RUNDLL32.EXE ʲô 

    Rundll32.exeʲô˼⣬ִ32λDLLļִDLLļеڲڽ̵УֻRundll32.exeDLLŵḶ̌ʵ˽ϵءϵͳжRundll32.exeؾţ֤Rundll32.exe˶ٸDLLļȻЩRundll32.exeִеDLLļʲôǶԴϵͳԶصĵطҵ

    ڣһRundll32.exeļ˼ϱѾ˵ܾеķʽö̬ӳ⡣ϵͳлһRundll.exeļ˼ǡִ16λDLLļҪעһ¡Rundll32.exeʹõĺԭͣ
    Void CALLBACK FunctionName (
    HWND hwnd,
    HINSTANCE hinst,
    LPTSTR lpCmdLine,
    Int nCmdShow
    );

    µʹ÷ΪRundll32.exe DLLname,Functionname [Arguments]
    DLLnameΪҪִеDLLļFunctionnameΪǰҪִеDLLļľ[Arguments]Ϊľ
̸Rundll32.exe  (ǲ)     

    

    Windows9xһRundll32.exeRundll.exeİɣ,ʽĹԭֻ΢ڲʹã֪ʹǵزࡣôã㻹Ļôɡ 
    ȣСʵ飨ȱִеĳʽĽ...ʼʽMsDosʽDosӴȻrundll32.exe user.exe,restartwindowsٰ»سʱ㽫ˣôǲǺȤ 
     ȻRundllĹܾĻʵRundllߣ˼壬ִDllҲĹܾеķʽWindowsĶ̬⣬Rundll32.exeRundll.exeǰǺ32λ⣬16λ⣬ǵʽǣ 

     RUNDLL.EXE  
     Ҫע㣺1.Dllвܺпո񣬱õλc:\ProgramFiles\Ŀ¼Ҫ·ĳc:\Progra1\2.DllDllڵĶŲ٣ʽҲκѶ3.Ҫһ㣺RundllкֵDllWin32APIеGetUserName(),GetTextFace()ȡVisual BasicУṩһִⲿʽָShell,ʽΪ 
     Shell С 
     Rundll32.exeúShellָʹVBʽӵ޷ʵֵЧΪͳķҪVBȽһģ飬ȻдWinAPIڳʽкСֻһ: 

     Shell rundll32.exe user.exe,restartwindows͸㶨ˣǲǷˣ 
     ʵϣRundll32.exeںиWindowsϵͳѡصơ棬ҾͽռйRundllָо£õģʡȥܶWindows  APIʱ䣡ڳʽã 
     : rundll32.exe shell32.dll,Control_RunDLL 
     : ʾ 
     : rundll32.exe shell32.dll,Control_RunDLL access.cpl,,1 
     : ʾ壭ѡ̡ѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL access.cpl,,2 
     : ʾ壭ѡѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL access.cpl,,3 
     : ʾ壭ѡʾѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL access.cpl,,4 
     : ʾ壭ѡѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL access.cpl,,5 
     : ʾ壭ѡͳѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL sysdm.cpl @1 
     : ִС壭Ӳ塱򵼡 
     : rundll32.exe shell32.dll,SHHelpShortcuts_RunDLL AddPrinter 
     : ִС壭ӡ򵼡 
     : rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl,,1 
     : ʾ 壭/ɾʽװ/жء 塣 
     : rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl,,2 
     : ʾ 壭/ɾʽװWindows 塣 
     : rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl,,3 
     : ʾ 壭/ɾʽ̡ 塣 
     : rundll32.exe syncui.dll,Briefcase_Create 
     : ϽһµġҵĹİ 
     : rundll32.exe diskcopy.dll,DiskCopyRunDll 
     : ʾӴ 
     : rundll32.exe apwiz.cpl,NewLinkHere 1 
     : ʾݷʽĶԻĿݷʽλɣ1 
     : rundll32.exe shell32.dll,Control_RunDLL timedate.cpl,,0 
     : ʾʱ䡱ѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL timedate.cpl,,1 
     : ʾʱѡӴ 
     : rundll32.exe rnaui.dll,RnaDial [ĳӵ] 
     : ʾĳӵĲӴѾӣʾĿǰ״̬Ӵ 
     : rundll32.exe rnaui.dll,RnaWizard 
     : ʾ½ӡ򵼵Ӵ 
     : rundll32.exe shell32.dll,Control_RunDLL desk.cpl,,0 
     : ʾʾԣѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL desk.cpl,,1 
     : ʾʾԣөѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL desk.cpl,,2 
     : ʾʾԣۡѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL desk.cpl,,3 
     : ʾʾʾԣԡѡӴ 
     : rundll32.exe shell32.dll,SHHelpShortcuts_RunDLL FontsFolder 
     : ʾWindowsġ塱С 
     : rundll32.exe shell32.dll,Control_RunDLL main.cpl @3 
     : ͬʾWindowsġ塱С 
     : rundll32.exe shell32.dll,SHformatDrive 
     : ʾʽԻ 
     : rundll32.exe shell32.dll,Control_RunDLL joy.cpl,,0 
     : ʾ壭Ϸһ㡱ѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL joy.cpl,,1 
     : ʾ壭ϷסѡӴ 
     : rundll32.exe mshtml.dll,PrintHTML (HTMLĵ) 
     : ӡHTMLĵ 
     : rundll32.exe shell32.dll,Control_RunDLL mlcfg32.cpl 
     : ʾMicrosoft ExchangeһѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL main.cpl @0 
     : ʾ壭 ѡ  
     : rundll32.exe shell32.dll,Control_RunDLL main.cpl @1 
     : ʾ 壭ԣٶȡѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL main.cpl @1,,1 
     : ʾ 壭ԣԡѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL main.cpl @2 
     : ʾWindowsӡС 
     : rundll32.exe shell32.dll,Control_RunDLL main.cpl @3 
     : ʾWindows塱С 
     : rundll32.exe shell32.dll,Control_RunDLL main.cpl @4 
     : ʾ壭뷨ԣ뷨ѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL modem.cpl,,add 
     : ִСµƽ򵼡 
     : rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl,,0 
     : ʾ壭ýԣƵҳ 
     : rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl,,1 
     : ʾ壭ýԣƵҳ 
     : rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl,,2 
     : ʾ壭ýԣMIDIҳ 
     : rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl,,3 
     : ʾ壭ýԣCD֡ҳ 
     : rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl,,4 
     : ʾ壭ýԣ豸ҳ 
     : rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl @1 
     : ʾ壭ѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL netcpl.cpl 
     : ʾ壭·ѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL odbccp32.cpl 
     : ʾODBC32ϹѡӴ 
     : rundll32.exe shell32.dll,OpenAs_RunDLL {drive:\path\filename} 

     : ʾָ(drive:\path\filename)ġ򿪷ʽԻ 
     : rundll32.exe shell32.dll,Control_RunDLL password.cpl 
     : ʾ壭롱ѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL powercfg.cpl 
     : ʾ壭ԴԡѡӴ 
     : rundll32.exe shell32.dll,SHHelpShortcuts_RunDLL  PrintersFolder 
     : ʾWindowsӡС(ͬrundll32.exe shell32.dll,Control_RunDLL  main.cpl @2) 
     : rundll32.exe shell32.dll,Control_RunDLL intl.cpl,,0 
     : ʾ壭ԣáѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL intl.cpl,,1 
     : ʾ壭ԣ֡ѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL intl.cpl,,2 
     : ʾ壭ԣҡѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL intl.cpl,,3 
     : ʾ壭ԣʱ䡱ѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL intl.cpl,,4 
     : ʾ壭ԣڡѡӴ 
     : rundll32.exe desk.cpl,InstallScreenSaver [ө] 
     : ָөΪWindowsʾөӴ 
     : rundll32.exe shell32.dll,Control_RunDLL sysdm.cpl,,0 
     : ʾ壭ϵͳԣͳӴ 
     : rundll32.exe shell32.dll,Control_RunDLL sysdm.cpl,,1 
     : ʾ壭ϵͳԣ豸Ӵ 
     : rundll32.exe shell32.dll,Control_RunDLL sysdm.cpl,,2 
     : ʾ壭ϵͳԣӲõӴ 
     : rundll32.exe shell32.dll,Control_RunDLL sysdm.cpl,,3 
     : ʾ壭ϵͳԣܡӴ 
     : rundll32.exe user.exe,restartwindows 
     : ǿйرгʽ 
     : rundll32.exe user.exe,exitwindows 
     : ǿйرгʽػ 
     : rundll32.exe shell32.dll,Control_RunDLL telephon.cpl 
     : ʾԡѡӴ 
     : rundll32.exe shell32.dll,Control_RunDLL themes.cpl 
     : ʾּѡ 
     ȻֹVisualBasicDelphi.VisualCʽҲͨⲿķʹRundllЩܣ巽ͲϸˡʹRundll,һʹĳʽɣﵽ°빦Ч

