What was the name of the file in the error message?RunDLL32.exe
is a legitimate
Windows file that executes/loads .dll
(Dynamic Link Library) modules which too can be legitimate
or sometimes malware related. A RunDLL "Error loading...
" or "specific module could not be found
" message usually occurs when the .dll file(s) that was set to run at startup or as a scheduled task in the registry or as a scheduled task has been deleted.
It's not uncommon to find remnants of startup and scheduled task registry keys when booting into Windows after uninstalling programs or using anti-virus/security scanning tools to remove adware and malware. Windows is trying to load this file but cannot locate it since the file was most likely removed. However, an associated orphaned registry entry
still exists and is telling Windows to load the file when you boot up. Since the file no longer exists, Windows will display an error message
. You need to remove this registry or scheduled task entry so Windows stops searching for the file when it loads.
This error usually can be fixed with Autoruns as follows...
- After downloading and extracting, open the folder and double-click on autoruns.exe to launch it.
Vista/Windows 7/8 users right-click and select Run As Administrator.
- Please be patient as it scans and populates the entries.
- When finished scanning, it will say Ready at the bottom and list all entries under the Everything tab.
- In the top menu, click File > Find... and type the file name related to the .dll error message, then click Find Next.
- Alternatively, you can scroll through the list and look for any entry related to the file in the error message.
- If found, right-click on the entry and choose delete.
- Exit Autoruns and reboot your computer when done.
If a startup is related to a Scheduled Task, you can also use that tab in Autoruns or open Windows Task Scheduler
and remove it from there.
-- Note: AutoRuns is a tool for advanced users since it does not have the ability to recognize unsafe or dangerous items...it only displays what it finds. Do not uncheck or delete anything else.