rundll32.exe?????????

Question

Somehow this program stuck in my computer and i cant get rid off it! when i'm doing shut down then a small window appears saying rundll32.exe "the program cannot be shut down unless you click this button" and it has a button which says shut down and then it closes the pc. does anyone know how to get rid off it?

Answer 1

rundll32.exe is a required part of the windows environment. Windows can't run without it.



======= quote from source... =======

What is rundll32.exe?



The rundll32.exe process is responsible for running DLLs and placing its libraries in the memory. The rundll32.exe process is known as a command line utility program, and it performs its embedded functions along with the rundll.exe file. Rundll32.exe works by invoking a function that is exported from a specific 16-bit or 32-bit DLL module. However the only DLLs that you can call with the rundll.exe and rundll32.exe files are the ones that are only specified to be accessed by these processes.



The rundll32.exe file operates by parsing the command line. The specified DLL is then loaded through the function LoadLibrary(). Afterwards, from the function , it gets the addresses through GetProcAddress(). The command line tail is passed when the is called. Next, the DLL is unloaded upon the return of . Finally, the rundll32.exe file exits.

Answer 2

This executable is a valid part of Windows, and normally shouldn't be a threat.

the valid process is normally located at \Windows\System32\rundll32.exe, but sometimes spyware uses the same filename and runs from a different directory in order to disguise itself. If you think you have a problem, you should always run a scan to be sure, but we can verify exactly what is going on… so keep reading.





From within the task manager View \ Select Columns, you'll see the option for "Command Line" in the list, which you'll want to check

Now you can see the full path for the file in the list, which you'll notice is the valid path for rundll32.exe in the System32 directory, and the argument is another DLL that is actually what is being run.



If this file is executing from anywhere other than the default location you may want to consider deleting it from the bad location

Answer 3

i recommend checking this site out and read most of it, especially the recommendation part.



http://www.liutilities.com/products/wintaskspro/processlibrary/rundll32/

Answer 4

right click My computer > properties > advanced > error reporting > disable error reporting and also turn off "but also notify...."





was I helpful?