PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

Tip from the PitCrew

Every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

Furthermore, perhaps the quickest and most straight forward method to detect malware is through a running process analysis.

Process Library

  

More than one possible match was found; all matches are listed below in order of their prevalence. This only tells you what the file and the correct action might be.

To understand which possibility is actually running on your own system, perform an Overdrive test and then look at the Software|Processes tab.


Match #1

rundll32.exe ((Various))

Percentage of recently scanned PC's with this process running: 16.46%
Average CPU use for this program: 0%
Average RAM for this program: 4 MB


PC Pitstop Analysis

RUNDLL32.EXE is a program that can be used to call program code inside 32-bit DLLs. Because it can be used to run code in any DLL, we don't know exactly what your particular RUNDLL32 is doing. It's worth investigating further to determine what this program is doing. For more information on RUNDLL32, see Microsoft document http://support.microsoft.com/kb/q164787/


Recommendation

Win Patrol

rundll32.exe is an essential part of Windows and required for Windows to work properly. It should never be disabled.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides a easy to understand descriptions of over 15,000 processes and programs.



Identification

In addition to the file name, rundll32.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:Microsoft Corporation
Product contains:Microsoft
File name contains:\win

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called rundll32.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
rundll32.exe> 20
#MD5Size
10x38d1d208ea3a217bb233038f796baea324576 bytes
20x461e3c15d31462aa025000294f8d896132768 bytes
30x0d5a95862d056091fb827d108da5dd1e34816 bytes
40x7903854a31929d9e9c94a0065695876333280 bytes
50xa6cab4055600ad39982183486c2f929333280 bytes
60x0475086b97a094f7e15037eb6a754c5d44544 bytes
70x61cf5b74a4b5fe430f87e9259b7e4f6010000 bytes
80xf6196577749021464b0766537a2eb5e124576 bytes
90xf4c6ae8d54ae2c02dd475aec81160edd98816 bytes
100x940ada8f963a9da078e4f9cbfaac954d10000 bytes
110x115d5dc5951222be766fe83aac03bd5535328 bytes
120x48d10d9ee7a910c083570b777ad89cb733792 bytes
130x54429036438be8a9335f140e1aa2330e44544 bytes
140x16c68603123832bfd177b8334e9d9cb233792 bytes
150x1ed5274825cd1eebbe102b9ff7c9ec3110000 bytes
160xce1232285c9eac56e46d2033951c51d134816 bytes
170xb22403c3d70f405761cb4e9ac4d85ca034816 bytes
180x67e0d4207b2779374d1bc950c120a00624576 bytes
190x6849fea0df864053fd2a10db39afabeb31744 bytes
200x6326a11a9f9787b79b039ed21968dbe434816 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. rundll32.exe ((Various)) has been seen on 16.46% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 4 MB. The average CPU load for this program was 0%.


Vendor or Distributor's Web Site

http://support.microsoft.com/kb/q164787/


Match #2

rundll32.exe ((Various))

This program has not been seen on any systems tested at PC Pitstop in the past week.


PC Pitstop Analysis

rundll32.exe is a program that can be used to call program code inside 32-bit DLLs. Because it can be used to run code in any DLL, we don't know exactly what your particular RUNDLL32 is doing. It's worth investigating further to determine what this program is doing. For more information on RUNDLL32, see Microsoft document http://support.microsoft.com/kb/q164787/


Recommendation

Win Patrol

rundll32.exe is an essential part of Windows and required for Windows to work properly. It should never be disabled.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides a easy to understand descriptions of over 15,000 processes and programs.



Identification

In addition to the file name, rundll32.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:îñîôò
Product contains:windows
File name contains:\win

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called rundll32.exe, we have detected 4 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
rundll32.exe4
#MD5Size
10x5bc57445124544e1b670f465ae7b12f633280 bytes
20x319c9e5989bacd5cbfd46b23daf0e11934816 bytes
30xae6b5853827e716ae0b46cc3a2e2f3f532256 bytes
40xd906ee27231cbccd9256406baa54797846080 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. This program has not been seen on any systems tested at PC Pitstop in the past week.


Vendor or Distributor's Web Site

http://support.microsoft.com/kb/q164787/


Match #3

rundll32.exe ((Various))

This program has not been seen on any systems tested at PC Pitstop in the past week.


PC Pitstop Analysis

rundll32.exe is a program that can be used to call program code inside 32-bit DLLs. Because it can be used to run code in any DLL, we don't know exactly what your particular RUNDLL32 is doing. It's worth investigating further to determine what this program is doing. For more information on RUNDLL32, see Microsoft document http://support.microsoft.com/kb/q164787/


Recommendation

Win Patrol

rundll32.exe is an essential part of Windows and required for Windows to work properly. It should never be disabled.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides a easy to understand descriptions of over 15,000 processes and programs.



Identification

In addition to the file name, rundll32.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:КоÑ
Product contains:ОпеÑ
File name contains:\win

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called rundll32.exe, we have detected 1 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
rundll32.exe1
#MD5Size
10x4e95e199cd4702006dbe7bfeea9a4a8a33280 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. This program has not been seen on any systems tested at PC Pitstop in the past week.


Vendor or Distributor's Web Site

http://support.microsoft.com/kb/q164787/


Match #4

rundll32.exe (Possible Virus ** Read **)

This program has not been seen on any systems tested at PC Pitstop in the past week.


PC Pitstop Analysis

rundll32.exe is a file name that many malwares use, look into Site URL.
RUNDLL is a program that can be used to call program code inside 32-bit DLLs. Because it can be used to run code in any DLL, we don't know exactly what your particular RUNDLL32 is doing. It's worth investigating further to determine what this program is doing. For more information on RUNDLL32, see Microsoft document http://support.microsoft.com/kb/q164787/
** Usually rundll32.exe has in vendor "Microsoft" and in product "Windows" However it's not the case, here vendor is empty. You may want run an anti-virus just to be sure the system is clean.


Recommendation

CA AntiVirus

rundll32.exe is a VIRUS. Stop all work until the virus is removed or you run the risk of spreading the virus to other people. Worse yet, the virus may be doing harm to your computer and your information.

rundll32.exe is a virus and should be removed immediately to avoid doing further harm. PC Pitstop recommends CA Antivirus in these types of situations.



Identification

The file name alone identifies this program.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called rundll32.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
rundll32.exe> 20
#MD5Size
10x64122b5ffe64f066bf1f3c2304b53e0e1359872 bytes
20xc99ba84b232c3fc77b26e8ebb722cd6044184 bytes
30x8d08b75195561ed02caa6f0abb3b4fd861440 bytes
40x42ebd19b6d79f10731eabf9c3686225044696 bytes
50x49195c541b41ca8ce4dc969aeabf964133280 bytes
60x63fba9aae7d5bb4904a52b321e8f774a44209 bytes
70x4fc158ec7b076e9225e877e6970614e839247 bytes
80x01ede6b07a259e916d81dd8a3f92698620686 bytes
90x2678c894cb4330a79221c70c4dde2c8b8704 bytes
100x66eb92d77878dbc951676decdacea38132768 bytes
110x4c46d673afb290c3311c8611b946cacf44696 bytes
120xd523aa55951dc365d18d6c88cbf76ef540960 bytes
130x860032b2fc215e7a236cc9d8d9ca18ef40960 bytes
140x2cc02355543bc1a3e7c600e6f7a8f8b632768 bytes
150x5d88310c03b077d150b84d17562971dc32768 bytes
160xf2b1fb9a75f6d625fe4f9c1293bd39541634816 bytes
170xe23dc64a1b110d72a894079cf5d6530936864 bytes
180x1e8d64822bbc59042d5185fe5702c1ac568320 bytes
190x8e51593aa4a4c642e375388e4ceb84ce524288 bytes
200x19723b06b93706c6d4c6046db291e55d140288 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. This program has not been seen on any systems tested at PC Pitstop in the past week.


Detailed Description and/or Removal Instructions

http://search.ca.com/search/ca?style=en&search_button=Search&qt=rundll32.exe&col=

Important note: A file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory. If you are unable to identify a file, ask about it in our forums after running our full tests.