Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top
Image Name                   PID Modules                                      
========================= ====== =============================================
rundll32.exe                 252 ntdll.dll, kernel32.dll, msvcrt.dll,         
                                 GDI32.dll, USER32.dll, IMAGEHLP.dll,         
                                 ShimEng.dll, AcGenral.DLL, ADVAPI32.dll,     
                                 RPCRT4.dll, Secur32.dll, WINMM.dll,          
                                 ole32.dll, OLEAUT32.dll, MSACM32.dll,        
                                 VERSION.dll, SHELL32.dll, SHLWAPI.dll,       
                                 USERENV.dll, UxTheme.dll, guard32.dll,       
                                 fltlib.dll, comctl32.dll, comctl32.dll,      
                                 NvMcTray.dll, SETUPAPI.dll, IMM32.dll,       

I have to end the rundll32.exe process to safely remove my USB drive. Given the modules rundll32.exe is running, do you know which running module(s) would prevent the USB drive from being safely removed, and if so is there a more permanent straightforward solution such as changing an automatic service (the list from services.msc) into a disabled/manual service or maybe something else you can think of?

share|improve this question

migrated from Nov 26 '11 at 2:00

This question came from our site for system and network administrators.

rundll32 is a "helper" process that is used to execute an arbitrary function in a DLL, to determine what this is, look to see what command line it was called with – Rob Nov 26 '11 at 0:01

Unlocker helps in such cases.

It tells you exactly which process is locking the drive and is (normally) able to unlock the process without terminating it.

This also works if a folder or a file cannot be renamed / moved / deleted for a similar reason.

share|improve this answer

You must log in to answer this question.