Perfect Optimizer Review

What is Rundll32.exe?

Now, let's learn more about the Rundll32.exe file. The role of Rundll32.exe is running the internal function of the DLL files, so that there is only Rundll32.exe processes, instead of the back door DLL that allows the DLL files that are hidden. If you find that there are several Rundll32.exe in the system, please do not worry, as this just shows how many DLLs are started. Of course, such as DLL files are executed by Rundll32.exe, we can find that the system automatically loads.

Rundll32.exe is infected?

If your computer has disguised the Rundll32.exe file, the system can contain multiple files produced by viruses. In general, these files survive linked to other processes, and download or upload the information in the context of the system, making it relatively extensive damage to the system. The following is a sum up of some of the characteristics of Rundll32 infected, which can be good alert to computer users while using their computers.

One feature:
While opening a web page, the computer becomes very slow, in processes in Task Manager, Rundll32.exe occupies 99% of the CPU. Meanwhile, there are other processes with strange names that appear again after being closed. And the antivirus / anti-spyware not seem to work on these processes.

They have two:
Download a free tool Process Viewer to see the file path of the Rundll32.exe process. If the file path is C: Windows/System32, is often the case that the virus disguises itself and stored in another file directory. Then, there's always Rundll32.exe many who appear in the process of the system, while there is usually as hidden file.

They have three:
Check the registry. If one adds the following keys, then the system has been infected.
[HKEY_LOCAL_MACHINE]
"TaskMan" = "C: WINNTFontsrundll32.exe"
"Explorer" = "C: WINNTFontsexplorer.exe"
"messnger" = "C: WINNTsystem32Dvldr32.exe"

Present four:
The system of access to a computer, click Run on the Start menu, type cmd, type netstat-an at the command window open. If a large number of TCP connections to the external port 6667, or TCP port 5800 and 5900 are in monitoring, then your system may have been infected as follows:
C:> netstat.exe-n
Active Connections
Proto Local Address Foreign Address State
X.x.x.x TCP: 1043 149.156.91.2:6667 CLOSE_WAIT
X.x.x.x TCP: 1045 198.65.147.245:6667 CLOSE_WAIT
...
X.x.x.x TCP: 4811 198.65.147.245:6667 CLOSE_WAIT
X.x.x.x TCP: 4887 149.156.91.2:6667 CLOSE_WAIT

Present five:
Often disguised under different names processes, such as rundll132.exe, rundl132.exe, etc. All these should be carefully considered with a Process Viewer tool.

Solutions to fix Rundll32.exe

1. Rundll32.exe is a Windows executable file that can be disabled by many viruses. However, there is a virus called "Happy Times", which has the same name and size Rundll32.exe and keeps playing in the root of each folder is opened. If a large number of this file appears in your computer, your computer is infected, no doubt, and usually most antivirus software can not solve this problem. The general solution is, bulk manually delete all files with Rundll32.exe name, and after retrieving the source program for Windows, the Rundll32.exe file useful. The way to recover it, taking into Windows XP as an example, typing "cmd" in the Run box and pressing Enter, typing:
expand CD-ROM rundll32.exe% systemroot% i386rundll32.ex_
CD-ROM is the location of the operating system source code, not necessarily of the unit.

2. The original file Rundll32.exe has backup in C: WindowsSystem32DllCache, where you can make a copy.

3. Downloading the same file from the website and coverage in the C: WindowsSystem32.

4. If you have two computers at home, which is also available to copy and retrieve the file from one computer to another.

Please note that Rundll32.exe only in the same system version can be retrieved, or the system will display an error. Before recovering the process manager should be used first to end the Rundll32.exe process.

If you are still not sure his Rundll32.exe is infected after reading the four previous features, you can also download Spyware Cease and run the online scan function built in, to verify the accuracy and diagnose whether your Rundll32.exe has been infected.