What is Rundll32.exe and why has it started running in the background?

  1.    #1

    What is Rundll32.exe and why has it started running in the background?


    Hello,

    From the last few days there is something bizarre happening with my Windows 10 Task Manager Rundll32.exe will start running in the background when I look at my Task Manager and will not disappear.

    I have Windows 10 1903 for the last 1 month and I never noticed this, until a few days ago. Click image for larger version. 

Name:	rundll32.exe after 2 hours.jpg 
Views:	7 
Size:	971.7 KB 
ID:	238457
    I'm completely confused as to what this is. It starts launching approximately after 2 hours and will remain there. This happened somewhere around the 18th of June.

    "C:\Windows\system32\rundll32.exe" -localserver 22d8c27b-47a1-48d1-ad08-7da7abd79617

    Autostart location. HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}

    I tried searching for this but I couldn't find much info. I think I started noticing this after I installed Diablo 2 and Splinter Cell 1 on the 18th of June. But I don't know if this is simply a coincidence. But it definitely seems a little bit strange as I have not noticed this behaviour prior to that.

    Can someone tell me what is triggering this to launch after 2 hours?
      My ComputerSystem Spec

  2.    #2

    Doing a search on TenForums for rundll32.exe yields the following...

    Rundll32 Commands List for Windows 10
    Why is Windows Host Process (Rundll32) in my Startup?

    There are more, but this should answer the question.
      My ComputerSystem Spec

  3.    #3

    Rundll is a common thing to run. It's part of windows. However, what isn't common is what it seems to be running. Rundll does what it's name says. It runs a dll. In this case, this is a part of the Windows Performance Monitor. See https://translate.google.com/transla...61&prev=search
      My ComputerSystem Spec

  4.    #4

    Weirdly this thing started again. "C:\Windows\system32\rundll32.exe" -localserver 22d8c27b-47a1-48d1-ad08-7da7abd79617
    Current directory: C:\Windows\System32\

    Autostart Location: n/a

    Parent: explorer.exe(2652)

    I tried msconfig selective startup yesterday and thought the issue was solved. Today My PC was on for 3 hours and it didn't come and before that last night it was for over 2 hours and it didn't show up. Now the thing has returned back after less than 1 hour after returning back home from outside.

    I do not know if this is a viral infection or not. This happened after I installed Splinter Cell 1 from Uplay and downloaded widescreen patch. I believe this is when I first started noticing it. But I uninstalled the game and everything new in the last few days such as .NETFRAMEWORK.

    I've been using Windows 10 for 2 months since upgrading from 8.1. Windows 10 1903 since 31st of May and I never noticed this.

    Also I'm not sure if it is related to latest Google Chrome update.

    rundll32.exe doesn't seem to have been tampered. It shows as ‎19 ‎March ‎2019, ‏‎04:45:05. Consumes only 896 K and doesn't consume any CPU usage.

    I don't even have a Windows System restore point from the day before I started noticing it. Windows has erased all my system restore points..
      My ComputerSystem Spec

  5.    #5

    So I tried to repair Windows 10 but the outcome is the same.

    I also get an error 1008 Perflib in the Event Viewer. The Open procedure for service ".NETFramework" in DLL "C:\WINDOWS\system32\mscoree.dll" failed with error code Access is denied.. Performance data for this service will not be available.

    This happened at 1:40am. While the C:\Windows\System32\rundll32.exe according to Process Explorer started at 1:31am

    It appears that this problem might be associated with the rundll32.exe running in the background at all times. Sometimes this thing pops up after 25 minutes other times after 3 hours, etc. It is very random. But usually it happens after 1-2 hours.

    A fresh re-installation of Windows 10 will probably fix it. But the problem is that Process Explorer is not giving me any information on what has triggered this thing to start. I don't know if it is a Task Scheduler but I did not find any task schedule that triggers this at the exact same time.

    If I don't know what is triggering it, little will I know if next time after a fresh install this starts occurring again.
      My ComputerSystem Spec

  6.    #6

    BLaZiNgSPEED said: View Post
    But the problem is that Process Explorer is not giving me any information on what has triggered this thing to start.
    Personally, I dont see rundll32.exe running as a problem. But it might be strange if it stays running all the time.

    Anyway, I can tell you a few things that I know trigger rundll32.exe to run, this things are about browsers and rundll32.exe. If you open Internet Explorer, rundll32.exe will run immediately after you open the browser without you having to do anything with the browser. It ll stay running all the time, but when you close IE, the process should close immediately after you close IE (it should close immediately). About Chrome and browsers like Chrome. I dont use Chrome or anything like it, but there are some functions that when you do them with Chrome, they might trigger rundll32.exe to run. This functions can be, printing, opening File explorer or opening a picture with Windows photo viewer. If you do this functions when using Chrome, rundll32.exe might run. I cant tell you exactly which function would trigger rundll32.exe to run in my computer because I dont have Chrome, and dont want to install it. But if you have Chrome, do some testing. On the other hand, running Firefox, doesn't trigger rundll32.exe to run, no matter what you do. HTH.

    Bo
      My ComputerSystem Spec


  7.    #7

    Many thanks for that!

    I didn't realise all this time that it was my browser that was causing this issue!

    Basically it was Google Chrome Beta version that was causing the rundll32.exe to run in the background and it was triggered usually when going to YouTube.

    I uninstalled Google Chrome Beta version and installed the original official Google Chrome release and that stopped causing rundll32.exe to appear in the background.

    Unfortunately I spent so much time trying to fix this initially that I broke my Windows 10 system. I uninstalled Splinter Cell, Diablo 2, Microsoft Office, Microsoft Visual C++, etc thinking these were the culprits.

    This only made further damage breaking my games and Origin from launching due to corruption on MS Visual C++ which I couldn't fix.

    Anyway, I freshly installed Windows 10 Pro 1903 and everything is fixed.

    It appears that it was an update on the Chrome Beta release that was triggering rundll32.exe. But sadly this coincided with Wide Screen patch and I thought that was a virus. But obviously it wasn't and I ended up wasting my time.
      My ComputerSystem Spec

  8. Bree's Avatar
    Posts : 12,020
    10 Home x64 (1903) (10 Pro on 2nd pc)
       #8

    BLaZiNgSPEED said: View Post
    ...Unfortunately I spent so much time trying to fix this initially that I broke my Windows 10 system.....
    That is where a Macrium Reflect system image would have come in handy....

    Backup and Restore with Macrium Reflect
      My ComputersSystem Spec

  9.    #9

    BLaZiNgSPEED said: View Post
    Many thanks for that!

    I didn't realise all this time that it was my browser that was causing this issue!
    You are welcome, I am glad to have helped.

    Other than browsers, there are other activities that we do in our computer that trigger rundll32.exe to run. For example, when I run File/Windows Explorer in a sandbox (under Sandboxie), rundll32.exe runs and fades away until I close the sandbox. So,dont be surprised when you see rundll32.exe running as you might have programs (other than browsers) or do activities that triggers it to run. rundll32.exe running is not an issue.

    Click image for larger version. 

Name:	Sin título.jpg 
Views:	16 
Size:	85.1 KB 
ID:	239694

    Bo
      My ComputerSystem Spec


 

Related Threads
Now & again I run CCleaner & as usual it comes up with a list of Temporary files, Chrome cookies & cache, Windows log files etc to be cleaned. However, it also lists Internet Explorer cookies & temporary internet files. Why is this this since I...
I think I remember going through this on a previous machine a while back and just noticed it on my current machine. It may have been occurring for a while but I noticed it this time doing some services/performance checks after installing 1809...
I know how to create virtual desktops and all in Windows 10, but is there any way to have them running in the background while I do other things? For instance I want a game to be running in fullscreen and a macro controlling the character on one...
Coinminers - Background running offline ??? in AntiVirus, Firewalls and System Security
Hi there can these coinminers or whatever they are called run in the background even when you are offline. From what I gather these are algorithms so presumably there's a lot of mathematical stuff they can do without needing to be connected to...
I have noticed Edge runs whenever I start firefox. I first noticed this when running CCleaner. I can see Edge shutting down as CCleaner finishes. I am wondering if Edge is somehow watching and reporting what I do on Firefox.
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 09:42.
Find Us