-----Original Message-----
When I shut down windows, instead of immediately
shutting down, I get another window with the following
message at the top: endprog.rundll32.exe. I then have
to click on "end now." I've looked everywhere (books and
online) to get my windows to shut down immediately like
it should, but can't find out what to do to restore it
(and yes, I've even restored to another time). Can
someone please help?
rundll32.exe Ia a trojan,Sorry
First, note that RUNDLL.EXE only exists in Windows
95/98/ME, it does not exist in Windows 2000/XP/2003 - its
path is C:\Windows\Rundll.exe as shown on the Tasks
tab of The Ultimate Troubleshooter; anything else and
you have a virus (see below). RUNDLL and RUNDLL32 do not
normally appear in the Task List in Windows. In our
experience they tend to appear only when you are already
having problems of some sort with your PC, or a
particular DLL is either misbehaving, is buggy, or is
having problems, such as a Control Panel applet hanging
for example. If you see RUNDLL or RUNDLL32 in your
Task List persistently then you should be [slightly]
worried (see below the other entry for RUNDLL32) - make
sure you have good and up‑to‑date antivirus software,
boot into Safe Mode, and run a full virus scan on your
PC. If you do not have a virus and see either in your
Task List, simply leave it alone. We are not sure as to
the other times when the real RUNDLL or RUNDLL32 can
sometimes suddenly appear in the Task List, but you
should leave them alone in most cases provided, again,
that you know you do not have a virus.
Rundll (2)
Rundll.exe
(???)
If you have Windows 2000/XP/2003 and this is running,
then you most definitely have a virus. If you have
Windows 95/98/ME and the full path to the program, as
shown on the Tasks tab of The Ultimate Troubleshooter,
is not C:\WINDOWS\RUNDLL.exe , then you also have a
virus such as the PWSteal.Banpaes.D virus.
Rundll32 (2)
Rundll32.exe
(???)
You have one of the W32.Miroot.Worm /
W32/Legemer.Worm / W32.HLLW.Sanker viruses (or another
virus).
http://securityresponse.symantec.com/avcenter/tools.list.h
tml
