Versions

6.3.9600.16384 (winblue_rtm.130821-1623)	0.64%
6.3.9600.16384 (winblue_rtm.130821-1623)	0.32%
6.2.9200.16384 (win8_rtm.120725-1247)	0.48%
6.2.9200.16384 (win8_rtm.120725-1247)	2.24%
6.1.7600.16385 (win7_rtm.090713-1255)	20.29%
6.1.7600.16385 (win7_rtm.090713-1255)	28.91%
6.1.7600.16385 (win7_rtm.090713-1255)	0.16%
6.0.6000.16386 (vista_rtm.061101-2205)	6.87%
6.0.6000.16386 (vista_rtm.061101-2205)	3.51%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710)	0.16%
5.2.3790.1830 (srv03_sp1_rtm.050324-1447)	0.16%
5.1.2600.5512 (xpsp.080413-2105)	27.32%
5.1.2600.5512 (xpsp.080413-2105)	0.16%
5.1.2600.5512 (xpsp.080413-2105)	0.16%
5.1.2600.3311 (xpsp.080212-0004)	0.16%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	8.47%

Relationships

• dbgsvc.exe (Debug Diagnostic Tool by Microsoft Corporation)
• fhautoplay.dll (by Microsoft)
• buildnotification.exe (by Microsoft)
• ehexthost.exe (Media Center Extensibility Host by Microsoft)
• onenoteim.exe (Microsoft OneNote by Microsoft Corporation)
• powershell.exe (Windows PowerShell by Microsoft)
• ipoverusbsvc.exe (Microsoft Windows Operating System by Microsoft Corporation)
• iedvtool.dll (Internet Explorer by Microsoft)
• korime.exe (Microsoft IME by Microsoft)
• chtime.exe (Microsoft IME by Microsoft)
• emet_gui.exe (Enhanced Mitigation Experience Toolkit by Microsoft Corporation)
• emet_agent.exe (Enhanced Mitigation Experience Toolkit by Microsoft Corporation)
• filemanager.exe (OneDrive by Microsoft Corporation)
• mstore.exe (Microsoft Clip Organizer by Microsoft Corporation)
• chsime.exe (Microsoft IME by Microsoft)
• scardsvr.dll (Smart Card Resource Management Server by Microsoft)
• gpsvc.dll (Group Policy Client by Microsoft)
• certprop.dll (Microsoft Smartcard Certificate Propagation Service by Microsoft)
• integratedoffice.exe (Microsoft Office by Microsoft Corporation)
• actioncenter.dll (Action Center by Microsoft)
• f12tools.dll (Internet Explorer by Microsoft)
• ndsm.exe (by Microsoft)
• mdres.exe (Windows Memory Diagnostic by Microsoft)
• wlidsvc.dll (by Microsoft)
• reseteng.dll (by Microsoft)
• numbers.exe (Numbers by Microsoft)
• systemsettings.exe (by Microsoft)

rundll32.exe

Windows host process (Rundll32) by Microsoft

Overview

Programs installed in

Behaviors

• Handler name 'VLCPlayVideoFilesOnArrival'
• Handler name 'VLCPlayVCDMovieOnArrival'
• Handler name 'VLCPlaySVCDMovieOnArrival'
• Handler name 'VLCPlayMusicFilesOnArrival'
• Handler name 'VLCPlayDVDMovieOnArrival'
• Handler name 'VLCPlayDVDAudioOnArrival'
• Handler name 'VLCPlayCDAudioOnArrival'
• Handler name 'NeroAutoPlay2LaunchNeroStartSmart'
• Handler name 'NeroAutoPlay2DataDisc'
• Handler name 'NeroAutoPlay2CopyCD'
• Handler name 'NeroAutoPlay2CDAudio'
• Handler name 'MSWMEncVCArrival'
• Handler name 'SonicSCDataTask'
• Handler name 'SonicSCDataProject'
• Handler name 'SonicSCCopyDisc'
• Handler name 'SonicSCCopyCD'
• Handler name 'SonicSCAudioCDTask'
• Handler name 'muveeVideoCameraArrival'
• Handler name 'MSSHAudioDevHandler'
• Handler name 'RPCDBurningOnArrival'
• Handler name 'MSWMPBurnCDOnArrival'
• Handler name 'MSWMDMHandler'

• CLSID: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4}

• The task 'SpeedMaxPc Registration3' runs daily in the path 'C:\WINDOWS\Tasks\SpeedMaxPc Registration3.job'
• The task 'SparkTrust Registration3' runs daily in the path 'C:\WINDOWS\Tasks\SparkTrust Registration3.job'
• The task 'SpeedyPC Registration3' runs in the path 'C:\WINDOWS\Tasks\SpeedyPC Registration3.job'
• The task 'EasyShare Registration Task' runs daily in the path 'C:\WINDOWS\Tasks\EasyShare Registration Task.job'
• The task 'EasyShare Registration RunOnce Task' runs on logon in the path 'C:\WINDOWS\Tasks\EasyShare Registration RunOnce Task.job'
• The task 'ParetoLogic Registration3' runs daily in the path 'C:\WINDOWS\Tasks\ParetoLogic Registration3.job'
• Entry path 'C:\WINXP\Tasks\ParetoLogic Registration3.job'
• Entry path 'C:\WINDOWS\Tasks\SpeedMaxPc Registration3.job'
• Entry path 'C:\WINDOWS\Tasks\ParetoLogic Registration3.job'
• Entry path 'C:\WINDOWS\Tasks\SpeedyPC Registration3.job'

• Firewall exception for 'C:\WINDOWS.0\system32\rundll32.exe'
• Firewall exception for 'C:\WINDOWS\system32\rundll32.exe'

• Login entry path 'C:\WINDOWS\Tasks\EasyShare Registration RunOnce Task.job'

• 'NextLive' → C:\WINDOWS\system32\rundll32.exe ",EntryPoint -m l

All file variations of rundll32.exe

Distribution by Windows OS

Distribution by country

Distribution by PC manufacturer