He aha ka rundll32.exe a pehea e ʻike ai inā he pono a hoʻopunipuni paha ia?

Inā ua hālāwai ʻoe rundll32.exe ma Task Manager a me ka noʻonoʻo ʻana he aha ia, ʻaʻole ʻoe wale nō: ʻike pinepine ʻia kēia mea hoʻokō, i kekahi manawa i nā manawa he nui i ka manawa hoʻokahi. Ma kahi mamao loa mai ka lilo ʻana i mea hoʻopiʻi ma ka paʻamau, he ʻāpana o Windows ponoʻī a ʻo kāna kumu e hoʻouka a hoʻokō i nā hana i hoʻokipa ʻia Nā faila DLL.

I kēia manawa, ʻaʻole hiki ke hoʻohana ʻia me ka ʻino. ʻO kekahi mau polokalamu i makemake ʻole ʻia a me nā polokalamu kino e hoʻopili iā lākou iho me ko lākou inoa a i ʻole Hoʻohana lākou i ka rundll32 maoli e hoʻomaka i ka code malicious.Ma nā laina aʻe, e haʻi pololei wau iā ʻoe i ke ʻano, kahi e pono ai, no ke aha e hōʻike ai i nā hewa a i ʻole ka pau ʻana o ka CPU, pehea e hoʻokaʻawale ai ma waena o ka maikaʻi a me ka hewa, a me nā hana e hana ai me ka ʻole e hōʻino i kāu ʻōnaehana.

He aha ka rundll32.exe a he aha ia e hoʻohana ai?

ʻO ka faila rundll32.exe He ʻāpana Windows maoli ia i hoʻohana ʻia kahea i nā hana i lawe ʻia mai nā waihona loulou dynamic (DLLs). Ma ka ʻōlelo Pelekania maʻalahi: Ke hoʻokō ka ʻōnaehana a i ʻole kahi app i kahi hana e noho ana i kahi DLL, hiki iā ia ke kāhea iā ia ma o rundll32.

Hoʻopili nā DLL i nā poloka o ke code hiki ke hoʻohana hou ʻia e nā papahana he nui, mai pūnaewele, leo, wikiō a i ʻole nā ​​hana hoʻopili me kāu e launa pū ai. ʻO ia ke kumu, ma nā hoʻonohonoho Windows maʻamau (7, 10, 11, a me nā mea ʻē aʻe) he mau tausani DLL, a ʻo rundll32 ke kī i ka hoʻonohonoho ʻana iā lākou.

Ma hea e loaʻa ai a pehea e ʻike ai i kahi kope kūpono

Ma kahi ʻōnaehana olakino e ʻike ʻoe i nā kope kūpono o rundll32.exe ma nā ala e like me C:\Windows\System32 (64-bit kaiapuni) a C:\Windows\SysWOW64 (32-bit kūpono ma nā ʻōnaehana x64). Aia nō paha Nā faila MUI o nā kumuwaiwai ʻōlelo pili i loko o nā waihona waihona e like me en-US o pl-PL, ʻo kahi laʻana C:\Windows\System32\en-US\rundll32.exe.mui.

Inā ʻike ʻoe iā ia e holo ana mai waihona ma waho o ka papa kuhikuhi Windows (e laʻa, ma AppData, ProgramData a i ʻole kahi papa kuhikuhi manawa), e makaʻala. He mea maʻamau ka hoʻokae ʻana o ka malware iā ia iho me ka hoʻohana ʻana i ka inoa like akā holo mai kahi ʻē aʻe i ke keakea nei i na hana kupono.

He maʻi maʻi anei? Pehea e hoʻohana ai ka polokalamu malware iā ia

ʻO ka pane pōkole: ʻAʻole. Rundll32.exe ʻAʻole ia he maʻi virus, he Mea paahana ponoi o WindowsʻO ka holo lōʻihi: ʻelua mau pahele maʻamau. Hoʻokahi, aia kahi polokalamu ʻino me ka inoa like ma kahi ala ʻē aʻe. ʻElua, hoʻouka kahi Trojan i kāna DLL hewa ma o ka rundll32 maoli, no laila ke kaʻina hana āu e ʻike ai ʻo Microsoft, akā. ke holo nei i kahi waihona ʻino.

Ma ka moʻolelo hoʻoweliweli, ʻōlelo ʻia nā ʻohana e hoʻohana ana i ka rundll32, e like me Puka hope.W32.Ranky o W32.Miroot.Worm. A, ʻoi aku ka nui o ka honua, adware a i ʻole ka hoʻonui ʻia ʻana o ka polokalamu kele pūnaewele e hoʻohana iā ia e hoʻomaka i nā hana e pau ai Pop-ups, redirects, a me ka hoʻohana ʻana i ka CPU. ʻO ia ke kumu i manaʻoʻiʻo ai nā mea hoʻohana he rundll32 "he virus."

• Inā ʻike ʻoe keu o na hoolaha a i ʻole nā ​​puka makani interstitial, hiki ke loaʻa ka adware e hilinaʻi ana ma rundll32.
• ʻO ka hoʻihoʻi hou i nā pūnaewele malihini a kūpono pū ka hoʻolohi ʻana o ka polokalamu kele pūnaewele me nā PUPs/spyware.
• Hiki i ka ʻōnaehana e molowa e nā kaʻina hana e hoʻomaka ai i ka rundll32 me nā DLL kānalua.

No ke aha wau e ʻike ai i nā manawa he nui a me nā memo hewa?

ʻO ia ka Hōʻike ʻo Task Manager i nā manawa he nui He mea maʻamau kēia: hiki i nā ʻāpana ʻōnaehana ʻokoʻa a i ʻole nā ​​​​polokalamu ʻaoʻao ʻekolu ke kāhea iā ia i ka manawa like. Hāʻawi ʻo Windows i nā hana, a ʻike ʻoe i kekahi mau rundll32s e holo like ana ma muli o ka mea e hana nei ma hope.

ʻO ka mea maʻamau ʻole ka ʻike ʻana i nā spike CPU mau a i ʻole nā ​​leka like "Ke kuhi hewa: rundll32.exe" ʻoiai e nānā ana ma Chrome, Edge, Firefox a i ʻole IE. I kēia mau hiʻohiʻona he mea kūpono ke kānalua nā polokalamu i makemake ʻole ʻia (PUP), nā hoʻopaneʻe koʻikoʻi a i ʻole kahi Trojan e hoʻohana ana i ka mea hoʻokō e hoʻouka i kāna DLL.

ʻAʻole e hana: holoi i ka rundll32.exe

Hoʻopau rundll32.exe de Pūnaehana32/SysWOW64 ʻAʻole ia he koho: he faila koʻikoʻi no WindowsʻO ka holoi ʻana iā ia, hiki ke haki i nā hana maʻamau, hoʻopōʻino, a pale paha i ka ʻōnaehana mai ka hoʻouka ʻana i nā mea pono.

Inā manaʻo ʻoe e hana ana ʻo rundll32 i "kahi mea ʻaʻole pono", ʻo ka mea kūpono ke hana e ʻike i ke kaʻina hana a i ʻole ka hana a ʻokiʻoki: hoʻopau a holoi paha i ka hana, wehe i ka polokalamu pilikia, hoʻomaʻemaʻe i ka DLL, a hoʻoikaika i ka pale me kahi antimalware maikaʻi.

Pehea e ʻike ai inā he hewa ka hihia

Kōkua kēia mau loiloi iā ʻoe e hoʻokaʻawale i ka hoʻohana pono ʻana mai ka hoʻohana ʻino ʻole me ka hoʻoulu ʻole ʻana i ka ʻōnaehana. Eia naʻe, Inā ʻaʻole ʻoluʻolu ʻoe, ʻoi aku ka maikaʻi e noi i ke kōkua. i kahi ʻoihana a i ʻole kahi kaiāulu kūikawā.

• E nānā i ke ala: I loko o Task Manager, hoʻohui i ke kolamu "Command Line" a i ʻole e wehe i nā "Properties" o ke kaʻina hana. Ina rundll32.exe ʻAʻole ia i loko C:\Windows\System32 o C:\Windows\SysWOW64, he hōʻailona maikaʻi ʻole.
• E nānā i ka mea Ke hoʻouka nei ʻo DLL: Rundll32 maʻamau e hahai ʻia e ke ala i kahi DLL a me kahi hana i lawe ʻia. Nā ala like C:\ProgramData\... o C:\Users\...\AppData\... koi i ka loiloi. ʻO ka laʻana o cnbsofcVIdcorsn.dll en ProgramData\TreeCenter\BortValue maopopo loa ka hoohuoi.
• E nānā i ka Mea hoʻonohonoho hana: E ʻimi i nā hana hou a i ʻole nā ​​hana me nā inoa pohihihi e kāhea ana i ka rundll32. Hiki ke hoʻohana ʻia nā ala kūpono ma lalo o Microsoft helehelena e hoʻouka i nā DLL kūpono ʻole.
• Hana ʻia Mea Palekana Microsoft a i ʻole he anti-malware hilinaʻi: ʻo ka scan piha me nā pūlima hou e ʻike ai i ka hapa nui o nā PUP, adware, spyware, a me nā Trojans e hoʻopili iā lākou iho i rundll32.
• Loiloi nā hoʻonui polokalamu kele pūnaewele: Wehe i kekahi mea ʻaʻole pono, ʻoi aku ka VPN proxy extensions, downloaders, a i ʻole "unblockers" i loaʻa pinepine nā hoʻolaha.
• E hoʻohana i nā mea hana diagnostic e like me Kaʻina Hana ʻImi e ʻike i ka kaʻina hana makua (ka hana makua) e kāhea ana i ka rundll32 a me ka pūlima kikohoʻe o ka mea hoʻokō. Ka inoa o Microsoft i System32/SysWOW64 he mea maʻamau; ʻO ka mea ʻē aʻe ʻo nā slots ma waho o Windows.

Nā hana hoʻomaʻemaʻe a pale

ʻO ka papa mua he manaʻo maʻamau: Wehe i ka polokalamu ʻaʻole ʻoe e hoʻohana ai ʻole e pili ana i ka adware. No ka hoʻomaʻemaʻe hoʻomaʻemaʻe, ʻōlelo ʻia nā alakaʻi he nui Mea wehe ʻole Revo ma ke ʻano holomua e wehe i nā koena (nā waihona, nā kī hoʻopaʻa inoa) o nā PUP e like me "DuvApp" a i ʻole nā ​​​​suites "optimization" intrusive.

A laila, holo a ka nānā piha ʻana me Microsoft Defender a, inā manaʻo ʻoe he kūpono ia, he anti-malware hou me ka inoa i hōʻoia ʻia. Kōkua kēia i ka ʻimi ʻana i nā DLL maikaʻi ʻole a me nā hana i hoʻonohonoho ʻia e hilinaʻi ma rundll32 i hoomau malie.

Ma ka hoʻomaʻemaʻe ʻoihana e ʻike ʻoe i ka haʻi ʻana i nā waihona hoʻopaʻa inoa (e like me DelFix) a me ka hoʻohana ʻana nā palapala maʻamau me FRST (Farbar) e hoʻoponopono i nā kulekele, holoi i nā hana, wehe i nā DLL i hoʻohana ʻia, a pēlā aku. i kūpono i kēlā me kēia hui: Mai hoʻohana hou i ka mea ʻē aʻe no ka mea hiki iā ʻoe ke haki i kāu Windows.

ʻO nā hana maʻamau no kēia mau palapala ʻo ia ka hoʻonohonoho hou ʻana i ka pūnaewele a me ka pā ahi (ipconfig /flushdns, netsh winsock reset, netsh advfirewall reset), kokoke i nā kaʻina hana, holoi i nā waihona en ProgramData/AppData pili i nā PUP a hoʻomaʻemaʻe i nā hana i hoʻonohonoho ʻia e hoʻouka i nā DLL me ka hoʻohana ʻana rundll32.exe. Eia hou: ʻoi aku ka maikaʻi ma nā lima loea.

No ka hōʻemi ʻana i nā pilikia e hiki mai ana, e mālama iā Windows a me kāu mau polokalamu hou mau, e hoʻoiho i nā polokalamu mai nā pūnaewele mana, e wehe i nā ʻāpana ʻē aʻe i nā hoʻonohonoho "express" a e kānalua i kekahi ʻōnaehana hoʻokō e ʻike ʻia ma waho o ka nā ala maʻamau.

Nā hōʻailona hou aʻe e pili ana i nā wahi a me nā faila pili

Ma waho aʻe o System32 a me SysWOW64, e ʻike ʻoe i nā faila waihona MUI o rundll32 ma nā waihona ʻōlelo like en-US o pl-PL. ʻAʻole hiki ke hoʻokō ʻia, akā nā kumuwaiwai localization. E ʻike iā "rundll32" me ka ʻole .exe i ka Explorer ma muli paha o huna i na hooloihi mai nā faila i ʻike ʻia.

Inā pau ka ʻike ʻia ʻana o kahi mea kānalua a me kou pilikia (e laʻa, ka tilde pālua ma ka papa keyboard) nalowale, he hōʻailona ia o ka ʻāpana pilikia ma kahi ʻē aʻe a hoʻohana iā rundll32 ma ke ʻano he mea hoʻolaha. Ke ʻike hou ʻia, ʻo ia ka manawa e nānā i nā hana, nā hoʻonui, a me nā DLL pili.

I ka manawa e noi ai i ke kōkua holomua

Inā, ma hope o ka hoʻomaʻemaʻe ʻana i nā hoʻonui, wehe i nā PUP a me ka holo ʻana i ka antimalware, ʻike ʻoe i ka rundll32 i hoʻokuʻu ʻia mai alahele ʻē, a i ʻole ʻike ʻoe i nā hōʻailona e like me ka papa ʻokiʻoki ʻia, nā pōkole USB ʻino, a me kahi kīpē "ʻoʻopa", mai haʻalele iā ia: kūkākūkā me ke kākoʻo kūikawā. Pono pinepine kahi palapala hoʻoponopono maʻamau no kāu hui e pāʻani nei kākau inoa, nā hana a me nā kulekele ʻokiʻoki.

E hoʻomanaʻo: ʻo kēlā me kēia kamepiula he honua iā ia iho. He palapala i hoʻolālā ʻia no kekahi mīkini ʻē aʻe (me nā kuhikuhi i nā waihona like TreeCenter\BortValue a i ʻole nā ​​DLL kikoʻī) i hana ʻia ma kāu hiki waiho paa ole. ʻAʻole kope-paste ka hoʻomaʻemaʻe kiʻekiʻe, ʻo ia ka hōʻailona pilikino.

Nā Nīnau i Nīnau Pinepine ʻia

• Hiki iaʻu ke wehe i ka rundll32.exe? ʻAʻole. He mea nui ia o ka ʻōnaehana. ʻO ke ala kūpono ʻo ka wehe ʻana i ke kumu (hana, papahana, DLL) i hoʻohana hewa iā ia.
• No ke aha he nui nā hihia? No ka mea, ʻokoʻa nā hana ʻōnaehana a me nā polokalamu ʻaoʻao ʻekolu e kāhea like. ʻO nā manawa he nui, me ka hoʻohana haʻahaʻa haʻahaʻa, he mea maʻamau.
• Aia ma hea? En C:\Windows\System32 ʻO wau C:\Windows\SysWOW64, me kāna mau faila MUI ma nā waihona waihona ʻōlelo. Ma waho o Windows, e kānalua.
• ʻAʻole hiki i kahi antivirus ke ʻike iā ia? Hiki ke hana, ʻoi aku me nā PUP a me nā adware. Eia nō naʻe, ʻo Microsoft Defender a me kahi scan piha e ʻike pinepine i ka hapa nui o nā hana hoʻomāinoino, a hiki iā ʻoe ke hoʻohui me kahi hopena kaulana ʻē aʻe.
• He aha nā hōʻailona maopopo o kahi mea ʻē? Nā ala ʻē no ka DLL (ProgramData, AppData), nā kaula ʻē i ka clipboard, nā pōkole ʻino ma ka USB, ka pale ʻana i nā tildes a me nā hana i hoʻonohonoho ʻia e kāhea rundll32.exe me nā DLL i uhi ʻia.

I ka hōʻuluʻulu manaʻo, ʻO rundll32.exe kahi mea hana pono a pono ʻo ia, ma kona ʻano, hiki ke hoʻohana ʻia e adware a me Trojans e holo i nā DLL makemake ʻole. Ma mua o ka hoʻopiʻi ʻana i ka mea hoʻokō a holoi ʻia paha, e nānā i ka ala ala, nā DLL i hoʻouka ʻia a ʻo wai ke kāhea nei iā lākou; wehe i nā PUP, hoʻomaʻemaʻe i nā hoʻonui, nānā i nā hana i hoʻonohonoho ʻia, a holo i kahi polokalamu anti-malware maikaʻi. Me kēia mau ana, a ma ke komo ʻana i ke kākoʻo holomua inā pono, hiki iā ʻoe ka hoʻopaʻapaʻa ʻana me ka ʻole o ka hoʻopaʻapaʻa ʻana o kāu Windows.