venerdì 1 maggio 2009

Rundll32 : What is rundll32.exe?

 

What is rundll32.exe?

The rundll32.exe process is responsible for running DLLs and placing its libraries in the memory. The rundll32.exe process is known as a command line utility program, and it performs its embedded functions along with the rundll.exe file. Rundll32.exe works by invoking a function that is exported from a specific 16-bit or 32-bit DLL module. However the only DLLs that you can call with the rundll.exe and rundll32.exe files are the ones that are only specified to be accessed by these processes.
The rundll32.exe file operates by parsing the command line. The specified DLL is then loaded through the function LoadLibrary(). Afterwards, from the function , it gets the addresses through GetProcAddress(). The command line tail is passed when the is called. Next, the DLL is unloaded upon the return of . Finally, the rundll32.exe file exits.


Other instances of RUNDLL32.EXE:
1) rundll32.exe is a process registered as a backdoor vulnerability which may be installed for malicious purposes by an attacker allowing access to your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.

2) rundll32.exe could also be a process which belongs to the . This program is a non-essential process, but should not be terminated unless suspected to be causing problems.

warning note

Warning: Multiple instances of RUNDLL32 may be running on your pc at one time. Some of these may or may not be the legitimate versions.
Scan for RUNDLL32.EXE related errors

Nessun commento:

Posta un commento