rundll32.exe-finish program

J

Jonsson

Hi,

Everytime I close my computer I get the message "rundll32.exe-finish
program".
First I thought it was a virus, but I have checked with my own
NAV2002(updated), and also checked with TrendMicro and according to them I
don't have any viruses.

Hope someone can help me with this one.

Thanks in advance

//Thomas
 
R

Ramesh [MVP]

Thomas,

What's the suspicious Rundll32.exe process?:
http://windowsxp.mvps.org/rundll32.htm

List all processes and their Command-line parameters:
http://windowsxp.mvps.org/listproc.htm

Sysinternals Freeware - Process Explorer:
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org
--------------------------------------------
Using ToolbarCop to remove the unwanted Toolband, Toolbar Icons and BHO:
http://windowsxp.mvps.org/toolbarcop.htm
--------------------------------------------
The Parasite Fight - Quick Fix Protocol:
http://aumha.org/a/quickfix.php
--------------------------------------------
Hi,

Everytime I close my computer I get the message "rundll32.exe-finish
program".
First I thought it was a virus, but I have checked with my own
NAV2002(updated), and also checked with TrendMicro and according to them I
don't have any viruses.

Hope someone can help me with this one.

Thanks in advance

//Thomas
 
J

Jonsson

Hi, Ramesh

I've tried to do as suggested in your first link, but when I opening the
commandprompt and paste the path:
tasklist /m /fi "IMAGENAME eq rundll32.exe" >C:\rundll32.txt
I get a message that says that "tasklist" is'nt a valid name.My version is
swedish if thats matter.

//Thomas



"Ramesh [MVP]" <[email protected]@mvps.org> skrev i meddelandet
Thomas,

What's the suspicious Rundll32.exe process?:
http://windowsxp.mvps.org/rundll32.htm

List all processes and their Command-line parameters:
http://windowsxp.mvps.org/listproc.htm

Sysinternals Freeware - Process Explorer:
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org
--------------------------------------------
Using ToolbarCop to remove the unwanted Toolband, Toolbar Icons and BHO:
http://windowsxp.mvps.org/toolbarcop.htm
--------------------------------------------
The Parasite Fight - Quick Fix Protocol:
http://aumha.org/a/quickfix.php
--------------------------------------------
Hi,

Everytime I close my computer I get the message "rundll32.exe-finish
program".
First I thought it was a virus, but I have checked with my own
NAV2002(updated), and also checked with TrendMicro and according to them I
don't have any viruses.

Hope someone can help me with this one.

Thanks in advance

//Thomas
 
R

Ramesh [MVP]

Jonsson,

Tasklist is available only in XP Pro. Get a copy of Process Explorer.

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org
--------------------------------------------
Using ToolbarCop to remove the unwanted Toolband, Toolbar Icons and BHO:
http://windowsxp.mvps.org/toolbarcop.htm
--------------------------------------------
The Parasite Fight - Quick Fix Protocol:
http://aumha.org/a/quickfix.php
--------------------------------------------
Hi, Ramesh

I've tried to do as suggested in your first link, but when I opening the
commandprompt and paste the path:
tasklist /m /fi "IMAGENAME eq rundll32.exe" >C:\rundll32.txt
I get a message that says that "tasklist" is'nt a valid name.My version is
swedish if thats matter.

//Thomas



"Ramesh [MVP]" <[email protected]@mvps.org> skrev i meddelandet
Thomas,

What's the suspicious Rundll32.exe process?:
http://windowsxp.mvps.org/rundll32.htm

List all processes and their Command-line parameters:
http://windowsxp.mvps.org/listproc.htm

Sysinternals Freeware - Process Explorer:
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org
--------------------------------------------
Using ToolbarCop to remove the unwanted Toolband, Toolbar Icons and BHO:
http://windowsxp.mvps.org/toolbarcop.htm
--------------------------------------------
The Parasite Fight - Quick Fix Protocol:
http://aumha.org/a/quickfix.php
--------------------------------------------
Hi,

Everytime I close my computer I get the message "rundll32.exe-finish
program".
First I thought it was a virus, but I have checked with my own
NAV2002(updated), and also checked with TrendMicro and according to them I
don't have any viruses.

Hope someone can help me with this one.

Thanks in advance

//Thomas
 
J

Jonsson

Hi, guys!

Here is what happens:

I have installed ProcessExplorer and there I can see that I have two
rundll32's running. The information says that it is a program running and
it's from Microsoft Corp.
I also tried to download "tasklist.exe" and put it in the "system32"folder.
Then Itried to close windows, but I still havethe box that says
"rundll32.exe Finish program?" If I choose to finish windows closing, but if
I choose to close the messagebox, windows continue running as if nothing has
happened.

More suggestions, please!

//Thomas
 
W

Wesley Vogel

Thomas,

Most rundll32.exe problems seem to be caused by spyware.

Download, install, run, update and run again; one or all. They are all
good, FREE utilities. Make sure you update every program, even if you
just downloaded it. You must have the latest updates. Without updates,
you have a gun without ammo. You also need to use more than one
anti scumware program. One program will *not* catch everything.

1) CWShredder ver. 1.59 direct download:
http://www.merijn.org/files/cwshredder.zip

1a) CWShredder ver. 2.0 direct download:
http://www.aumha.org/downloads/cwshredder.zip

2) SpywareBlaster
[[SpywareBlaster doesn't scan and clean for spyware - it prevents it from
ever being installed.
The most important step you can take is to secure your system. And
SpywareBlaster is the most powerful protection program available.]]
http://www.javacoolsoftware.com/spywareblaster.html

3) Spybot S & D (More for the advanced user)
http://www.safer-networking.org/index.php?lang=en&page=download

4) HijackThis (some other stuff that may be of interest also)
http://www.spywareinfo.com/~merijn/downloads.html

4a) HijackThis (direct download)
http://aumha.org/downloads/hijackthis.zip

5) Bazooka Adware and Spyware Scanner v1.13
http://www.kephyr.com/spywarescanner/index.html?source=appvisit

6) ToolbarCop
http://www.mvps.org/sramesh2k/toolbarcop.htm

7) Ad-aware SE Personal
http://www.lavasoft.de/support/download/

=====

HijackThis log tutorial
http://www.spywareinfo.com/~merijn/htlogtutorial.html

HijackThis Log Tutorial
http://www.aumha.org/a/hjttutor.htm

How to use HijackThis to remove Browser Hijackers & Spyware
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42#warning

How To Install Spybot Search and Destroy & a brief tutorial
http://tomcoyote.com/SPYBOT/index1.php

HOW TO: Reconfigure Ad-aware for a Full Scan
http://forum.aumha.org/viewtopic.php?t=5877
 
R

Ramesh [MVP]

I have installed ProcessExplorer and there I can see that I have two rundll32's running. The information says that it is a program running and it's from Microsoft Corp.

In Process Explorer, double-click Rundll32 process and look at the Command-line in the Image tab. You'll see something like this:
--
"C:\WINDOWS\system32\rundll32.exe" /d C:\WINDOWS\system32\shell32.dll,Control_RunDLL timedate.cpl
--

The above is an example. The DLL file in question might be causing the actual problem.

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org
--------------------------------------------
Using ToolbarCop to remove the unwanted Toolband, Toolbar Icons and BHO:
http://windowsxp.mvps.org/toolbarcop.htm
--------------------------------------------
The Parasite Fight - Quick Fix Protocol:
http://aumha.org/a/quickfix.php
--------------------------------------------
Hi, guys!

Here is what happens:

I have installed ProcessExplorer and there I can see that I have two
rundll32's running. The information says that it is a program running and
it's from Microsoft Corp.
I also tried to download "tasklist.exe" and put it in the "system32"folder.
Then Itried to close windows, but I still havethe box that says
"rundll32.exe Finish program?" If I choose to finish windows closing, but if
I choose to close the messagebox, windows continue running as if nothing has
happened.

More suggestions, please!

//Thomas

<snip>
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top