none
Windows media player 11 and a process called rundll32 RRS feed

  • Question

  • When I play videos with windows media player 11 I get several dialog boxes appearing saying that rundll32 (windows host process) has stopped working. This is becoming increasingly annoying for me and it keeps on doing it.

    unfortuately I do not know much about this.

    I am running a brand new computer on windows vista home premium.

    Can anyone suggest anything from what I have said?

    Sunday, March 4, 2007 2:05 PM

Answers

  • Found it and I'm so happy. I've been debugging this guy for about a week now and just stumbled on to the fix.

     

    WMP11 is spawning rundll32 to run the Internet Connection Wizard because it thinks you're not connected to the internet. If you open IE go to Tools, Internet Options, Connections and click setup, you'll be prompted with "You're already connected to the internet".

    Open up regedit and navigate to this key:

    HKEY_CURRENT_USER\Software\Microsoft\Internet Connection Wizard

    Set Completed to 1

    Close and re-open Media Player.

     

    Hope this helps!!

    Monday, March 26, 2007 2:25 PM

All replies

  • i get exactly the same thing. luckily i dont use media player too much so i can live with it for now but it wouls sure help if someone had a way of fixing it!
    Monday, March 5, 2007 4:17 AM
  • Thank you from your post.

    If anyone knows anything about an answer please reply

    Monday, March 5, 2007 11:19 AM
  • I believe that I have found some sort of log that i was told told have a look at when I ran this Debug Diaognistics tool and my rule failed.

    I don't understand a thing about it but I do hope that somebody can

    Loading control script C:\Program Files\DebugDiag\Scripts\CrashRule_Process_rundll32.exe.vbs
    DumpPath set to C:\Program Files\DebugDiag\Logs\Crash rule for all instances of rundll32.exe
    [05/03/2007 17:58:13] Process created. BaseModule - C:\Windows\system32\RunDLL32.exeBaseThread System ID - 2212
    [05/03/2007 17:58:13] C:\Windows\system32\ntdll.dll loaded at 0x77ee0000
    [05/03/2007 17:58:13] Thread created. New thread system id - 2948
    [05/03/2007 17:58:13] Thread created. New thread system id - 3172
    [05/03/2007 17:58:13] C:\Windows\system32\kernel32.dll loaded at 0x76740000
    [05/03/2007 17:58:13] C:\Windows\system32\USER32.dll loaded at 0x766a0000
    [05/03/2007 17:58:13] C:\Windows\system32\GDI32.dll loaded at 0x768e0000
    [05/03/2007 17:58:13] C:\Windows\system32\ADVAPI32.dll loaded at 0x76820000
    [05/03/2007 17:58:13] C:\Windows\system32\RPCRT4.dll loaded at 0x77d50000
    [05/03/2007 17:58:13] C:\Windows\system32\msvcrt.dll loaded at 0x76c70000
    [05/03/2007 17:58:13] C:\Windows\system32\imagehlp.dll loaded at 0x76e60000
    [05/03/2007 17:58:13] C:\Windows\system32\ShimEng.dll loaded at 0x71a00000
    [05/03/2007 17:58:13] C:\Windows\system32\apphelp.dll loaded at 0x764b0000
    [05/03/2007 17:58:13] C:\Windows\AppPatch\AcLayers.DLL loaded at 0x6e890000
    [05/03/2007 17:58:13] C:\Windows\system32\SHELL32.dll loaded at 0x77040000
    [05/03/2007 17:58:13] C:\Windows\system32\SHLWAPI.dll loaded at 0x76da0000
    [05/03/2007 17:58:13] C:\Windows\system32\ole32.dll loaded at 0x77c00000
    [05/03/2007 17:58:13] C:\Windows\system32\OLEAUT32.dll loaded at 0x77b10000
    [05/03/2007 17:58:13] C:\Windows\system32\USERENV.dll loaded at 0x76530000
    [05/03/2007 17:58:13] C:\Windows\system32\Secur32.dll loaded at 0x76510000
    [05/03/2007 17:58:13] C:\Windows\system32\WINSPOOL.DRV loaded at 0x73680000
    [05/03/2007 17:58:14] C:\Windows\system32\MPR.dll loaded at 0x760e0000
    [05/03/2007 17:58:14] C:\Windows\system32\IMM32.DLL loaded at 0x76680000
    [05/03/2007 17:58:14] C:\Windows\system32\MSCTF.dll loaded at 0x76930000
    [05/03/2007 17:58:14] C:\Windows\system32\LPK.DLL loaded at 0x76a00000
    [05/03/2007 17:58:14] C:\Windows\system32\USP10.dll loaded at 0x76fc0000
    [05/03/2007 17:58:14] C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll loaded at 0x75430000
    [05/03/2007 17:58:14] C:\Program Files\Movie Maker\wmm2clip.dll loaded at 0x6d4e0000
    [05/03/2007 17:58:14] C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6000.16386_none_9ea0ac9ec96e7127\gdiplus.dll loaded at 0x74140000
    [05/03/2007 17:58:14] C:\Windows\system32\VERSION.dll loaded at 0x75d60000
    [05/03/2007 17:58:14] C:\Windows\system32\WMVCore.DLL loaded at 0x71c20000
    [05/03/2007 17:58:14] C:\Windows\system32\WMASF.DLL loaded at 0x71f60000
    [05/03/2007 17:58:14] C:\Windows\system32\urlmon.dll loaded at 0x76e90000
    [05/03/2007 17:58:14] C:\Windows\system32\iertutil.dll loaded at 0x76e10000
    [05/03/2007 17:58:14] C:\Windows\system32\uxtheme.dll loaded at 0x74ab0000
    [05/03/2007 17:58:14] C:\Windows\system32\CLBCatQ.DLL loaded at 0x77e50000
    [05/03/2007 17:58:14] C:\Windows\system32\quartz.dll loaded at 0x6a5d0000
    [05/03/2007 17:58:14] C:\Windows\system32\WINMM.dll loaded at 0x74b40000
    [05/03/2007 17:58:14] C:\Windows\system32\OLEACC.dll loaded at 0x74b00000
    [05/03/2007 17:58:14] C:\Windows\system32\DXVA2.DLL loaded at 0x71b50000
    [05/03/2007 17:58:14] C:\Windows\system32\devenum.dll loaded at 0x6c8b0000
    [05/03/2007 17:58:14] C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\umc_vob_source_filter.ax loaded at 0x10000000
    [05/03/2007 17:58:14] C:\Windows\system32\MSVCR71.dll loaded at 0x7c340000
    [05/03/2007 17:58:14] C:\Windows\System32\msxml3.dll loaded at 0x72fb0000
    [05/03/2007 17:58:14] C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL loaded at 0x73410000
    [05/03/2007 17:58:14] C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.312_none_10b2ee7b9bffc2c7\MSVCR80.dll loaded at 0x73140000
    [05/03/2007 17:58:14] C:\Windows\system32\lmpgspl.ax loaded at 0x1d1c0000
    [05/03/2007 17:58:14] Thread created. New thread system id - 2820
    [05/03/2007 17:58:14] Initializing control script
    [05/03/2007 17:58:14] Clearing any existing breakpoints
    [05/03/2007 17:58:14]
    [05/03/2007 17:58:14] Current Breakpoint List(BL)
    [05/03/2007 17:58:14] Thread exited. Exiting thread system id - 2820. Exit code - 0x00000000
    [05/03/2007 17:58:16] Thread exited. Exiting thread system id - 2948. Exit code - 0xc0000005
    [05/03/2007 17:58:16] Thread exited. Exiting thread system id - 2212. Exit code - 0xc0000005
    [05/03/2007 17:58:16] Process exited. Exit code - 0xc0000005

    Monday, March 5, 2007 6:03 PM
  • I am experiencing something similar.  I get this very message "Window host process (Rundll32) has stopped working."  Mine is coming up ad hoc, so I'm not sure what is causing.  Does anyone out there have a solution?  I need help.  Thank you.
    Thursday, March 8, 2007 9:20 PM
  • i also have the same problem must be a bug, it is annoying tho
    Monday, March 12, 2007 3:41 AM
  • I also am having issues with this, it happens even without running media player. As soon as I highlight certain video files it pops up. With my HD video files it also shuts down explorer.   It would appear that nobody is hearing our plight I guess this is a common problem with Vista but no solution or acknowledgement seems forthcoming.

    How unusual that the richest company in the world should ignore its valued client base....

    Friday, March 16, 2007 9:55 PM
  • Hmmm...strange.  I'm not having the problem, and I've installed VLC, Creative Media Source, and Creative Entertainment Center (for XP) - although I haven't installed any CODEC packs.  Does any of this match any of your systems?  Anything particularly different regarding media?  Do you have all the latest updates?  Does your CPU have hardware DEP support?

    I had a problem with Explorer crashing out every time I hovered over a .zip file (due to an archiving program I installed - even uninstalling the program didn't fix the problem).  While I didn't find the exact cause of the problem, looking back I wonder if DEP (Data Execution Prevention) had something to do with it.  I've been told by many sources that DEP is supposed to gracefully prevent certain things from happening, but my experience has been that any time DEP kicks in it results in an immediate AppCrash (both in XP and Vista) - I have an Athlon64 with hardware DEP support, although I have no idea how that plays into the AppCrash issue.

    You might want to try disabling DEP to see if that alleviates the problem.  Keep in mind you are disabling a rather important protection feature of Windows...

    To turn DEP completely off in Vista open a command window (or click on Start/Run and type cmd and hit return) and type the following:
    bcdedit.exe /set {current} nx AlwaysOff

    To turn DEP back on:
    bcdedit.exe /set {current} nx AlwaysOn

    In Vista, the effect is immediate - no reboot required.

    DEP can be somewhat fine tuned through the GUI...

    - Right click Computer, select properties (or CP/<Classic View>/System)
    - Select Advanced System Settings (in the left pane)
    - Advanced tab (you should already be there)
    - Click Settings under Performance
    - Select the Data Execution Prevention tab
    - Select "Turn on DEP for all programs..."
    - Click Add and browse to \Program Files\Windows Media Player\wmplayer.exe
    - You might also want to add wmlaunch.exe

    Good luck!

    Saturday, March 17, 2007 9:32 PM
  •  

    I have a very similar issues on my Vista box.  When I try to open a url in WMP11, the CPU spikes to 100% and stays there. I broke out Proces Monitor and Process Explorer from Sysinternals to see what was going on. Turns out WMP11 is spawning rundll32.exe.

     

    Here is the exact line:  rundll32.exe "C:\Windows\system32\WININET.dll",DispatchAPICall 1

    I've tried renaming rundll32 to see if I could get some sort of error message that might point me in the right direction but that didn't help, infact it didnt do anything but leave WMP11 in an infinite loop looking for rundll32.

    I've also disabled all addins and removed all WMP registry keys from HKLM and HKCU. No luck, it does the same thing.

     

    Any ideas on this guys?

     

    Thanks!

    Monday, March 26, 2007 1:21 PM
  • Found it and I'm so happy. I've been debugging this guy for about a week now and just stumbled on to the fix.

     

    WMP11 is spawning rundll32 to run the Internet Connection Wizard because it thinks you're not connected to the internet. If you open IE go to Tools, Internet Options, Connections and click setup, you'll be prompted with "You're already connected to the internet".

    Open up regedit and navigate to this key:

    HKEY_CURRENT_USER\Software\Microsoft\Internet Connection Wizard

    Set Completed to 1

    Close and re-open Media Player.

     

    Hope this helps!!

    Monday, March 26, 2007 2:25 PM
  • Great catch!  Thanks for posting the fix Smile
    Tuesday, March 27, 2007 8:56 AM
  • did what you said but completed was already set to 1, will this return?, slows this week old box to less than a crawl. Oh and i ended the dll process in taskmanager, returned to normal, so must be the culprit, hope nuthin elses screws up!!!!, But thanks
    Wednesday, March 28, 2007 10:29 PM
  • How do you open up regedit? And after opening regedit, how do I navigate to the key: HKEY_CURRENT_USER\Software\Microsoft\Internet Connection Wizard???
    Monday, April 2, 2007 12:47 PM
  • To open regedit, click on windows logo, then at start search type regedit, it will open up the Registry Editor window, press together (Ctrl + F), find window opens up, and then at find what box type Internet Connection Wizard hit enter, then do what you got to do.

    But be careful, if you are not sure what to do, just leave it be, sooner or later MS will come out with some sort of patch to fix that issue you're having.

     

    Monday, April 2, 2007 3:41 PM
  • To open regedit, click on windows logo, then at start search type regedit, it will open up the Registry Editor window, press together (Ctrl + F), find window opens up, and then at find what box type Internet Connection Wizard hit enter, then do what you got to do.

    But be careful, if you are not sure what to do, just leave it be, sooner or later MS will come out with some sort of patch to fix that issue you're having.

     

    Monday, April 2, 2007 4:09 PM
  • i located that it is linked to msn messenger. Still trying to figure why it runs the process
    Monday, April 2, 2007 5:27 PM
  •  

    Post the rundll32 command line so we can see the parameters. That should tell us what its doing.

    Thursday, April 5, 2007 3:09 PM
  • apparently its not just msn messenger, but everything that connects to the net. I use a local proxy program, maybe its that?

     

    this is the command line that runs, most times is runs several copies, and hogs the processor to a crawl:

     

    rundll32.exe "C:\Windows\system32\WININET.dll",DispatchAPICall 1

    Saturday, April 14, 2007 6:32 PM
  • i've managed to duplicate how it occurs. Open Internet Explorer > Tools > Internet Options > then change any settings > click OK

     

    it seems to run the process everytime:

    rundll32.exe "C:\Windows\system32\WININET.dll",DispatchAPICall 1

     

    anyone out there know what is wrong? Microsoft, help!

    Saturday, April 14, 2007 7:00 PM
  • i forgot to mention: after your change any settings in the internet options, you need to run something that will access the net, like open a webpage, and then the process will launch several instances and sap up the cpu to 100%
    Saturday, April 14, 2007 7:04 PM
  •  

    Have you tried setting the registry key I mentioned in a previous post? That key seems to be one of the ones that are hit when the connection wizard runs.

    Sunday, April 15, 2007 1:26 AM
  • yes, definitely tried it (HKEY_CURRENT_USER\Software\Microsoft\Internet Connection Wizard - Set Completed to 1), and it didnt do anything for me.

     

    did you try the steps i listed? happens consistently for me if i do those steps

    Sunday, April 15, 2007 6:21 PM
  •  

    No I didn't try the other steps you listed because I have already resolved this issue on my end.

     

    If I were you I would run regmon from sysinternals and look at the keys that may have something to do with ICW. Once windows doesn't think you need to run ICW anymore I think your issue will go away.

     

    Hope this helps..

    Sunday, April 15, 2007 8:28 PM
  • "regsvr /u lmpgspl.ax" - from the "start search" box in vista tries to unregister it but an error code appears. error code 0x80070005

    It is my guess that vista will not allow me to unregister it unless I run it with administrator privelages. Vista is pretty secure for now. Even if you are logged in as the administrator you still have to run some apps by right clicking the icon and choosing to run as admin. I'll continue to work on this. 1010001

    Thursday, April 19, 2007 6:37 AM
  • I was right you have to run as administrator to unregister lmpgspl.ax. Here are the steps:

         1. From the start search box in vista type "cmd" to bring up the command line icon

         2. right click this icon

         3. choose run as administrator

         4. the command line will open with administrator privilages(it should look like "c:\windows\system32")

         5. then type "regsvr32 /u lmpgspl.ax"

         6. hit enter and it should verify that it is unregistered

    Thursday, April 19, 2007 7:02 AM
  •  

    I do not know if this issue relates to your issue when running Windows new OS Vista or not but I'll mention it just as something to check out...  I am running Windows xp home edition upgrade and my Windows Media player 11's video is kind of "jerking" as it plays and the repeat function is not working much of the time.  I am wondering if I loaded the 64 bit player instead of the 32 bit player, as I discovered by compliments of Circuit City today that my OS is the 32 bit.

     

    Hey, how are the operations of Vista?  I mean like, if you command the Computer to do something does it do it?  I have two OS's 98se and xp home and there are a few commands "Electrolla" (my Computer) refuses to do in either of the two OS's.  A frind of mine that is adept with Computers says the best operating system available to date is Windows 2000, he says with 2000 you ask the Computer to do someting and it does it, no questions asked!  He should know too, he was the Chief programs analyst for the big CPU's at B of A for years!  Unfortuniately Computers and accessories are not the only things getting more affordable!

     

    You might try uninstalling the rundll32 and then re-installing it.  If I get anything more definite I'll try to transmit you a note.

     

    Greg-ory.

    Monday, April 23, 2007 1:59 AM
  • There are a number of possible solutions to this problem, and the right solution depends greatly on what software is actually causing the problem. Some of the most well-known problem causing softwares are DivX and Nero, but there are others that cause the problem as well.

    Possible Solutions

    • If you are using DivX, you should be upgraded to the very latest version (6.5+)
    • If you are using Nero, you can try upgrading to the latest version (7.7.5.1+)
    • If you’ve upgraded Nero and Divx and still have the problem, you can try renaming the file C:\Program Files\Common Files\Ahead\DSFilter\NeVideo.ax to NeVideo.ax.bak.  You may also need to rename NeVideoHD.ax to NeVideoHD.bak
      This will break Nero Showtime, however. (thanks to dugi in the comments for this one)
    • You can disable Thumbnail previews, which should make the problem go away, but isn’t the optimal solution.
    • The older ffdshow codec pack has been known to cause some problems. The ffdshow tryouts codec pack seems to work better. Might want to try using this one:  http://ffdshow-tryout.sourceforge.net/
    • There’s another possible solution below of turning off DEP for dllhost, which might not work for everybody. You may have to add divx+nero executables to the DEP ignore list.
    Wednesday, May 23, 2007 1:51 AM
  • My problem started when using a Movie Maker (by Magix) with Windows Vista.

    I tried runing the cmd and getting rid of the binary but I also got the problem 0x80070005....

    So,

    I went to http://www.securitystronghold.com/enc/Rundll32-Rundll32.exe-problem-solution-6306.php

    and downloaded the program TRUE SWORD to get rid of rundl32.

    It didn't work immediately. I'm waiting for a response from the customer service

     

    Monday, May 28, 2007 6:53 PM
  • same problem.
    rundll32.exe "C:\Windows\system32\wininet.dll",DispatchAPICall 1 loads cpu 100%
    i have to kill this process, which can be child of some process using network (f.e. sidebar.exe)
    HKEY_CURRENT_USER\Software\Microsoft\Internet Connection Wizard\Completed is 1
    Tuesday, May 29, 2007 9:37 PM
  • Mine is already set to (1) What Next???
    Saturday, July 14, 2007 7:56 PM
  • Problem Event Name: APPCRASH
    Application Name: wmplayer.exe
    Application Version: 11.0.6000.6336
    Application Timestamp: 46a16548
    Fault Module Name: kernel32.dll
    Fault Module Version: 6.0.6000.16386
    Fault Module Timestamp: 4549bd80
    Exception Code: c0000005
    Exception Offset: 000494c4
    OS Version: 6.0.6000.2.0.0.256.1
    Locale ID: 1033
    Additional Information 1: 1171
    Additional Information 2: 12bb25806a6af29c4ccacb639b7ba26e
    Additional Information 3: 312e
    Additional Information 4: 169abe2d99b8f4854dd97eba335ff498
      


    how do u fix this problem and this sux i cant do anything

    Sunday, September 9, 2007 8:07 PM
  •  

    I have the exact same problem as old computer gen 'cept of course local id is different as well as

    additional info 3 & 4 as follows ....

     

    Problem Event Name: APPCRASH

    Application Name: wmplayer.exe

    Application Version: 11.0.6000.6344

    Application Timestamp: 46e5f12e

    Fault Module Name: kernel32.dll

    Fault Module Version: 6.0.6000.16386

    Fault Module Timestamp: 4549bd80

    Exception Code: c0000005

    Exception Offset: 000494c4

    OS Version: 6.0.6000.2.0.0.256.1

    Locale ID: 3081

    Additional Information 1: 1171

    Additional Information 2: 12bb25806a6af29c4ccacb639b7ba26e

    Additional Information 3: 5bee

    Additional Information 4: 5affbbc003a099bc09e613eacd87f746

     

    further, i also have media center installed on the same Vista32 ultimate machine which just hangs.

    If someone has come across this problem & fixed it, a reply post would be greatly appreciated.

     

    cheers

    Friday, December 7, 2007 2:43 PM
  •  old computer gen wrote:
    Problem Event Name: APPCRASH
    Application Name: wmplayer.exe
    Application Version: 11.0.6000.6336
    Application Timestamp: 46a16548
    Fault Module Name: kernel32.dll
    Fault Module Version: 6.0.6000.16386
    Fault Module Timestamp: 4549bd80
    Exception Code: c0000005
    Exception Offset: 000494c4
    OS Version: 6.0.6000.2.0.0.256.1
    Locale ID: 1033
    Additional Information 1: 1171
    Additional Information 2: 12bb25806a6af29c4ccacb639b7ba26e
    Additional Information 3: 312e
    Additional Information 4: 169abe2d99b8f4854dd97eba335ff498
      


    how do u fix this problem and this sux i cant do anything

     

     

    I found a fix here ...

     

    http://forums.microsoft.com/technet/showpost.aspx?postid=1692831&siteid=17&sb=0&d=1&at=7&ft=11&tf=0&pageid=2

     

    it worked for me, hope it helps, don't forget to run as admin

     

    cheers

    Friday, December 7, 2007 3:29 PM
  • It is not the problem with media player rather the videos u r playing . If any one of them causing problem this error occurs .Please try after deleting  all videos  from the respective drive

     

     

    Monday, December 17, 2007 6:59 PM
  • can somebody help me
    Friday, October 10, 2008 12:49 PM
  • I have the same problem, it won't let me unregister it then I get the same error code.  This isn't happening in media player though it's happening in movie maker when I try to publish a DVD...
    Friday, November 7, 2008 4:26 AM
  • I was having the same problem as Sam5822 and ColinJJones. It happened every time I clicked on or played a WMP video. It would show up once or twice when I clicked a video file, and show up again when I would try to play the video. After closing out of the message, the video would play fine. A balloon would tell me that Data Execution Prevention was closing the Rundll32.exe program, and directed me to a screen to exempt the file from being closed (System> Advanced System Settings> Advanced> Performance> Settings> Data Execution Prevention). It had "Turn on DEP for essential Windows programs and services only" and I changed it to "Turn on DEP for all programs and services except those I select." The only two options were "Windows host process (Rundll32)" and "Windows Media Player," so I selected them both. Then, I moved 4 or 5 videos to my desktop and tried to play one.

    The messages started coming so quickly that it overwhelmed my computer (and me); in 30 seconds I could get as many as 20 or 25 messages. To make matters worse, about every 5 "Rundll32" message screens, Windows would shut down Windows Explorer, making it nearly impossible to go back to the DEP settings screen. I tried troubleshooting on my laptop, and found a suggestion here to run the Windows Malware Removal Tool, which I started, but was taking a very long time and only making it harder to move around my screen. I manually shut down my computer with the power button and started it back up in Safe Mode. The windows kept coming, but slower, and I could move more fluidly and quickly, so I was able to access the DEP settings screen and change it back, and they stopped. Not only that, but when I went to open the video files, the Rundll32.exe screen didn't show up at all, so it was better than I had started out. I restarted it back into the normal startup mode, and reran the MRT in full scan. It found exactly 1 virus: Trojan:JS/Hilotl.C. After that, I ran the full McAfee scan, and found nothing of importance.

    The messages have shown up again, but given me very little trouble. Since the instance, the message has appeared two or three more times, but not when I was trying to access the videos, and each at a separate time that simply required closing out or hitting OK; at this writing, I haven't seen the message since last night (this all happened yesterday). Could that virus be the culprit? Or was it just coincidence that I found this virus and Windows simply got "stuck in a rut" or something and started punching itself in the face?

    Monday, August 15, 2011 7:19 PM