Rundll32.exe causes computer to hang at shut-down

[Deabelos]

I am working with a computer that consistently hangs on shutdown but only if the computer has been on all day. It will give me an error that says "rundll32.exe is not responding". I got a command line tool to show me what process is being used, which was WMIC /OUTPUT:C:\ProcessList.txt PROCESS get Caption,Commandline,Processid. But once the rundll32.exe error comes, the pc is already in shutdown mode and I cannot access a command line? Can anyone tell me a way to find out what is causing this hang? Thanks.

[kattman]

It can be a legitimate Process that is located here - C:\Windows\System32 and also it can be a Trojan Backdoor. You have to ensure that your system is clean by scanning with up to date security software.

[Deabelos]

Thanks but I dont know on what process it is hanging on, once the error pops up, then the computer is already in the process of shutting down and I cannot get to task manager, a command line, or anything else. I have searched the computer for rundll32.exe and it appears only in the c:\windows\system32 folder.

[Maxforu]

Are you able to see any error messages in the event viewer? Which method of troubleshooting you are performing for us to look further and avoid repeating what you should do to solve this case?

[agarwalm11]

Have you tried to start with a Clean boot on your computer. It might be possible that Rundll32.exe becomes corrupt on the hard drive and need to be replaced, also try to make sure te Ram pass the test on this machine to get rid of the Ram from our scenario.

Process Monitor
http://technet.microsoft.com/en-us/s.../bb896645.aspx

DiskMon
http://technet.microsoft.com/en-us/s.../bb896646.aspx

FileMon
http://technet.microsoft.com/en-us/s.../bb896642.aspx

PsTools
http://technet.microsoft.com/en-us/s.../bb896649.aspx