Autorun Details: Rundll32.exe

Name: _rx
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAG-B TROJAN!! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%\command

Name: Adobe32 ARM
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SWISYN.ARLT TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is found in %WinDir%\Adobe32 ARM

Name: ca84c702-c758-4421-974e-b02662e76d7c_6
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Antimalware Defender rogue security software - not recommended, removal instructions here! Note that rundll32.exe is a legitimate Microsoft file used to launch DLL file types and shouldn't be deleted

Name: Ljx
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAG-ABD TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%\inf

Name: load
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the WOWCRAFT TROJAN!

Name: Loadhg
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAG-ABX TROJAN!

Name: loadMecq3
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LEGMIR-AS TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in the root folder (i.e., C:\)

Name: loadMefs
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LEGMIR-JB TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%\inf

Name: LoadPowerProfile
Command: Rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the MIROOT WORM! Note - do not confuse with the valid LoadPowerProfile entry which has "powrprof.dll" appended to the command/data line

Name: LTT2
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAGE-BI TROJAN!

Name: Microsoft (R) Windows DLL Loader
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the RANKY.W TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%\dll

Name: Microsoft Update 32
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the RBOT.AIE BACKDOOR! Note that this BACKDOOR modifies the file rundll32.exe, which is otherwise a legitimate Microsoft file used to launch DLL file types

Name: Regrx
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the WAYIC-A TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%

Name: Rhg
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAG-BIT TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%\inf

Name: RKrx
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAG-ADA TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%\down

Name: RKrx
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the LINEAG-ADA TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%\inf

Name: Rr2
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAG-ADI TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%\addins

Name: rro
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAG-AAE TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %ProgramFiles%\Microsoft

Name: Rundll32
Command: Rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the DVLDR TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%\Fonts

Name: rundll32
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SANKER WORM! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%

Name: rundll32
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AGENT-EZ TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %System%\SHELLEXT

Name: rx
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAGE-BP TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%

Name: rzt
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAGE.BDP TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP/Vista/7). This one is located in %Windir%\Intel

Name: SunJavaUpdateSched
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the VBKRYPT.FNL TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (Me/98) or %System% (Windows 7/Vista/XP/2K/NT). This one is located in %AppData%

Name: sys
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAG-G TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%\Intel

Name: SysWy
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAGE-JH TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP)

Name: TaskMan
Command: Rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the DVLDR TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%\Fonts

Name: Tray
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAG-ADR TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%\command

Name: UPDATEHOOK
Command: Rundll32.exe
Status: Unknown
Description: ??

Name: Win32 Rundll Loader
Command: Rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the SDBOT.A BACKDOOR! Note - this is not to be confused with the legitimate rundll32.exe file!

Name: Windows DLL Loader
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the WHIPSER-B WORM! Note - this is not the legitimate rundll32.exe process

Name: Windows Firewall
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the IRCBOT BACKDOOR!

Name: zt
Command: rundll32.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LINEAG-ABA TROJAN! Note - this is not the legitimate rundll32.exe process, which is found in %Windir% (98/ME) or %System% (NT/2K/XP). This one is located in %Windir%\Intel

Back to the autorun list

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner