I am running Windows 8.1 Update in a Parallels VM. After about 5 minutes of inactivity, a rundll32.exe process is spawned and consumes a core. MsMpEng.exe activity also increases. (probably due to lots of IO but I can't confirm) If I interact with the VM in any way, the rundll32.exe immediately exits until I let it idle for another 5 minutes.

Task Manager reports that the command line is C:Windowssystem32rundll32.exe invagent.dll,RunUpdate

There is no other unusual behaviour on this Windows install.

Update: Further googling has revealed a scheduled task under Microsoft/Windows/Application Experience called ProgramDataUpdater which seems to be the culprit. It's supposed to take care of cleanup after installing/uninstalling programs. I still haven't tracked down the core reason why it's misbehaving. Disabling it is a possible workaround but not a very good one.

5 Answers

The offending invagent.dll is part of Windows Update KB2976978, which seems to be about gathering app compatability telemetry in preparation for Windows 10 upgrades. Only users who opt into the CEI are offered this update.

By uninstalling the update (and opting out so I'm not re-offered it), invagent.dll was removed from my system and the scheduled task.

To opt out:

• Open Control Panel
• Navigate to Action Center, Change Action Center Settings, Customer Experience Improvement Program Settings
• Select, 'No, I do not want to participate in the program.'

To uninstall the update:

• Open Control Panel
• Navigate to Programs and Features, View Installed Updates
• Locate Update for Microsoft Windows (KB2976978), right click, and select Delete.
• You will be prompted to restart your computer.

Hi I have found this same problem with updating to Win 10 and not a single common answer to this issue worked for me, when my computer would go idle the C:Drive usage would go up to 100% and make any task impossible, leading to manual shutdown by holding the power button. Windows Process explorer would show rundll32.exe and in the properties of this file would be C:Windowssystem32rundll32.exe invagent,RunUpdate -noappraiser (then random numbers and letters).

Yesterday I installed Take ownership of file supplied in the following link:

(http://www.howtogeek.com/howto/windows-vista/add-take-ownership-to-explorer-right-click-menu-in-vista/) Take ownership of file

And then changed invagent.dll found in system32 to invagent.dll.bak (@beatcracker). I left my computer idle for a few hours and the C:drive 100% problem is now gone and I can use my PC normally again. invagent.dll also known as inventory agent. I have researched and can't seem to find a solid answer for what this dll is used for, but so far I have not had any problem disabling it.

This has stopped my computer from freezing, however, rundll32.exe now opens multiple times in process explorer!? with the file>properties command line reading:

Metti oli serial viji. C:Windowssystem32rundll32.exe invagent,RunUpdate -noappraiser.

With different random numbers and letters at the end of each command line for every rundll32.exe file!?

So I have fixed 100% C:drive problem by changing invagent.dll to invagent.dll.bak. But potentially opened up a new problem that is currently not causing me any issues. I will edit this answer if I have any further issues over the next week, or discover why multiple versions of rundll32.exe are now running.

Thanks, I hope this helps somebody

EDIT: Wrong answer, it'll just stay here for the history's sake.

Task Manager reports that the command line is C:Windowssystem32rundll32.exe invagent.dll,RunUpdate

This looks like Symantec™ Inventory Solution powered by Altiris™ technology

Is this file is in <Path>Program FilesAltirisInventoryStandalonebin (source)? You could try to renameunregister it and see if it helps. To unregister it run:

then right click & disable items as shown on the picture below:

Another way to solve it is to export the scheduled task to an xml file, change the priority from 4 to 7, and then delete the task and import the xml back to the same place. Most scheduled tasks run at a lower priority of 7. Having a scheduled task that runs at normal i/o and cpu priority is unusual. Here's a link about task scheduler priority: https://bdbits.wordpress.com/2010/04/29/setting-a-scheduled-task-process-priority/

Not the answer you're looking for? Browse other questions tagged windows-8.1rundll32.exe or ask your own question.

List of Rundll32 Commands in Windows 10
Windows Rundll32 commands loads and runs 32-bit dynamic-link libraries (DLLs) that can be used for directly invoking specified functions, or used to create shortcuts with.
This tutorial will provide you with a list of Rundll32 commands that can be used to quickly invoke functions in Windows 10.

Function	Rundll32 command
About Windows	Rundll32.exe shell32.dll,ShellAbout
Add Network Location Wizard	Rundll32 %SystemRoot%system32shwebsvc.dll,AddNetPlaceRunDll
Add Printer Wizard	Rundll32.exe shell32.dll,SHHelpShortcuts_RunDLL AddPrinter
Add Standard TCP/IP Printer Port Wizard	Rundll32.exe tcpmonui.dll,LocalAddPortUI
Control Panel	Rundll32.exe shell32.dll,Control_RunDLL
Date and Time	Rundll32.exe shell32.dll,Control_RunDLL timedate.cpl
Date and Time - Additional Clocks tab	Rundll32.exe shell32.dll,Control_RunDLL timedate.cpl,,1
Desktop Icon Settings	Rundll32.exe shell32.dll,Control_RunDLL desk.cpl,,0
Device Installation Settings	Rundll32.exe %SystemRoot%System32newdev.dll,DeviceInternetSettingUi
Device Manager	Rundll32.exe devmgr.dll DeviceManager_Execute
Display Settings	Rundll32.exe shell32.dll,Control_RunDLL desk.cpl
Ease of Access Center	Rundll32.exe shell32.dll,Control_RunDLL access.cpl
Environment Variables	Rundll32.exe sysdm.cpl,EditEnvironmentVariables
File Explorer Options - General tab	Rundll32.exe shell32.dll,Options_RunDLL 0
File Explorer Options - Search tab	Rundll32.exe shell32.dll,Options_RunDLL 2
File Explorer Options - View tab	Rundll32.exe shell32.dll,Options_RunDLL 7
Fonts folder	Rundll32.exe shell32.dll,SHHelpShortcuts_RunDLL FontsFolder
Forgotten Password Wizard	Rundll32.exe keymgr.dll,PRShowSaveWizardExW
Game Controllers	Rundll32.exe shell32.dll,Control_RunDLL joy.cpl
Hibernate or Sleep	Rundll32.exe powrprof.dll,SetSuspendState
Indexing Options	Rundll32.exe shell32.dll,Control_RunDLL srchadmin.dll
Infared	Rundll32.exe shell32.dll,Control_RunDLL irprops.cpl
Internet Explorer - delete all browsing history	Rundll32.exe InetCpl.cpl,ClearMyTracksByProcess 255
Internet Explorer - delete all browsing history and add-ons history	Rundll32.exe InetCpl.cpl,ClearMyTracksByProcess 4351
Internet Explorer - delete cookies and website data	Rundll32.exe InetCpl.cpl,ClearMyTracksByProcess 2
Internet Explorer - delete download history	Rundll32.exe InetCpl.cpl,ClearMyTracksByProcess 16384
Internet Explorer - delete form data	Rundll32.exe InetCpl.cpl,ClearMyTracksByProcess 16
Internet Explorer - delete history	Rundll32.exe InetCpl.cpl,ClearMyTracksByProcess 1
Internet Explorer - delete passwords	Rundll32.exe InetCpl.cpl,ClearMyTracksByProcess 32
Internet Explorer - delete temporary Internet files and website files	Rundll32.exe InetCpl.cpl,ClearMyTracksByProcess 8
Internet Explorer - Organize Favorites	Rundll32.exe shdocvw.dll,DoOrganizeFavDlg
Internet Properties - General tab	Rundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl
Internet Properties - Security tab	Rundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl,,1
Internet Properties - Privacy tab	Rundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl,,2
Internet Properties - Content tab	Rundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl,,3
Internet Properties - Connections tab	Rundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl,,4
Internet Properties - Programs tab	Rundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl,,5
Internet Properties - Advanced tab	Rundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl,,6
Keyboard Properties	Rundll32.exe shell32.dll,Control_RunDLL main.cpl @1
Lock PC	Rundll32.exe user32.dll,LockWorkStation
Map Network Drive wizard	Rundll32.exe shell32.dll,SHHelpShortcuts_RunDLL Connect
Mouse Button swap left and right button function	Rundll32.exe user32.dll,SwapMouseButton
Mouse Properties - Buttons tab	Rundll32.exe shell32.dll,Control_RunDLL main.cpl
Mouse Properties - Pointers tab	Rundll32.exe shell32.dll,Control_RunDLL main.cpl,,1
Mouse Properties - Pointer Options tab	Rundll32.exe shell32.dll,Control_RunDLL main.cpl,,2
Mouse Properties - Wheel tab	Rundll32.exe shell32.dll,Control_RunDLL main.cpl,,3
Mouse Properties - Hardware tab	Rundll32.exe shell32.dll,Control_RunDLL main.cpl,,4
Network Connections	Rundll32.exe shell32.dll,Control_RunDLL ncpa.cpl
ODBC Data Source Administrator	Rundll32.exe shell32.dll,Control_RunDLL odbccp32.cpl
Offline Files (General tab)	Rundll32.exe Shell32.dll,Control_RunDLL cscui.dll,,0
Offline Files (Disk Usage tab)	Rundll32.exe Shell32.dll,Control_RunDLL cscui.dll,,1
Offline Files (Encryption tab)	Rundll32.exe Shell32.dll,Control_RunDLL cscui.dll,,2
Offline Files (Network tab)	Rundll32.exe Shell32.dll,Control_RunDLL cscui.dll,,3
Pen and Touch	Rundll32.exe shell32.dll,Control_RunDLL tabletpc.cpl
Personalization - Background Settings	Rundll32.exe shell32.dll,Control_RunDLL desk.cpl,,2
Power Options	Rundll32.exe shell32.dll,Control_RunDLL powercfg.cpl
Printer User Interface	Rundll32.exe Printui.dll,PrintUIEntry /?
Printers folder	Rundll32.exe shell32.dll,SHHelpShortcuts_RunDLL PrintersFolder
Process idle tasks	Rundll32.exe advapi32.dll,ProcessIdleTasks
Programs and Features	Rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl,,0
Region - Formats tab	Rundll32.exe shell32.dll,Control_RunDLL Intl.cpl,,0
Region - Location tab	Rundll32.exe shell32.dll,Control_RunDLL Intl.cpl,,1
Region - Administrative tab	Rundll32.exe shell32.dll,Control_RunDLL Intl.cpl,,2
Safely Remove Hardware	Rundll32.exe shell32.dll,Control_RunDLL HotPlug.dll
Screen Saver Settings	Rundll32.exe shell32.dll,Control_RunDLL desk.cpl,,1
Security and Maintenance	Rundll32.exe shell32.dll,Control_RunDLL wscui.cpl
Set Program Access and Computer Defaults	Rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl,,3
Set Up a Network wizard	Rundll32.exe shell32.dll,Control_RunDLL NetSetup.cpl
Sleep or Hibernate	Rundll32.exe powrprof.dll,SetSuspendState
Sound - Playback tab	Rundll32.exe shell32.dll,Control_RunDLL Mmsys.cpl,,0
Sound - Recording tab	Rundll32.exe shell32.dll,Control_RunDLL Mmsys.cpl,,1
Sound - Sounds tab	Rundll32.exe shell32.dll,Control_RunDLL Mmsys.cpl,,2
Sound - Communications tab	Rundll32.exe shell32.dll,Control_RunDLL Mmsys.cpl,,3
Speech Properties - Text to Speech tab	Rundll32.exe shell32.dll,Control_RunDLL %SystemRoot%System32SpeechSpeechUXsapi.cpl,,1
Start Settings	Rundll32.exe shell32.dll,Options_RunDLL 3
Stored User Names and Passwords	Rundll32.exe keymgr.dll,KRShowKeyMgr
System Properties - Computer Name tab	Rundll32.exe shell32.dll,Control_RunDLL Sysdm.cpl,,1
System Properties - Hardware tab	Rundll32.exe shell32.dll,Control_RunDLL Sysdm.cpl,,2
System Properties - Advanced tab	Rundll32.exe shell32.dll,Control_RunDLL Sysdm.cpl,,3
System Properties - System Protection tab	Rundll32.exe shell32.dll,Control_RunDLL Sysdm.cpl,,4
System Properties - Remote tab	Rundll32.exe shell32.dll,Control_RunDLL Sysdm.cpl,,5
Taskbar Settings	Rundll32.exe shell32.dll,Options_RunDLL 1
Text Services and Input Languages	Rundll32.exe Shell32.dll,Control_RunDLL input.dll,,{C07337D3-DB2C-4D0B-9A93-B722A6C106E2}
User Accounts	Rundll32.exe shell32.dll,Control_RunDLL nusrmgr.cpl
Windows Features	Rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl,,2
Windows Firewall	Rundll32.exe shell32.dll,Control_RunDLL firewall.cpl
Windows To Go Startup Options	Rundll32.exe pwlauncher.dll,ShowPortableWorkspaceLauncherConfigurationUX

That's it,
Shawn