in_vorbis.dll, in_wave.dll,
MSACM32.dll, in_wm.dll, wmaudsdk.dll,
DRMClien.DLL, VERSION.dll, strmdll.dll,
TAPI32.dll, rtutils.dll, out_disk.dll,
out_ds.dll, out_wave.dll, out_wm.dll,
ddraw.dll, DCIMAN32.dll, gen_ml.dll,
CLBCATQ.DLL, COMRes.dll, dsound.dll,
wdmaud.drv, msacm32.drv, midimap.dll,
KsUser.dll
cmd.exe 1464 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll
tasklist.exe 1404 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, USER32.dll,
GDI32.dll, MPR.dll, ole32.dll, OLEAUT32.dll,
Secur32.dll, WS2_32.dll, WS2HELP.dll,
framedyn.dll, NETAPI32.dll, DBGHELP.dll,
VERSION.dll, uxtheme.dll, CLBCATQ.DLL,
COMRes.dll, wbemprox.dll, wbemcomn.dll,
Winsta.dll, wbemsvc.dll, fastprox.dll
wmiprvse.exe 164 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, USER32.dll,
GDI32.dll, FastProx.dll, wbemcomn.dll,
OLEAUT32.dll, OLE32.DLL, NCObjAPI.DLL,
uxtheme.dll, CLBCATQ.DLL, COMRes.dll,
VERSION.dll, wbemprox.dll, wbemsvc.dll,
wmiutils.dll, cimwin32.dll, framedyn.dll,
Secur32.dll, SETUPAPI.dll, WTSAPI32.dll,
WINSTA.dll, CFGMGR32.DLL, WMI.DLL,
NETAPI32.DLL
W czasie ładowania sytemu jest wprowadzana
do zastrzeżonej części pamięci.
Inne aplikacje nie mogą jej nadpisać
Ale wirusy to potrafią.
Trudno stwierdzić czy biblioteka kernell32.dll jest wykorzystywana przez wszystkie uruchamiane aplikacje,ale jest to ważna biblioteka systemowa ładowana przy starcie systemu i potrzebna do prawidłowej pracy systemu i można uznać że tak jest.
A dokładnie trzeba by było sprawdzić jakie dana aplikacja wykorzystuje pliki i zasoby systemu do pracy.
Trzeba by zastosować program monitorujący ten proces,jaki nie wiem.
co oznaczaj nazwy plików z koncówką *32.dll no kernel32.dll, olepro32.dll, USER32.dll itd…
Czy ma jakieś znaczenie gdy kernelll32.dll jest zapisany małą czy wielką literą.