Places the mouse cursor in the upper left corner Rundll32.exe Sysdm.cpl,InstallDevice_Rundllĭisconnection of the network connection to the network server Rundll32.exe Msprint2.dll, RUNDLL_PrintTestPage commandĪutomatically arrange all open tasks side by sideĪutomatically arrange all open tasks one after the other
This may also differ from service pack, update or third-party software. Īs a rule, these calls are not officially documented, so availability may vary depending on the operating system version and edition. For example, in some dialogs with several tabs, the number of the tab as, 1 or, 1. The second parameter is the name of the routine, the other parameters are input values for this routine, e.g.
exe file the extension is not specified, because it is found via the path variable and the Windows-typical supplementary key *.exe → *.dll → andere Dateien. List of functionsīelow is a list of typical functions.
A maliciously replaced original RunDLL is backed up by the Windows system restore function, which automatically resets system files to a reliable state. securityĭue to its frequent use by programs, through which rundll32 can frequently appear in the process list, the rundll32 is often used by viruses, spyware and the like as the "namesake" for their malware programs.įurthermore, a file outside of %windir% the name is rundll32.exe in most cases a virus. In any case, this leads to a corruption of the stack and to unforeseen behavior, for example endless loops. Usually, however, this restriction is disregarded (also from the examples on this page). The functions called by Rundll32.exe are expected to correspond to a specific signature: void CALLBACK NameDerFunktion(HWND hwnd, HINSTANCE hinst, LPSTR lpszCmdLine, int nCmdShow) Since the functions run very close to the operating system, caution is advised in the relevant circles during experiments and is only recommended for somewhat experienced users. This method can be executed from the command line or batch processing, from various script languages and with simple links ( LNK files ).
rundll32 shell32.dll,Control_RunDLL access.cpl,4.opens the time zone setting of the date / time function.While the applets of the individual functions are well documented, when controlling the appropriate tab, you have to rely on trials or tips in the relevant literature and web resources. the number of the tab if the applet has several of them rundll32 SHEL元2.DLL,Control_RunDLL filename.CPL Control Panel.
This is done by calling the Shell32.dll : The control panels (CPL files), which are normally called up via the virtual system control folder, can alternatively be made directly accessible with the RunDLL via the command line. opens the file named% 1 with the standard application assigned to it ( automatic file recognition ).rundll32 URL.DLL,FileProtocolHandler "%1".Reboot (restart) the system (from Windows XP the reboot is shutdown.exe controlled via the program file.).rundll32 SHEL元2.DLL,SHExitWindowsEx 2.opens the function Safely Remove Hardware, such as those for USB flash drives is needed.rundll32 SHEL元2.DLL,Control_RunDLL hotplug.dll.Program functions in executable system files ( EXE files ) can also be called in the same way. The execution takes place in a separate process, so RunDLL calls are also used by other programs that want to protect themselves against errors in the called DLL.
The RunDLL allows individual functions of such an interface to be called, for example on the command line, from scripts or as a link. A program library ( DLL file ) is used to make functions available to other programs as a program module, but normally cannot be executed directly.