What is the Rundll32.exe process? Can Rundll32.exe end?

Source: Internet
Author: User
Tags intl locale memory usage

What is the Rundll32.exe process?

Rundll32.exe is used to run DLL files in memory and they are used in applications. This program is very important for the normal operation of your system. Note: Rundl132.exe and rundll32.exe. But Rundl132.exe is a W32.Miroot.Worm virus. The virus allows attackers to access your computer, steal passwords and personal data. The recommendation for this file is to delete it immediately.

Process information

Process files: rundll32 or rundll32.exe
Process Name: Microsoft Rundll32
Normal Position: X: (current system partition) Windowssystem32
Description: Test for netguide. ----Caiger2008
Produced by: Microsoft Corp.
Belongs to: Microsoft Windows operating System
System process: Yes
Background program: Yes
Use Network: No
Hardware Related: No
Common error: unknown n/A
Memory usage: unknown N/A
Security Level (0-5): 0
Spyware: No
Adware: No
Advertising software: No
Trojan: No
File information
FileName: rundll32.exe
Software Size: 7.32MB
Software language: Chinese Simplified
Developer: Homepage
Software Category: Domestic software
Software Licensing: Free version
Update Time: 2010-02-0814:59:44

Can Rundll32.exe end?

The Rundll32.exe process file is a 32-bit DLL file that is a system process for Microsoft Windows operating systems that is used in applications and is important for the normal functioning of the system. Sometimes we see that there are multiple rundll32.exe processes in the system, indicating how many DLL files Rundll32.exe started, which is a normal phenomenon. If you end the Rundll32.exe process, it can cause one of the system's services to terminate and may affect the system's normal operation. It is best not to end the Rundll32.exe process if the system is not running abnormally.

Rundll32.exe may also be exploited by viruses, causing all applications to open, prompting the association program to be found. Or the system is always prompted to find rundll32.exe files, the proposed use of anti-virus software for the overall antivirus.


How do you judge Rundll32.exe poisoned?

Signs of poisoning:

When you open some items in the Control Panel, an error message appears that Rundll32.exe cannot find the application. Looking for ways to repair rundll32.exe.

Purge method:

This virus is relatively easy to deal with, the author summarizes the way to deal with this virus is as follows:
1: Turn off the virus process Explorer.exe+rundll32.exe.
2: Repair the virus startup item, prevents the virus to load automatically when the system starts.
3: According to the virus to start the path indicated, one by one to the folder below to find the virus, deleted.
4: Restart, and then turn on the Golden Hill anti-virus software scan antivirus overall.
5: Purge system garbage files.


Rundll32.exe Related Methods

, Rundll32.exe has a unique advantage in calling various Windows Control panels and system options. Below, I will be my collection on the internet on the Rundll instructions listed below (very useful, can save you a lot of calls to the Windows API time!!) For you to refer to in your program design:
Command column: Rundll32.exe shell32.dll,Control_RunDLL
Function: Display Control Panel
Command column: rundll32.exe shell32.dll,Control_RunDLL access.cpl,,1
Features: Display the Control Panel-Accessibility-Keyboard Options window
Command column: rundll32.exe shell32.dll,Control_RunDLL access.cpl,,2
Features: Display the Control Panel-accessibility-Sound Options window
Command column: rundll32.exe shell32.dll,Control_RunDLL access.cpl,,3
Features: Display the Control Panel-accessibility-Show Options window
Command column: rundll32.exe shell32.dll,Control_RunDLL access.cpl,,4
Features: Display the Control Panel-accessibility-Mouse Options window
Command column: rundll32.exe shell32.dll,Control_RunDLL access.cpl,,5
Features: Display the Control Panel-Accessibility-Legacy Options window
Command column: rundll32.exe shell32.dll,control_rundll sysdm.cpl @1
Function: Perform the Control Panel-Add New Hardware wizard.
Command column: Rundll32.exe shell32.dll,shhelpshortcuts_rundll addprinter
Function: Perform the Control Panel-Add New Printer wizard.
Command column: rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl,,1
Features: Display the Control Panel-Add/Remove Programs-install/uninstall panel.
Command column: rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl,,2
Features: Display the Control Panel-Add/Remove Programs-install Windows panel.
Command column: rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl,,3
Function: Display the Control Panel-Add/Remove Programs-Startup disk panel.
Command column: Rundll32.exe syncui.dll,briefcase_create
Function: Create a new "My Briefcase" on the desktop.
Command column: Rundll32.exe Diskcopy.dll,diskcopyrundll
Function: Display copy soft disk window
Command column: rundll32.exe apwiz.cpl,newlinkhere%1
Function: Displays the Create Shortcut dialog box, where the location of the shortcut is determined by the%1 parameter.
Command column: rundll32.exe shell32.dll,Control_RunDLL timedate.cpl,,0
Features: Displays the Date and Time Options window.
Command column: rundll32.exe shell32.dll,Control_RunDLL timedate.cpl,,1
Features: Displays the Time Zone Options window.
Command column: Rundll32.exe rnaui.dll,rnadial [Name of a dial-up connection]
Function: Displays a dial-up window for a dial-up connection. If you have a dial-up connection, display the current Connection Status window.
Command column: Rundll32.exe Rnaui.dll,rnawizard
Features: Displays a window for the New Dial-up Connection Wizard.
Command column: rundll32.exe shell32.dll,Control_RunDLL desk.cpl,,0
Features: Displays the show Properties-background option window.
Command column: rundll32.exe shell32.dll,Control_RunDLL desk.cpl,,1
Features: Displays the Display Properties-screen Protection option window.
Command column: rundll32.exe shell32.dll,Control_RunDLL desk.cpl,,2
Features: Displays the Display Properties-appearance Options window.
Command column: rundll32.exe shell32.dll,Control_RunDLL desk.cpl,,3
Features: Displays the Display Properties-Properties Option window.
Command column: Rundll32.exe shell32.dll,shhelpshortcuts_rundll fontsfolder
Features: Displays the Windows font file folder.
Command column: rundll32.exe shell32.dll,control_rundll main.cpl @3
Features: The same is the font folder that displays Windows.
Command column: Rundll32.exe shell32.dll,shformatdrive
Features: Displays the formatted Soft Disc dialog box.
Command column: rundll32.exe shell32.dll,Control_RunDLL joy.cpl,,0
Function: Display the Control Panel-game controller-General Options window.
Command column: rundll32.exe shell32.dll,Control_RunDLL joy.cpl,,1
Function: Display the Control Panel-game controller-Advanced Options window.
Command columns: rundll32.exe mshtml.dll,printhtml (HTML document)
Function: Print HTML document.
Command column: rundll32.exe shell32.dll,Control_RunDLL mlcfg32.cpl
Features: Displays the Microsoft Exchange General Options window.
Command column: rundll32.exe shell32.dll,control_rundll main.cpl @0
Features: Displays the Control Panel-mouse option.
Command column: rundll32.exe shell32.dll,control_rundll main.cpl @1
Features: Displays the Control Panel-keyboard Properties-speed Option window.
Command column: rundll32.exe shell32.dll,control_rundll main.cpl @1,,1
Features: Displays the Control Panel-Keyboard Properties-language Option window.
Command column: rundll32.exe shell32.dll,control_rundll main.cpl @2
Features: Displays the Windows Print Machine folder.
Command column: rundll32.exe shell32.dll,control_rundll main.cpl @3
Features: Displays the Windows Fonts folder.
Command column: rundll32.exe shell32.dll,control_rundll main.cpl @4
Function: Display the Control Panel-Input Method Properties-Input Method Options window.
Command column: rundll32.exe shell32.dll,Control_RunDLL modem.cpl,,add
Function: Perform the Add New Modem wizard.
Command column: rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl,,0
Function: Displays the Control Panel-Multimedia Properties-Audio property page.
Command column: rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl,,1
Features: Displays the Control Panel-multimedia Properties-video property page.
Command column: rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl,,2
Features: Displays the Control Panel-Multimedia Properties-midi property page.
Command column: rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl,,3
Features: Displays the Control Panel-multimedia Properties-CD Music property page.
Command column: rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl,,4
Features: Displays the Control Panel-Multimedia Properties-Devices property page.
Command column: rundll32.exe shell32.dll,control_rundll mmsys.cpl @1
Features: Displays the Control Panel-Sound Options window.
Command column: rundll32.exe shell32.dll,Control_RunDLL netcpl.cpl
Features: Displays the Control Panel-Network Options window.
Command column: rundll32.exe shell32.dll,Control_RunDLL odbccp32.cpl
Features: Displays the ODBC32 Data Management Options window.
Command column: Rundll32.exe shell32.dll,openas_rundll {drive:pathfilename}

Features: Displays the Open With dialog box for the specified file (drive:pathfilename).
Command column: rundll32.exe shell32.dll,Control_RunDLL password.cpl
Function: Displays the Control Panel-Password Option window.
Command column: rundll32.exe shell32.dll,Control_RunDLL powercfg.cpl
Features: Displays the Control Panel-Power Management Properties Option window.
Command column: Rundll32.exe shell32.dll,shhelpshortcuts_rundll printersfolder
Features: Displays the Windows Print Machine folder. (with rundll32.exe shell32.dll,Control_RunDLL main.cpl @2)
Command column: rundll32.exe shell32.dll,Control_RunDLL intl.cpl,,0
Features: Displays the Control Panel-Regional Settings Properties-Regional Settings Options window.
Command column: rundll32.exe shell32.dll,Control_RunDLL intl.cpl,,1
Function: Displays the Control Panel-locale Properties-number Option window.
Command column: rundll32.exe shell32.dll,Control_RunDLL intl.cpl,,2
Features: Displays the Control Panel-Regional Settings Properties-currency Option window.
Command column: rundll32.exe shell32.dll,Control_RunDLL intl.cpl,,3
Features: Displays the Control Panel-locale Properties-time Option window.
Command column: rundll32.exe shell32.dll,Control_RunDLL intl.cpl,,4
Features: Displays the Control Panel-locale Properties-date Option window.
Command column: rundll32.exe desk.cpl,installscreensaver [Screen protection file name]
Function: Sets the specified screen protection file to Windows screensaver and displays the Screen Protection Properties window.
Command column: rundll32.exe shell32.dll,Control_RunDLL sysdm.cpl,,0
Function: Displays the Control Panel-System Properties-legacy Properties window.
Command column: rundll32.exe shell32.dll,Control_RunDLL sysdm.cpl,,1
Function: Displays the Control Panel-System Properties-Device Manager Properties window.
Command column: rundll32.exe shell32.dll,Control_RunDLL sysdm.cpl,,2
Function: Displays the Control Panel-System Properties-Hardware profile Properties window.
Command column: rundll32.exe shell32.dll,Control_RunDLL sysdm.cpl,,3
Function: Displays the Control Panel-System Properties-performance Properties window.
Command column: Rundll32.exe user.exe,restartwindows
function: Forcibly shut down all programs and reboot the machine.
Command column: Rundll32.exe user.exe,exitwindows
function: Forcibly shut down all programs and shut down the machine.
Command column: rundll32.exe shell32.dll,Control_RunDLL telephon.cpl
Features: Display the Dialing Properties option window
Command column: rundll32.exe shell32.dll,Control_RunDLL themes.cpl
Features: Display the desktop theme Options panel

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.