A popular keyboard shortcut to invoke the Safely Remove Hardware dialog is to use the destination as:

Rundll32.exe Shell32.dll,Control_RunDLL HotPlug.dll 

The dialog that is displayed when this shortcut is invoked worked fine in Windows XP. In Windows 7 (64-bit) however, I notice that the same old dialog comes up, but if I choose to Stop any plugged device, I get an error.

Example screenshot:

enter image description here

This seems to be true for all removable USB devices, not just this particular one.

The same device however can be removed by right-clicking the Safely Remove Hardware and Eject Media icon in the Notification area of the Taskbar.

Why does this old dialog not work anymore in Windows 7 (64-bit)? Is there some other command-line invocation I can use instead for the same purpose?

  • Check my updates in my post. – Moab Apr 11 '11 at 1:28
up vote 2 down vote accepted

Some are reporting this is caused by Acronis Software being Installed on the system and may be due to one of the virtual device drivers installed by Acronis, I have Acronis installed and have this same issue.

I found this out by emailing Ed Bott

One could assume other software that installed a virtual device driver could cause the same issue.

Drivers installed by Acronis 11 on my system are:

snapman.sys (Acronis snapshot API)

tifsfilt.sys (Acronis file system filter)

timntr.sys (Acronis backup archive explorer)

tdrpman.sys (Acronis Try and Decide Restore Points volume filter driver)

I am troubleshooting exactly which driver is causing it on my PC, I will report back the results soon.

. enter image description here



Uninstalled Acronis > reboot, but it left 2 Acronis drivers loading, so I cannot confirm this is the issue yet.

Update2: got the Acronis drivers to stop loading using AutoRuns > driver tab, I still have the same issue as you Ashwin, the mystery continues.

Update3: even in safe mode it errors out.

Update 4: I used Process Monitor to capture the events during eject, I did it for both methods, the usual method using the task bar icon and the RunDll method, the methods are completely different in how windows executes them and the processes it uses, since I can find no documentation about this command in Windows 7, I am going to assume it is a deprecated command that was never intended to work properly in Windows 7. .

Your Answer


By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.