What Does "rundll32.exe" Do, and Why is it Screwing Up My Computer?

Factual Questions
1

I’m running Windows XP.

Over the last week, I’ve been having strange problems with my computer.

When I’m surfing, I can’t click on any hyperlinks, or the window freezes. I can’t close it, either. If I do a ctrl+alt+delete, it tells me it’s “running.” Sometimes the entire computer freezes and I have to do a manual reboot.

Then, last night, I heard the strangest thing. I came into the office to get a book, and the computer was making a rapid “bonk bonk bonk” noise: it’s the sound you get when you try to click on something and Windows won’t allow you to.

Since it wasn’t affecting anything else on my computer, I assumed it was an internet problem. I tried deleting my temporary internet files, and then my cookies. It seemed to work for a while, but then it started happening again.

A while ago, I tried to do a start+shutdown, and a window popped up saying a program was still running, did I want to end it? The program was “rundll32.exe”

I found it using a file search on my computer. The entire file mane is RUNDLL43.EXE-1223F2FD.pf and it says it’s in Windows/Prefetch. What the hell is Prefetch?

There’s about a dozen files with the same name, but with a different series of numbers afterward. They’re relatively small files-- the largest is 58KB.

My first thought is that it’s a virus of some kind, but Norton Antivirus doesn’t recognize it as such, even with all the updated virus information.

I’m getting irritated. Something has posessed my computer, and I’m getting frustrated trying to figure out what to do.

Suggestions? Thoughts? Please explain your answer as clearly as possible, for you will be adressing a computer dimwit.

2

From here:

and

YMMV.

3

Okay, if I have a virus, why isn’t Norton catching it? I have all of my virus definitions up to date.

Should I delete those files?

4

NO!! Not until you are absolutely sure they aren’t needed.

It may not be a virus. If you know how to use msconfig, you can check the start up folder to see what loads into the system when the computer starts up. It may be related to one of those programs.

If you go to the website above (click on “Task List”), you can see what each item in your Task List is and (usually) what program it belongs to. It will advise you whether or not you need to have it running. You’d be surprised how much junk you’ll find.

5

Another cause for such behavior is your hard drive is dying. Trying to read over and over a funky sector on the disk can make a lot of clicking sounds. The “pre-fetch” comes in because that’s what is going on with the disk. It’s try to read ahead the next part of something and having a rough time of it.

So:

  1. Run a virus scan.
  2. Run a disk check including surface test.
6

If it is the drive, be sure to back up your data and have all of your program disks handy in the event the drive tanks.

7

Well… maybe. It depends on what your’re saying there. I read what you wrote as “pre-fetch” means he’s having disk issues. I’m not sure where you’re tying XP’s prefetch (note lack of a dash) in with this. Prefetching is a way for XP to “pre-load” all of (or parts of) programs and XP itself so as to increase system performance. The main reason that XP boots faster than Win2k on the same system is because of prefetching. Disk errors and prefetching are unrelated, unless the file happens to be in the Prefetch folder, in which case the app should still load normally (albeit slower than usual). Besides, if he’s using NTFS the MFT should have caught the disk error and moved (or deleted) the bad cluster.

Mr. Blue Sky: You can delete everything in the Prefetch folder without problem. XP will “re-Prefetch” the files at the next boot. Some programs might seem a bit slower to start, but will run fine and will regain their normal speed once the machine has been rebooted (and XP has rebuilt its Prefetch list).

Cite for all of the above

Lissa, what happens if you open a command prompt and type CHKDSK C: /F ???
(It will probably say the disk cannot be locked for exculsive access and ask if you want the disk checked at next reboot. If so, say yes and reboot. Let me know if CHKDSK finds any errors.

8

You guys are going to roll your eyes in disgust, but I don’t know how to get to a command prompt. I could swear that was an option on my old computer’s menu, but I can’t seem to find it on this one.

While I was waiting for replies to this thread, I called Dell Support. The tech I spoke to suggested the problem might be caused by spyware and adware. I installed and ran both Ad Aware and SpySweeper.(I had a sneaking suspicion that just using one wouldn’t catch everything, and I was right: the second one I installed found four that the other one hadn’t.) They found dozens of programs which I’ve deleted. It actually seems to be working. So far, anyway.

If someone would kindly clue me in on how to run the CHKDSK for Windows Xp, and I’ll see what that turns up.

9

In XP, go to START- RUN and type “cmd” (without the quotes) and hit Enter. That’ll open a command prompt.

Then type CHKDSK C: /F like Rex says and report back to him.

10

Start-Run-type “Command”, click “Ok” is how you get a command prompt…at least in every version of Windows pre-XP (I use WinME, so I’m not overly familiar with XP)

11

I encounter RUNDLL when the user has loaded the PC up with every damn thing s/he can find to install in Win 98.
Usually a print job locks up and Control ALT Delete shows RUNDLL to be not responding. Canceling it lets the print job run.

12

Aye aye, Cap’n!

When I ran the chkdsk, it said it found errors. It asked me if I wanted to fix them at next boot, to which I replied yes.

I rebooted the computer, and it ran through the check again. Unfortunately, i was called from the room, so I didn’t get to see what happened at the end. When I got back, I was at my normal desktop screen.

Should I reun a defragment or any other maintenance tool?

Does anyone know of any other good free adware/spyware removal programs? I’ve just downloaded some, but, surprise! you can’t remove what’s found unless you buy the program. Those programs came up with some things the others missed, it seems.

13

In NT\2000\XP you want to use CMD.EXE, not COMMAND.COM. COMMAND.COM is the old 16-bit command processor and is only included in NT for DOS compatibility while CMD.EXE is the full 32-bit version. CMD natively uses long filenames while COMMAND.COM is stuck with the old C:\MYDOCU~1 convention. Also, certain shell apps (like the Resource kit stuff) only run under CMD, so it’s best just to use that instead of COMMAND.

Lissa if you’re still having this problem after the CHKDSK, I suspect that it might be some kind of spyware. Both AdAware and Spybot are free and will remove any crapware on your system (I recommend AdAware; note that there are three versions: AdAware Plus and AdAware Professional (not free) and AdAware (free). Make sure you run the “Update” after you install it (to get the latest “spyware definitions” - just like you would with anti-virus software).

Running a Disk Cleanup (Start > Accessories > System Tools > Disk Cleanup) won’t hurt and neither would defragging your drive, but neither of these two will fix the problem in question.

14

D’oh! Actually, that kinda sounds familiar, so I may have known that longa go and forgotten it… :smiley:

And if I may be so bold as to add something to Rex’s comment… I’d recomend that you go through the help files to set up the Custom Scan instead of just doing the “Smart System Scan”. The download page on Lavasoft’s site tells you what to do…(What I’m referring to is found under the “Before you start” article in the “Getting Started” category, IIRC)