rundll32.exe-is it a virus? and how can i avoid it?

Question

rundll32.exe-is it a virus? and how can i avoid it?

Answer 1

This program is part of Windows, and is used to run program code in DLL files as if they were within the actual program. However, many viruses also use this name or similar ones. This file is also commonly used by spyware to launch its own malicious code.



Note: The rundll32.exe file is located in the folder C:\Windows\System32. In other cases, rundll32.exe is a virus, spyware, trojan or worm! Check this with Security Task Manager.



Virus with same name:

W32.Miroot.Worm

Backdoor.Lastdoor

Trojan.StartPage



http://www.neuber.com/taskmanager/process/rundll32.exe.html

Answer 2

The rundll32.exe process is responsible for running DLLs and placing its libraries in the memory. The rundll32.exe process is known as a command line utility program, and it performs its embedded functions along with the rundll.exe file. Rundll32.exe works by invoking a function that is exported from a specific 16-bit or 32-bit DLL module. However the only DLLs that you can call with the rundll.exe and rundll32.exe files are the ones that are only specified to be accessed by these processes.



The rundll32.exe file operates by parsing the command line. The specified DLL is then loaded through the function LoadLibrary(). Afterwards, from the function , it gets the addresses through GetProcAddress(). The command line tail is passed when the is called. Next, the DLL is unloaded upon the return of . Finally, the rundll32.exe file exits.



If you are having trouble with this file get out your disc and run a repair on it.

Answer 3

This program is part of Windows, and is used to run program code in DLL files as if they were within the actual program. However, many viruses also use this name or similar ones. This file is also commonly used by spyware to launch its own malicious code.

Note: The rundll32.exe file is located in the folder C:\Windows\System32. In other cases, rundll32.exe is a virus, spyware, trojan or worm! Check this with Security Task Manager.

Virus with same name:

W32.Miroot.Worm - Symantec Corporation

Backdoor.Lastdoor - Symantec Corporation

Trojan.StartPage - Symantec Corporation



RunDLL32.exe is in itself harmless - it's a neccesary part of Windows. The problem comes from malware/badly coded programs/etc. These commonly use RunDLL32 to open popups, run keyloggers, etc., but it is also vital to many ligitimate processes. Don't remove it - just try to find out what's running it, then remove that. In the meantime, kill the process using Task Manager. Remember, something legit may be using it too, so use info like the "Mem Usage" & "CPU" to guess at which it is... generally though there'll only be one "rundll32.exe" process running, the bad one, if indeed any.



Go through source link and you find the user opinions on rundll32.exe and you can learn deeply on rundll32.exe with out needing any other resource.

------------------------------------------------------------------------------------------------------

Remove virus affective rundll32.exe in easy steps and you may not be a professional:-

The second source link will guide you in this regard.

------------------------------------------------------------------------------------------------------

Hope this helps you in finding your best answer.

Answer 4

If you use kaspersky. It probably said that rundll32 is making suspicious actions or it has been modified, or it is a risk of hidden install. Don't believe those! They are pure crap. Hp(harry potter)is a keylogger! >< Jazz2.exe keylogger. YMessenger.exe Invader!

Bull Flat.

Rundll is not a virus. It cannot be. Is one of the most improtant programs in the use of windows XP along with explorer.exe and gdi32.dll.



If you know how to check a binary code for a file... 102 is the infected file code.

Answer 5

It's a part of windows used to run code.



Do a search and it should located in system folder C:\Windows\System32



If there is rundll32.exe located anywhere other than there ,then it maybe an infection ,best to run scans and check all is safe anyway...

Answer 6

It is not a virus, and you should not get rid of it. It is a program which is reading .dll (dynamic link library) files on your computer on behalf of other running programs.

Answer 7

It is not a virus.. it is a crucial file to Windows functionality.