Rundll32 in the registry

zhaozj2021-02-16  106

% Systemroot% / system32 / rundll32.exe% systemroot% / system32 / syncui.dll, briefcase_create% 2! D!% 1

Rundll32.exe appwiz.cpl, newlinkhere% 1

Rundll32.exe: /windows/system32/shimgvw.dll ,imageview_fullscreen% 1

Rundll32.exe: /windows/system32/shimgvw.dll, IMAGEVIEW_PRINTTO / PT "% 1" "% 2" "% 3" "% 4"

Rundll32.exe msconf.dll, Calltoprotocolhandler% L

Rundll32.exe cryptext.dll, cryptextopencat% 1

Rundll32.exe cryptext.dll, cryptextaddcer% 1

Rundll32.exe cryptext.dll, cryptextopencer% 1

Rundll32.exe cryptext.dll, cryptextopenstr% 1

Rundll32 cdfview.dll, OpenChannel% L

Rundll32 cdfview.dll, subscribe% L

Rundll32.exe% systemroot% / system32 / shimgvw.dll, imageview_comserver {00E7B358-F65B-4DCF-83DF-CD026B94BFD4}

Rundll32.exe shell32.dll, Options_Rundll 1

Rundll32% SystemRoot% / System32 / HNETWIZ.DLL, HOMENETWIZARDRUNDLL

Rundll32.exe shell32.dll, shcreatelocalserverrundll {601AC3DC-786A-4EB0-BF40-EE3521E70BFB}

Rundll32.exe shell32.dll, Options_Rundll 0

Rundll32.exe: /windows/system32/HotPlug.dll ,createlocalserver {783c030F-E948-487D-B35D-94FCF0F0C172}

Rundll32.exe% SystemRoot% / System32 / NetPlwiz.dll, UsersrunDLL

Rundll32.exe shell32.dll, shcreatelocalserverrundll {995c996e-d918-4a8c-a302-45719a6f4ea7}

Rundll32% SystemRoot% / System32 / NetPlwiz.dll, AddNetPlacerUndll

Rundll32 WiShext.dll, AddDeviceWaschosen

Rundll32.exe shell32.dll, shcreatelocalserverrundll {FFB8655F-81B9-4FCE-B89C-9A6BA76D13E7}

Rundll32.exe zipfldr.dll, rouTheCall% L

Rundll32.exe msconf.dll, OpenConflink% L

Rundll32.exe shell32.dll, control_rundll% 1,% *

Rundll32.exe shell32.dll, control_rundllasuser% 1,% *

Rundll32.exe cryptext.dll, cryptextaddCRL% 1

Rundll32.exe cryptext.dll, cryptextopencrl% 1

Rundll32% systemroot% / system32 / shscrap.dll, openscrap_rundll / r / x% 1% systemroot% / system32 / rundll32.exe netshell.dll, invokedunfile% 1

"Rundll32.exe" msconf.dll, newmediaphone% L

Rundll32.exe% systemroot% / system32 / mshtml.dll, printhtml "% 1" "% 2" "% 3" "% 4"

% Systemroot% / system32 / rundll32.exe setupApi, Installhinfsection defaultinstall 132% 1

Rundll32.exe shdocvw.dll, OpenURL% L

Rundll32.exe: /progra ~ 1/common ~ 1/system/oledb ~ 1/oledb32.dll ,opendslfile% 1

% Systemroot% / system32 / rundll32.exe% systemroot% / system32 / shell32.dll, control_rundll% systemroot% / system32 / desk.cpl desk, @ Appearance / action: OpenMstHEME / File: "% 1"

Rundll32.exe cryptext.dll, cryptextaddp7r% 1

Rundll32.exe cryptext.dll, cryptextopenp7r% 1

Rundll32.exe cryptext.dll, cryptextopenpkcs7% 1

Rundll32.exe cryptext.dll, cryptextaddpfx% 1

Rundll32.exe msrating.dll, ClickedonRat% 1

Rundll32.exe url.dll, telnetprotocolhandler% L

Rundll32% systemroot% / system32 / dsquery.dll, OpenSaveddsquery% 1

Rundll32.exe desk.cpl, installscreensaver% L

": /Windows/system32/rundll32.exe": /windows/system32/scrobj.dll, generatetyPelib "% 1"

Rundll32% systemroot% / system32 / shscrap.dll, OpenScrap_Rundll% 1

Rundll32.exe cryptext.dll, cryptextaddspc% 1

% Systemroot% / system32 / rundll32.exe% systemroot% / system32 / shell32.dll, control_rundll% systemroot% / system32 / desk.cpl desk, @ themes / action: OpenTheme / File: "% 1"

"Rundll32.exe" msconf.dll, newmediaphone% L

% Systemroot% / system32 / rundll32.exe% systemroot% / system32 / shell32.dll, OpenAS_RUNDLL% 1

% SystemRoot% / System32 / Rundll32.exe Netshell.dll, InvokedunFile% 1

Rundll32.exe: /progra ~ 1/common ~ 1/system/oledb ~ 1/oledb32.dll ,opendslfile% 1

": / Windows/system32/rundll32.exe" ": / program files / messenger / msgsc.dll", hideicons ": / windows / system32 / rundll32.exe": / program files / mssenger / msgsc.dll ", Reinstall

": /Windows/system32/rundll32.exe" ": / program files / messenger / msgsc.dll", showicons

Rundll32.exe msconf.dll, Calltoprotocolhandler% L

Rundll32.exe "% Programfiles% / Intern ~ 1 / Hmmapi.dll", Mailtoprotocolhandler% 1

Rundll32.exe "% programfiles% / intern ~ 1 / hmmapi.dll", OpenInBoxHandler

": /Windows/system32/rundll32.exe" ": / program files / messenger / msgsc.dll", showiconsuser

Rundll32.exe advpack.dll, launchinfsection: /windows/INF /MSNETMTG.INF, NETMTG.INSTALL.PERUSER.NT

Rundll32 Setupapi, Installhinfsection MSMail 132 MSMail.inf

转载请注明原文地址:https://www.9cbs.com/read-10686.html

New Post(0)