Once you go through the list, you should be able to see what rundll32.exe is actually running. The main reason is that the rundll32.exe program is damaged by a virus in the computer, resulting in the loss of the rundll32.exe file when the rundll32. execute rundll32.exe in a suspended state, inject malicious code into the newly created process, and restart the rundll32 thread. (filter out the system files and dependencies used by rundll32.exe) When it comes to rundll32.exe, it is actually a program to run DLL files, which is very important to the system. Its worth investigating further to determine what this program is doing. Because it can be used to run code in any DLL, we dont know exactly what your particular RUNDL元2 is doing. Now, open the file rundll32.txt (on your Desktop) and identify the "odd" modules. Purpose: RUNDL元2.EXE is a program that can be used to call program code inside 32-bit DLLs. Note that this package does not modify the DirectX Runtime installed on your Windows OS in any way.
Start -> Run-> cmd /c tasklist /m /fi "IMAGENAME eq rundll32.exe" >Desktop\rundll32.txt The Microsoft DirectX End-User Runtime installs a number of runtime libraries from the legacy DirectX SDK for some games that use D3DX9, D3DX10, D3DX11, XAudio 2.7, XInput 1.3, XACT, and/or Managed DirectX 1.1.
What’s the meaning of the ICON is changed to a PAGE Was the rundll32.exe icon in C:WindowsSystem32 changed to a page What is the kind of the page 4. To find out what rundll32.exe is actually running, do the following: Are you running Windows Server 2003 or 2008 Are you running a 32bit or 64bit system 2.
Rundll32.exe is a valid system file which executes a dll some spyware/malware disguise themselves as rundll32.exe so your first option is to always do a full scan for virus/spyware.