Tuesday, February 8, 2011

Windows XP Processes - rundll32.exe

Windows XP Processes - rundll32.exe


What is rundll32.exe?

rundll32.exe - Microsoft Rundll32

The rundll32.exe process is responsible for running DLLs and placing its libraries in the memory. The rundll32.exe process is known as a command line utility program, and it performs its embedded functions along with the rundll.exe file. Rundll32.exe works by invoking a function that is exported from a specific 16-bit or 32-bit DLL module. However the only DLLs that you can call with the rundll.exe and rundll32.exe files are the ones that are only specified to be accessed by these processes.


Importance of rundll32.exe

  • The rundll32.exe file operates by parsing the command line. The specified DLL is then loaded through the function LoadLibrary(). Afterwards, from the function , it gets the addresses through GetProcAddress(). The command line tail is passed when the is called. Next, the DLL is unloaded upon the return of . Finally, the rundll32.exe file exits.

  • rundll32.exe is a system process that is needed for your Windows system to work properly. It should not be removed.

  • This process is considered safe. It is unlikely to pose any harm to your system.

  • This process is considered to be CPU intensive. Without proper management, CPU intensive processes can manipulate system resources and slows down computer performance.

0 comments:

Post a Comment

Search This Blog

Followers

Categories

Twitter Delicious Facebook Digg Stumbleupon Favorites More