-1

enter image description here

Why is this process using my CPU so much, what is it doing in the secret? And how to fix this?
And I think it affects my other programs.

  • Could be anything. Go to the details tab, right click on the bar at the top that contains 'Name,Status...etc'. Click Select columns, tick command line. Then from this you can see what DLL its running. – mt025 May 6 '18 at 16:27
0

Rundll32.exe is a tool to run functions from DLLs.

The Rundll and Rundll32 utility programs were originally designed only for internal use at Microsoft. But the functionality provided by them is sufficiently generic that they are now available for general use.

To see which DLL gets loaded, go to the Details tab of Taskmgr, do a rightclick on the column header, click on Select columns and activate commandline

enter image description here

Now look in comandline which DLL gets executed and if this is malware or legit Windows DLL.

  • How would we know a legit Windows DLL from others? – Christopher Hostage May 9 '18 at 15:48
  • 1
    @ChristopherHostage this commandline shows the full path, open the folder, look at file properties if it has Microsoft signature. Sometime malware has legal names shell32.dll but they are stored in non system locations – magicandre1981 May 10 '18 at 15:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.