rundll32.exe cannot access nvcpl.dll

[Guest]

[schwartr]

D+ prevents rundll32.exe from accessing nvcpl.dll (nividia control panel) regardless of the settings. I have tried setting rundll32.exe as a windows system app. and a trusted app. and it still will not work. Using CIS 3.10.x.531. This began with .530 update.

[EricJH]

What does the alert say? Does it say rundll32.exe is trying to access nvcpl.exe in memory?

[schwartr]

It started immediately after updating CIS. It is not blocked by anything and rundll32.exe has permission to access it.

[EricJH]

Can you take a look at the Defense + logs and post a screenshot of around the time this happens? The logs can be found under Defense + --> Common Tasks --, View Defense + events.

[schwartr]

There is no mention of it in the D+ log. 
The problem started the instant after updating CIS, so I know CIS is the cause. For what ever reason, there is no record of it.

[EricJH]

Go to Computer Security Policy and look up the rule for rundll32.exe. Now choose to Edit it --> Access rights --> look at Run an executable (on top) --> it should be set to Ask --> Modify --> blocked applications --> see if the NvCpl.dll is there and delete it. Ok and Apply your way out now.

[Tags:]