English | Deutsch

How to remove rundll32 error


The free file information forum can help you find out if rundll32.exe is a virus, trojan, spyware, adware which you can remove, or a file belonging to a Windows system or an application you can trust.

Software  Click to Run a Free Scan for rundll32.exe related errors


rundll32.exe file information

The process Run a DLL as an App or Executar uma DLL como uma aplicação or Een DLL-bestand als toepassing starten or Eine DLL-Datei als Anwendung ausführen or Kør en DLL som et program or FTP Serv-U Daemon or url or Exécuter une DLL en tant qu'application or Ejecutar un archivo DLL como una aplicación or Windows host process (Rundll32) or Kör en DLL-fil som ett program or Bir DLL'i Uygulama olarak çalýþtýr or Çàïóñê áèáëèîòåêè DLL êàê ïðèëîæåíèÿ belongs to the software Microsoft Windows Operating System or MicrosoftR WindowsR Operating System or explorer or rundll32.exe or Sistema operativo Microsoft Windows or Besturingssysteem Microsoft Windows or Betriebssystem Microsoft Windows or Operaèní systém Microsoft Windows or Microsoft Windows Operativsystem or Serv-U or Microsoft¢ç Windows¢ç Operating System or Fast Typer or url or PowerDesk or Proccess ID or Système d'exploitation Microsoft Windows or rundll32.exe or Microsoft(R) Windows (R) 2000 Operating System or Microsoft(R) Windows(R) Operating System or Operativsystemet Microsoft Windows or Outerinfo or Project or Operacni system Microsoft Windows or Microsoft Windows Ýþletim Sistemi or Microsoft DRM or rundll32.exe" -vt yazb or Adobe AIR or Îïåðàöèîííàÿ ñèñòåìà Microsoft Windows by Microsoft Corporation (www.microsoft.com) or Tastysoft SD or Cat Soft (www.cat-soft.com) or url or skb or Êîðïîðàöèÿ Ìàéêðîñîôò.

Description: File rundll32.exe is located in the folder C:\Windows\System32. Known file sizes on Windows XP are 33,280 bytes (87% of all occurrence), 31,744 bytes, 44,544 bytes, 34,816 bytes, 33,792 bytes, 32,768 bytes, 32,256 bytes, 1,371,648 bytes, 1,254,400 bytes, 610,304 bytes, 537,088 bytes, 40,448 bytes, 61,952 bytes, 1,304,064 bytes, 143,872 bytes, 10,240 bytes, 10,000 bytes, 1,359,872 bytes, 36,864 bytes.
The file is a Windows system file. It is a trustworthy file from Microsoft. Therefore the technical security rating is 4% dangerous, however also read the users reviews.

Recommended: Identify rundll32.exe related errors

If rundll32.exe is located in the folder C:\Windows then the security rating is 68% dangerous. File size is 56,320 bytes (26% of all occurrence), 1,264,832 bytes, 44,695 bytes, 58,368 bytes, 45,208 bytes, 58,880 bytes, 135,168 bytes, 57,344 bytes, 18,432 bytes, 61,440 bytes. Program has no file description. It is not a Windows core file. The application starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Runonce, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run, C:\Windows\win.ini). The program has no visible window. rundll32.exe is an unknown file in the Windows folder. rundll32.exe is able to monitor applications, record inputs, hide itself.

If rundll32.exe is located in a subfolder of C:\Windows then the security rating is 85% dangerous. File size is 78,336 bytes (16% of all occurrence), 60,004 bytes, 81,408 bytes, 80,384 bytes, 69,632 bytes, 36,352 bytes, 34,816 bytes, 51,238 bytes, 35,328 bytes, 61,545 bytes, 70,344 bytes. The program has no visible window. File rundll32.exe is a file without information about the maker of this file. File rundll32.exe is located in the Windows folder, but it is not a Windows core file. It is not a Windows system file. The process starts when Windows starts (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Runonce, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run, C:\Windows\win.ini). rundll32.exe is able to record keyboard inputs. rundll32.exe is able to manipulate other programs, monitor applications.

If rundll32.exe is located in the folder "C:\Program Files\Common Files" then the security rating is 80% dangerous. File size is 178,180 bytes.

If rundll32.exe is located in a subfolder of "C:\Program Files" then the security rating is 60% dangerous. File size is 7,680 bytes (25% of all occurrence), 772,212 bytes, 187,904 bytes, 401,408 bytes.

If rundll32.exe is located in a subfolder of C:\ then the security rating is 73% dangerous. File size is 61,440 bytes.

If rundll32.exe is located in a subfolder of C:\Windows\System32 then the security rating is 81% dangerous. File size is 26,112 bytes (50% of all occurrence), 112,716 bytes.

If rundll32.exe is located in a subfolder of the "My Files" folder then the security rating is 56% dangerous. File size is 7,168 bytes.

If rundll32.exe is located in a subfolder of "C:\Documents and Settings" then the security rating is 28% dangerous. File size is 126,464 bytes.

External information from Paul Collins:
There are different files with the same name:

  • "BatInfEx" can run at start up. Displays battery status information on an IBM Thinkpad
  • "LoadPowerProfile" definitely not required. Added by the MIROOT WORM! Note - do not confuse with the valid LoadPowerProfile entry which has "powrprof.dll" appended to the command/data line
  • "Rundll32" definitely not required. Added by the DVLDR TROJAN! Note - this is not the valid "Rundll32.exe" as it's in the Windows\Fonts directory
  • "rundll32" definitely not required. Added by the SANKER WORM! Note that the valid "rundll32.exe" resides in C:\Windows\System32 wheras this version resides in C:\Windows
  • "TaskMan" definitely not required. Added by the DVLDR TROJAN! Note - this is not the valid "rundll32.exe" as it's in the Windows\Fonts directory
  • "UPDATEHOOK": ??
  • "Win32 Rundll Loader" definitely not required. Added by the SDBOT.A TROJAN! Note: Rundll32.exe is a valid Windows application called "Run a DLL as an App" and stored in the C:\Windows directory. The version created by this virus is saved in the C:\Windows\System directory
  • "Windows DLL Loader" definitely not required.

Important: Some malware camouflage themselves as rundll32.exe, particularly if they are located in c:\windows or c:\windows\system32 folder. Thus check the rundll32.exe process on your pc whether it is pest. We recommend Security Task Manager for verifying your computer's security. It is one of the Top Download Picks of 2005 of The Washington Post and PC World.

Links: ,

Score

User Comments

Rate
I am wondering if anyone has heard anything about UNIBLUE Registry Booster to help repair the problems. I search rundll32 and this booster is who I get... does it work? Should I do it? It is worth the $$? Norton is not helping!!! I am clueless and my laptop is rather new! HELP!!! I cannot seem to do much for long periods of time before it just decides to shut down and I also get taken over by popups (firewall & popup stopper not working)
  Destiny  
Rate
That file may keep some programs from runnimg, but it's essential for Windows to run. The reason for the blocking is not a virus, but because the program (.exe) is corrupt, or the program has an error in the code.
  Winslow  
Rate
It is a harmless file. It's one of the necessary background tasks used in Windows of all versions. In short, it's SAFE. If your computer hangs from this process, then you need more RAM. Smart...
  Nick  
Rate
Just installed new anti virus, and now keep getting pop-up saying there is a problem with run dll32. What cas I do
  Mami  
Rate
Everytime i startup, rundll32.exe pops up and the hardware wizard appears. its really annoying, and somtimes when i plug in my flash drive, the wizard also pops up. i have no idea why this is happening.
  Danny  
Rate
If you run procexp(Process Explorer by Sysinternals) and check the properties on it you'll see that it's mostly used with all things nVidia. The 2 instances on my local machine are for the GUI and nVeiwer. I've yet to have either cause a hang up or loss of any kind.
  John   (further information)
Rate
Its as dangerous as the internet explorer. The program itself causes no harm. It is part of Windows and necessarz for manz functions. But it can be misused. If you get a virus through IE, don't blame IE for it and if a Flash animation locks up your computer, it's not IEs fault, but it is the IE proccess which seems to cause the problem. Same for RunDLL. It is a launcher for program code (good or bad, necessary or unwanted) inside of DLLs. Such as the control panel applets. Or the NVidia control. Or a Virus, or a 'hanging' code. So try to find out what has been launched through RunDLL.
  Mikel  
Rate
It is the most common file to be infected as a virus! the way to check is ALT CTRL DEL and look in procceses as clint said and if it running as system then you are ok.... but if it is running as you......... you've got a virus
  Oscar Sanchez  
Rate
nothing seems to happen after i killed it using task manager
   
Rate
this file infected slowly and infected the library link another file like gdi32.dll and your desktop not define start in path location source the file shortcut
  indonesia  
Rate
Task manager shows rundll eat too much CPU as well as MsMpEng
  Richard   (further information)
Rate
Part of windows. Runs drivers as applications. It is not a virus/worm, as many of the people who have poor knowlege of Windows who posted here would have you believe....
  Expert  
Rate
its needed to run some softwares in a computer
  ibrahinm  
Rate
Can be used to run C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit if you have a NVIDIA based graphiccard and have the nView Desktop manager set to run at startup.
  Dan-Erik   (further information)
Rate
Alright i have two of these in my task manager. When I pull up their process information using WMIC it says that the one of them is doing something with the nvidia tray thing but the other one says this: cmcnfgu.cpl,CMICtrlWnd The only difference between the files is that the one using nvidia ends in .EXE and the other one in .exe but in the task manager they are the same which one should i delete?
  BEN  
Rate
its need to run winxp
  nakamura  
Rate
More comments can be found here:
    (further information)

Summary: 101 users think rundll32.exe is essential for Windows or an installed application. 12 users think it's probably harmless. 91 users think it's neither essential nor dangerous. 46 users suspect danger. 69 users think rundll32.exe is dangerous and recommend to remove it.. 57 users doesn't grade rundll32.exe ("not sure about it").

Do you have additional information?
What do you know about rundll32.exe:
How do you rate it:
Link for more info's:
Your Name:

rundll32 scanner


image

Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

Registry Booster free scans, cleans, repairs and optimizes your system.

Other processes


rundll32.exe [all]