The rundll32.exe process is responsible for running DLLs and placing its libraries in the memory. The rundll32.exe process is known as a command line utility program, and it performs its embedded functions along with the rundll.exe file. Rundll32.exe works by invoking a function that is exported from a specific 16-bit or 32-bit DLL module. However the only DLLs that you can call with the rundll.exe and rundll32.exe files are the ones that are only specified to be accessed by these processes.
The rundll32.exe file operates by parsing the command line. The specified DLL is then loaded through the function LoadLibrary(). Afterwards, from the function , it gets the addresses through GetProcAddress(). The command line tail is passed when the is called. Next, the DLL is unloaded upon the return of . Finally, the rundll32.exe file exits.
Note: "rundll32.exe is a process registered as a backdoor vulnerability which may be installed for malicious purposes by an attacker allowing access to your computer from remote locations, stealing passwords, Internet banking and personal data.\r" This process is a security risk and should be removed from your system.\r
Note: rundll32.exe could also be a process which belongs to the . "This program is a non-essential process, but should not be terminated unless suspected to be causing problems.\r"
Determining whether rundll32.exe is a virus or a legitimate Windows process depends on the directory location it executes or runs from.
We strongly recommend that you run a registry scan to identify rundll32.exe related errors.