TWUNK32.EXE

Black Dog

Black Dog

Black Dog

Associate
Joined
26 Oct 2002
Posts
1,979
Location
Reading, England
Hi,

Just lately I have noticed the blue circle spinning on my mouse about every minute for about 10 seconds even though it's idle at the desktop. I went into my processes and I see TWUNK32.EXE Twain.dll running and upon further examination another one comes along which causes my cursor to blue circle. I can have up to four of them running at the same time switching on and off.
It's not effecting my pc in any way performance wise or getting any error messages but it's a little worrying and it's draining some resources. I have googled it but get conflicting information with it being a deadly virus or nothing to worry about as it's normal.
It only appears when I am connected to the internet, disconnect my wireless and it goes.

Looks like the files are in my system folder, I have tried to dummy delete them but access denied.

Anybody able to give some answers??
 
Have you googled the exe? Most known malware executables are listed on well known/recommended malware removal sites.
 
I have but get a mixed reply. Some say it's something to do with scanners which I don't have but could also be used as a decoy for a virus.

It's strange that it only does it connected to the net which is making me think spyware.

Off a site:

What Is Twunk_32.exe?

Twunk_32.exe is a process associated with Twain Thunker from Twain Working Group. According to Wikipedia, TWAIN is “an applications programming interface (API) and communications protocol that regulates communication between software and digital imaging devices, such as image scanners and digital cameras”. There’s another definition made by Microsoft that TWAIN is “a technology used to acquire an image directly from a scanner and insert it into your document or publication”. Twunk_32.exe is particularly created to allow 32-bit applications to call 16 bit.

Twunk_32 mechanism
(TWAIN working mechanism diagram)


TWAIN defines three modes of image transfer:
Native – refers to DIB (Device Independent Bitmap) in memory on Windows.
Memory – refers to strips or blocks of pixels in a series of memory buffers.
File – refers to DS writing the image out directly to a file.
That explains well why most game players encounter twunk_32.exe problem.


Twunk_32.exe Parameter

Process file: twunk_32.exe

Process name: Twain.dll Client’s 32-Bit Thunking Server

Publisher: Twain Working Group

System process: No

Background program: No


Is Twunk_32.exe Virus?

It can be learned that twunk_32.exe is not a virus itself from the above parameter. However, twunk_32.exe can be faked by cyber criminals to and put in other parts of a system such as c:windows\system32\dllcache\twunk.32.exe. The genuine twunk_32.exe is generally placed under “C:\WINDOWS” rather than any sub-folder under that directory such as “C:\WINDOWS\system32”.

Kaspersky once detected a Trojan that fakes twunk_32.exe which was Trojan-Downloader.Win32.Small.czl. Such Trojan copies itself to %System%\twunk32.exe and releases %System%\drivers\usbme.sys to generate its startup as [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run]“twin”=”%System%\twunk32.exe”. TrojanDownloader:Win32/Bagle.CC.dll had also been detected to fake twunk_32.exe and confuse anti-virus program not to remove it automatically and easily.
 
You must log in or register to reply here.
Back
Top Bottom