Rundll32 Exe

What is Rundll32. Exe - Do You Keep it or Get Rid of It?

Rundll32.exe is a computer process that windows needs, however it does have a vulnerability which allows programs to be run by an attacker and give them backdoor access to your computer. When an attacker gets access to this file then he can access your computer from other locations, steal passwords, access Internet banking and personal information.

Although there are many of these types of files that are used to run malware, it is also used by legitimate programs. This file is used to run DLL’s and places the DLL libraries in memories. It is a command line utility program and functions in conjunction with rundll.exe files.

The Rundll32.exe file starts a function that is exported from a 16bit or a 32 bit DLL module, but these are the only files that can be accessed by the function. In other words, the file starts parsing the command line. Then it loads into the function LoadLibrary(), then it gets addresses with the GetProcAddress() command. This is then passed on when it is called, and the DLL is unloaded when it returns and then the file closes. This is why you should run a registry scan every once in a while to make sure you get rid of un-needed process files of this type. There can be more than one instance of this process running on a pc, and some applications may be needed while others won't. This is why you should scan a computer for these types of errors.


This is an important file, and windows needs it, to function properly. Without the file your computer slows down and becomes unstable. It runs from the windows system32 file system, however there are some Rundll.exe files that try to start from other areas on the computer, but that is usually a Trojan horse, or a virus. When you know this is happening you really need to scan the computer with your antivirus. There are several viruses that use this process, among them are the W32.Miroot.Worm, Backdoor Lastdoor, and others.

Other viruses tend to destroy the rundll32.exe file and sometimes the file just becomes corrupt on its own. When this happens you need to find another copy on your computer. You can look in the folder C:windowsServicePackFilesi386 or in C:windowssystem32dllcache.

When you can’t locate a copy of the file on your system, then you should look on the installation disks, and if all else fails you can always re-install windows. However you only want to do a re-installation as a last resort. So, before doing that, you want to try one of the many internet tools which will analyze, scan and fix your computer registry. These tools put everything back in its proper order. A registry cleaner will not only put this important file back in its correct place, but it will also clean up and repair other processes and files in the registry, thereby helping your computer run efficiently.