Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When I start Windows I get a message from RunDLL about not able to load this dll because it is not found. It is supposed to be in <user>\AppData\Local\dwmstsk.dll.

This is a location where dll's should normally not be located (for security reasons). Of course, it might be that McAffee (my antivirus program) has disabled it becuse of that, but it would be nice to know what process is trying to use this dll.


I did a search on the dll in registry, and it was registered with rundll.exe to startup with windows. It was in a string entry named Ihevagarobifama.

share|improve this question

Sounds like something to do with the Desktop Windows Manager (dwm), the process in Vista/7 that's responsible for the new aero effects. But beyond that I can't tell you much. Have you installed anything that might try to add effects to Windows?

share|improve this answer
No I haven't installed anything new for a very long time. This just suddenly appeared. It makes sense that it might have something to do with Aero, because yesterday, all Aero style suddenly disappeared after a period of sleep mode. It came up again when I re-booted (but the error still was there). – awe Sep 17 '10 at 12:50
The only new I can think of, is if McAffee automatic update has introduced some new rules that suddenly affect this dll. – awe Sep 17 '10 at 12:53

Sounds like you were infected with malware and something cleaned up the dll without cleaning the call to it.

Autoruns should be able to help you disable this it ease. Just be careful with Autoruns if you have not used it before, don't go disabling everything or the system won't boot. Find the call to that dll and uncheck it, easy as that.

share|improve this answer
Well, this is also my first thought, but not knowing, it could also be something valid stuff that McAffee has disabled just because it is located in the users AppData folder. This is why I asked this question, to get a concrete answer about what it actually is, not just a general guess... – awe Sep 17 '10 at 12:44

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .