spacer spacer spacer
 
 
  arrow Issues
  arrow Notes
  help Startups Help
 
 
box_image
 Partition Commander
Now it's easy for anyone to safely partition their hard drive! You can reclaim waste disk space, organize files, even add new OSes.
 
  RadarSync
Ensures you have the latest drivers and software updates to make your PC run better and safer.		 box_image  
 
 
box_image
 PC Mover
Move applications, files and settings from one PC to another. Handles Windows upgrades too, even XP 32-bit to Windows 7 64-bit!
     
 
 
Startup Applications
 

Rundll32.exe

  
     
 

This list shows programs that may appear in the Windows startup process. While many startup files are required in the normal operation of Windows, some are optional and can cause some performance issues. Others are malware and should never be run. The Startups help provides more details.

The titles below (with the green background) show the name associated with the startup application, and often differ from the filename itself.

  
     
 
You can also access the FaultWire
File Analysis Report
 
   
  User Choice  
     
 
Status icon   The item does not appear to be harmful and different users may desire to have this item loaded or not.
 
 
   
   BatInfEx
  Displays battery status information on an IBM Thinkpad.  
 
 
  Undesirable  
     
 
Status icon   This category covers those items you do not want running on your system, such as Virues, Malware, Spyware, Adware and others.
 
 
   
   Ljx
  Added by the LINEAG-ABD TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows\inf.  
 
 
 
   
   load
  Added by the WOWCRAFT TROJAN!  
 
 
 
   
   Loadhg
  Added by the LINEAG-ABX TROJAN!  
 
 
 
   
   loadMecq3
  Added by the LEGMIR-AS TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in the root folder (i.e., C:\).  
 
 
 
   
   loadMefs
  Added by the LEGMIR-JB TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows\inf.  
 
 
 
   
   LoadPowerProfile
  Added by the MIROOT WORM! Note - do not confuse with the valid LoadPowerProfile entry which has "powrprof.dll" appended to the command/data line.  
 
 
 
   
   LTT2
  Added by the LINEAGE-BI TROJAN!  
 
 
 
   
   Microsoft (R) Windows DLL Loader
  Added by the RANKY.W TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows\dll.  
 
 
 
   
   Microsoft Update 32
  Added by the RBOT.AIE BACKDOOR! Note that this BACKDOOR modifies the file rundll32.exe, which is otherwise a legitimate Microsoft file used to launch DLL file types.  
 
 
 
   
   Regrx
  Added by the WAYIC-A TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows.  
 
 
 
   
   Rhg
  Added by the LINEAG-BIT TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows\inf.  
 
 
 
   
   RKrx
  Added by the LINEAG-ADA TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows\down.  
 
 
 
   
   RKrx
  Added by a variant of the LINEAG-ADA TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows\inf.  
 
 
 
   
   Rr2
  Added by the LINEAG-ADI TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows\addins.  
 
 
 
   
   rro
  Added by the LINEAG-AAE TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Program Files\Microsoft.  
 
 
 
   
   Rundll32
  Added by a variant of the DVLDR TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows\Fonts.  
 
 
 
   
   rundll32
  Added by the SANKER WORM! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows.  
 
 
 
   
   rundll32
  Added by the AGENT-EZ TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows\System32\SHELLEXT.  
 
 
 
   
   rx
  Added by the LINEAGE-BP TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows.  
 
 
 
   
   rzt
  Added by the LINEAGE.BDP TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows\Intel.  
 
 
 
   
   sys
  Added by the LINEAG-G TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows\Intel.  
 
 
 
   
   SysWy
  Added by the LINEAGE-JH TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7).  
 
 
 
   
   TaskMan
  Added by the DVLDR TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows\Fonts.  
 
 
 
   
   Tray
  Added by the LINEAG-ADR TROJAN! ! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows\command.  
 
 
 
   
   Win32 Rundll Loader
  Added by the SDBOT.A TROJAN! Note - this is not to be confused with the legitimate rundll32.exe file!  
 
 
 
   
   Windows DLL Loader
  Added by the WHIPSER-B WORM! Note - this is not the legitimate rundll32.exe process.  
 
 
 
   
   Windows Firewall
  Added by a variant of the IRCBOT BACKDOOR!  
 
 
 
   
   zt
  Added by the LINEAG-ABA TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows\Intel.  
 
 
 
   
   _rx
  Added by the LINEAG-B TROJAN!! Note - this is not the legitimate rundll32.exe process, which is found in C:\Windows (98/ME) or C:\Windows\System32 (NT/2K/XP/Vista/7). This one is located in C:\Windows\command.  
 
 
  Unknown  
     
 
Status icon   There is no information about the status of this file.
 
 
   
   UPDATEHOOK
  ??.  
 
 
   
  Notes  
     
 
notes   Much of this information originated from Paul Collin's Startup List. You can view his site site at: www.sysinfo.org