Computer Support Forum

Multiple Google Chrome Processes in Task Manager; Cannot close and laptop slow

Question: Multiple Google Chrome Processes in Task Manager; Cannot close and laptop slow

Hello there,
 
I recently noticed my laptop running very slow, especially when using Youtube videos.  I deleted some old junk to free up some memory but that didn't help.  Defragged my laptop and ran several virus scans, but no improvment and nothing found on the scans.  I found a new program installed on my laptop called "Spigot Search Protection" which I uninstalled.  No improvement after this.  I then noticed about a dozen processes running on my Task Manager that appeared to be Google Chrome windows.  They were using up a ton of memory... and I use Firefox not chrome so I thought it was weird.  I uninstalled Google chrome, but they remained open and listed as google chrome programs.  I opened the file location and ran a virus scan directly, and it came back with no threats detected  (I ran Kaspersky). The image name for each process that is running is Lnzdypqnuf.exe*32 and appears as a GoogleChrome file.
At this time I did a Google search and came up with this website (it seems others have had the exact same problem).  I saw that each case should be handled specifically, so I decided to register and post instead of trying to figure it out myself. 
 
If anyone can assist me with getting rid of this problem I would greatly appreciate it.  I have never downloaded a virus before, and do not open ads or clickbait on websites.  I do use Utorrent once in awhile and expect that is how I downloaded this virus.
Please help!!
 
 
 
 

Relevance 100%
Preferred Solution: Multiple Google Chrome Processes in Task Manager; Cannot close and laptop slow

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Multiple Google Chrome Processes in Task Manager; Cannot close and laptop slow

BTW, am running on Windows 7

4 more replies
Relevance 92.22%

Hello -
A customer of mine brought their personal laptop to me to look into why large amounts of data are being used up on their Verizon Hotspot.  This is a Windows 7 Home Premium laptop.  I ran multiple virus scans including ComboFix and Malwarebytes that returned zero results.  I then noticed in Task Manager that there were multiple processes running that belonged to Google Chrome.  I then verified that Chrome is not even installed.  I found the running .exe file in the \userprofile\appdata\locallow\Google directory.  Rebooted into 'Safe Mode' and then removed the folder and then scanned the registry for the same .exe name and removed them as well.  I then restarted the pc and the files reappeared, this time in the Adobe directory rather than Google.  I repeated the steps above with the same results.  Would you please help me with removing this virus?  Thank you.

Answer:Fake Google Chrome Running Multiple Processes in Task Manager

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
 
Please download the latest version of Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy a... Read more

10 more replies
Relevance 79.46%

When I restart from Sleep, I have windows open that look like a browser with various ads in them. I looked in my task manager and saw a number of Chrome processes named Wgvsgnxdj.exe *32 that use about 20% of the CPU. When I end the processes, they restart on their own. The processes are all located in the AppData/LocalLow/Adobe/zqjpwqzm folder.

Can you please help me out? I have scanned with MalwareBytes, MaAfee, SpyBot 2, and tdsskiller. None of these have found anything.

I have attached FRST scan logs.

Thank You!
 

Answer:Fake Google Chrome Processes in Task Manager

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

4 more replies
Relevance 79.46%

I have a Windows 7 Lenovo laptop that is running very slow.  I ran virus scans, including Malwarebytes that returned zero results.  I have noticed in Task Manager that there are several processes running with a description of "Google Chrome". 
 
The exe file is in the \userprofile\appdata\locallow\Sun\ folder. This exe cannot be deleted since there is a lock on it. Even if I kill the processes from Task Manager, they regenerate faster than I can delete.
 
Would you please help me with removing this virus?  Thank you.

Answer:Fake Google Chrome processes in Task Manager

Hi. Please do the following:
Download Farbar Recovery Scan Tool and save it to your desktop. http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/Note: please pick the version that matches your operating system's bit type. If you don't know which version matches your system, take a look at this link: http://www.bleepingcomputer.com/tutorials/32-bit-or-64-bit-windows/
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

7 more replies
Relevance 79.46%

Hello, I've seen a few topics relating to my problem but wasn't sure if the steps are exactly the same for each person or if they are customized from problem to problem.
 
I'm running windows 7 and as other users have stated, my computer was running slowly, freezing up periodically and minimizing programs I was using. I checked task manager and at that time I saw many dllhost with description COM surrogate running, and trying to end the processes they just kept appearing again. At that time I had AVG as my antivirus and malwarebytes. Only AVG detected the file but it could not delete it. I then uninstalled AVG and changed my antivirus to Bitdefender and that seemed to have stifled the symptoms although I don't believe it ever fixed the problem. My computer was running smoothly for about a week and now I have a filename uirrvmzweu.exe with description google chrome. My computer symptoms are about the same as they were when the dllhost process was running. They both act very similar as far as I can see.
 
Any help would be much appreciated, thank you.

Answer:COM Surrogate and google chrome processes in task manager

Welcome njsLets start with this ...Step 1Please download Powelikscleaner (by ESET) and save it to your Desktop.Double-click ESETPoweliksCleaner.exe to start the tool.Read the terms of the End-user license agreement and click Agree if you agree to them.The tool will run automatically. If the cleaner finds a Poweliks infection, press the Y key on your keyboard to remove it.If Poweliks was detected "Win32/Poweliks was successfully removed from your system" will be displayed. Press any key to exit the tool and reboot your PC.The tool will produce a log in the same directory the tool was run from.Please copy and paste the log in your next reply.Next run Autoruns.Please download AutoRuns and save it to your desktop.Right click on the downloaded file and choose Extract All Files.Once extracted, open the program named Autoruns.Click on Options and then Hide Microsoft and Windows Entries.Press F5 to refresh the startup list.Next go to File -> Save and choose the file type to Text File (.txt).Please attach the text file to your next reply.

15 more replies
Relevance 77.72%

A fake Google chrome file and dllhost.exe 32 file keeps spamming my task manager. I downloaded the real "Google chrome" from Google so I could use the "Google chrome task manager" to get rid of it but it didn't work. I turned my thumbnail preview off and I haven't seen dllhost.exe 32* since but I'm not sure if its completely takin care of that problem. My temporary fix for the fake Google Chrome file right now is when it starts spamming my task manager I right-click on it> open file location> start logging off and when the force shutdown menu appears I click cancel. For some reason it completely vanishes from my task manager for a couple seconds when I start logging off. Then I go back to my "open file location" and quickly delete the file before it starts back up. This stops it from spamming me but I have to do it every time I get on my computer. Still looking for a permanent solution for it.
 

Answer:Fake Google Chrome file spamming my processes in task manager

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

5 more replies
Relevance 77.72%

Strider said:


A fake Google chrome file and dllhost.exe 32 file keeps spamming my task manager. I downloaded the real "Google chrome" from Google so I could use the "Google chrome task manager" to get rid of it but it didn't work. I turned my thumbnail preview off and I haven't seen dllhost.exe 32* since but I'm not sure if its completely takin care of that problem. My temporary fix for the fake Google Chrome file right now is when it starts spamming my task manager I right-click on it> open file location> start logging off and when the force shutdown menu appears I click cancel. For some reason it completely vanishes from my task manager for a couple seconds when I start logging off. Then I go back to my "open file location" and quickly delete the file before it starts back up. This stops it from spamming me but I have to do it every time I get on my computer. Still looking for a permanent solution for it.Click to expand...

I had the same issue. Hopefully you can help. File attached. The google chrome process was called "Eskuyiyifxt.exe*32"
 

Answer:Fake Google Chrome file spamming my processes in task manager

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

3 more replies
Relevance 75.98%

Infections date probably on 10/26/2014. Fake google chrome processes (a lot of them) are running in the task manager, hogging memory and CPU. Computer is slow.

The process name is listed as Mjjckmsq.exe *32 in task manager, and is running from the location....
C:\Users\USERNAME\AppData\LocalLow\EmieUserList\Uuiputi\fzsdleeocr
.....as mentioned by task manager when I right-click on the process and ask to open file location.

This EmieUserList is a hidden folder and is not visible in the LocalLow folder even if I enable the "show hidden files and folders" option.

I have run the Farbar Recovery scan tool and have attached the results with this post.

Please let me know if there is anything else I can do to help solve this problem.
 

Answer:Fake Google Chrome processes named Mjjckmsq.exe *32 in task manager slowing computer down

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

7 more replies
Relevance 75.98%

The process name is listed as wgjbmmc.exe *32 in task manager.
When I 'Open file location' it is located at...
C:\Users\USERNAME\AppData\LocalLow\EmieUserList\pgngpdf\zhgekhrmttku

I attached the FRST results files.

Thank you
 

Answer:Fake Google Chrome processes named wgjbmmc.exe *32 in task manager slowing computer down

Hello.
Uninstall Microsoft Security Essentials

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
Code:

Start
HKU\S-1-5-21-2545292765-1230149573-3276927781-1001\Software\Classes\.exe: => <===== ATTENTION!
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2545292765-1230149573-3276927781-1001\...\Run: [Wkudeas] => regsvr32.exe /s "C:\Users\Jeff\AppData\Local\{CB212118-3492-4DED-963D-DAB6283A1E07}\Wkudeas.dll" <===== ATTENTION
HKU\S-1-5-21-2545292765-1230149573-3276927781-1001\...\MountPoints2: {08c6c7e4-0e4a-11e0-9774-96bca1c77bb5} - G:\setup.exe -a
HKU\S-1-5-21-2545292765-1230149573-3276927781-1001\...\MountPoints2: {e5848bdb-fdad-11e1-8325-8bf135db7bca} - G:\setup.exe -a
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {C69147BC-0DE3-470F-9D13-13BFFC7C77BA} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {C69147BC-0DE3-470F-9D13-13BFFC7C77BA} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpl
EmptyTemp:
End

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It's important that bo... Read more

8 more replies
Relevance 75.98%

Basically every time i start up chrome about 5-8 other chrome.exe 32s appear. 
Side note: its only doing it in chrome, i tried opening internet explorer and no .exe appeared in my task manager. 
They are slowing my browser massively, any help will be greatly appreciated.  

Answer:Multiple Google chrome .exe 32 in task manager

Why Does Chrome Have So Many Open Processes

10 more replies
Relevance 104.96%

hello I have been playing with this multiple google chrome processes in task manager past few days it is malware but haven't been successful in removing it I have traced file to multiple disguised fake folders it created saved the location in note pad and booted computer in safe mode deleted the folder only to have it reappear in a new folder it created.  done this three times before investigating more on line about the issue. if im understanding correctly it requires a more practiced hand than my own to fully remove it I will post a farbar txt of its findings in this chat and if anyone is available to walk me through how to remove it I would greatly appreciate your time and help I hate  to say this but I really admire this one normally I can handle basic malware but this is really out of my league
I work during the day Monday through Friday 8 to 5 so any time during evenings or weekends I can really spend time and get this removed with a practiced hand
sincerely
EvilAxis
 
this is the current paths the infected folders took while I vainly tried to remove it doing the find folder reboot in  safemode and delete its  made quite a journey and is really a amazing little bug
 
1st attempt original location    C:\Users\Jason\AppData\LocalLow\AVG SafeGuard toolbar\Iqlhknlcn\Dyzpbxtjfb
 
jumped after safe mode delete and reboot
 
2nd  location          ... Read more

Answer:Multiple google chrome found in task manager on computer

Hi there,my name is Marius and I will assist you with your malware related problems.Before we move on, please read the following points carefully.First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while following my instructions, Stop there and tell me the exact nature of your problem.Do not run any other scans without instruction or add/remove software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Important: To help me reviewing your logs, please post them in code boxes. You can create them by clicking on the <>-symbol on top of the reply window.  Please post the addition.txt as well.

5 more replies
Relevance 104.55%

Good Evening All,

So my Dell Latitude D510 has slowed to a crawl once again. The Task Manager shows Google Chrome has eight uses happening, yet only the one window's open. Then the Manager shows six svchost.exe running. Any help is very much appreciated.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows XP Professional, Service Pack 3, 32 bit
Processor: Intel(R) Celeron(R) M processor 1.50GHz, x86 Family 6 Model 13 Stepping 8
Processor Count: 1
RAM: 1271 Mb
Graphics Card: Mobile Intel(R) 915GM/GMS,910GML Express Chipset Family, 128 Mb
Hard Drives: C: Total - 38146 MB, Free - 17675 MB;
Motherboard: Dell Inc., 0N8829
Antivirus: Microsoft Security Essentials, Updated: Yes, On-Demand Scanner: Enabled
Brian
 

Answer:Laptop Slowed to a Crawl, Task Manager Shows Multiple Processes in Use

16 more replies
Relevance 102.09%

Multiple Fake Google Chrome Processed are running on laptop. See multiple similar threads. Ran FRST and have provided logs. Any assistance would be greatly appreciated!
 

Answer:Multiple Fake Google Chrome Processes Running on Laptop

Uninstall Ask Toolbar.
1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Code:

Start
HKLM-x32\...\Run: [DATAMNGR] => C:\Program Files (x86)\BearShare Applications\MediaBar\Datamngr\datamngrUI.exe [1693800 2012-03-04] (MusicLab, LLC)
C:\Program Files (x86)\BearShare Applications\MediaBar
HKLM-x32\...\Run: [ApnUpdater] => "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
C:\Program Files (x86)\Ask.com
HKLM-x32\...\Run: [] => [X]
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-21-4192403223-262647996-3079662322-1000\...\Run: [Xjdzilqlbnw] => regsvr32.exe /s "C:\Users\Jane\AppData\Local\{692D8DB2-29A3-41AE-92B9-083ADAB4A61B}\Xjdzilqlbnw.dll" <===== ATTENTION
C:\Users\Jane\AppData\Local\{692D8DB2-29A3-41AE-92B9-083ADAB4A61B}
AppInit_DLLs: C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\x64\datamngr.dll => C:\Program Files (x86)\BearShare Applications\MediaBar\Datamngr\x64\datamngr.dll [1778608 2012-03-04] (MusicLab, LLC)
C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\x64
AppInit_DLLs: C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\x64\IEBHO.dll => C:\Program Files (x86)\BearShare Applications\MediaBar\Datamngr... Read more

4 more replies
Relevance 100.86%

I will open a program, close it, and then when i try to open it again a message appears saying that an existance of it is still running. When i look at my processes i see that it is in fact But when i try to "end Process" it does not close. The warning pops up, i say yes, and yet it does nothing. I can not seem to close these programs. And this causes shuting down to take up to 15-20 min unless i force a shut down. The problem has occured with Opera.exe CCAPP.exe outlook.exe and maybe more. Please help thanks!
 

Answer:HELP Task Manager wont close certain processes. End Task does nothing!

http://www.softtreetech.com/24x7/archive/49.htm
 

5 more replies
Relevance 95.53%

Hello,
 
I'm trying to repair my parents computer. They were getting Trojan horse warning messages and crashing to blue screens. So far I have updated the BIOS and uninstalled all the browser addons and questionable apps I found on there PC. Since updating the BIOS it hasn't crashed to blue screen. However I'm getting a lot of lywqyjla.exe processes that say they belong to Google Chrome. I uninstalled Google Chrome and they are still there. Each of them is using varying amounts of memory and the CPU usage keeps spiking. I have run malware bytes and adw cleaner, each of them said they found and removed threats but these processes keep showing up.

Answer:Multiple Google Chrome processes running even though I uninstalled Google Chrome

Welcome to BC !
 
Run a scan using RKill. Read its description as to what it does. Once you have successfully run the scan, DO NOT reboot.
Proceed with the other scans. Reboot if the MBAM or other scans ask you to.
RKill Download
 
Download Malwarebytes' Anti-Malware from Here
Double-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).
Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.
Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.
Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.
Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.
If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).
The scan may take some time to finish,so please be patient.
If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.
While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.
The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then... Read more

1 more replies
Relevance 94.71%

OS: Windows 7 Home Premium SP1
 
Avast antivirus keeps popping up with a message that it has shielded my computer from an executable file named yogozjvdaoeg.exe 
I have searched online for references to this, and cannot find a thing.
 
Chrome had also begun launching itself randomly. 
I went into Task Manager and discovered 12 instances of this file running, with a reference to Google Chrome.  I tried ending these processes, and for every one I ended, another one (or more) would start immediately.  
I have uninstalled Google Chrome, and still these processes are running, with no way to end them. 
I tried using Taskkill, but again, for every instance killed, a whole new set would start up immediately.
 
I went to the file location (see image) and tried manually deleting it, but it states that Chrome is running, so it cannot be deleted.  Chrome is not running, it has been uninstalled.

 
Is this a Chrome thing, or could it be malware?  I ran Malwarebytes, and it did not find anything.
 
Thank you for any help you can give.
 

Answer:Cannot end processes in Task Manager; Chrome related

Hi jbhere and
 
yogozjvdaoeg.exe
Upload here - https://www.virustotal.com/en/
Post link of result.
 
Thank you!

5 more replies
Relevance 93.89%

My laptop runs slower than usual and is creating new folders in weird places. I did notice task manager processes for chrome and did an online search to find a few connected to fake processes like
programdata\ntuser.pol and programdata\Roaming and windows\XSxS.

I ran MGlogs and attached the zip that was one my desktop after it completed.
 

Answer:Task Manager Shows Fake Chrome Processes

Can you upload all of the other requested logs please?

I will post to procedures for your reference.

READ & RUN ME FIRST - Malware Removal Guide
 

10 more replies
Relevance 93.89%

My computer was running slow so I went to my task manager and seen a whole bunch of Google Chrome processes running. I was confused at first because I don't even have Google Chrome installed. As I tried to stop the processes one at a time, more only popped up. Then I looked it up on the net, found others yall have helped on this site, and know there's something wrong. If possible, would like to know how and when the malware was installed as I have multiple students that use the pc and this is the first time ever had this happen, would like to know if it was a user doing something wrong by accident or on purpose (is even possible to know, but mainly would like to just get pc fixed!)

I right clicked and Disabled Antivirus AutoDetect (Norton); Downloaded zoek and have result log attached. Required a pc reboot and did that too. Problem is still happening. It also changed my home page to google.com (I changed it back). I also uploaded a picture of my task manager if that helps any.

Thanks!!!
 

Answer:Fake Google Chrome Process in Task Manager & Don't Even Have Google Chrome Installed!

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

6 more replies
Relevance 93.89%

Hi TwinHeadedEagle,
I have almost exactly the same problem running on my computer. I have run zoek, malwarebytes, and AdwCleaner and I still have the problem. Rather than create a new post in the forum I have just replied to this post since it seems so similar. I have now run Farbar and have attached the two logs. I also included a pic of my task manager showing the processes that keep loading. Can you help me? Thank you!
 

Answer:Fake Google Chrome Process in Task Manager & Don't Even Have Google Chrome Installed!

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

3 more replies
Relevance 93.48%

I recently downloaded and installed a PDF to JPG converter and this seems to be when my problems began. Some of the pop-ups are video/audio, others are trying to get me to click to remove viruses, etc.

Can anyone help with this? Help!

MMyers
 

Answer:Multiple processes with *32 in task manager and getting pop-ups adware

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Administrator (administrator) on WINDOWS-D9P51W1 on 18-03-2015 19:50:49
Running from C:\Users\Administrator\Downloads
Loaded Profiles: Administrator (Available profiles: Administrator)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Fitbit, Inc.) C:\Program Files (x86)\Fitbit Connect\FitbitConnectService.exe
(IBM) C:\IBM\Lotus\Notes\nsd.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\VirusScan Enterprise\x64\engineserver.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\Common Framework\FrameworkServ... Read more

57 more replies
Relevance 93.48%

I have a Dell with windows xp and it is running very slowly after startup i looked in task manager and found numerous explorer.exe and iexplorer.exe process using alot of memory. I have been looking on the internet and found there is a virus that causes this........ please help in making my computer fast again. thank you in advance
 
I keep getting a message saying windows explorer need to shutdown.

Answer:multiple explorer.exe processes in task manager

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/510565 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

6 more replies
Relevance 93.48%

Hi

I have multiple ie running in task manager which takeup a lot of memory, I can ave atleast 20 IE processes running at a time. It runs when Im not connected to the net, they run when I have one ie window open and some ad exoclick site keps trying to install itself onto m machine. Iv scanned with Mcafee's updated software and found nothing. I scanned with webroot spysweeper 4.0.3 and got a lot of cookies removed, a bit of adware and thats it. having searched on google im inclined to believe I have spam, malware or adware. One of the sites told me to delete all my *.tmp files, but im worried some might be necessary, and those in c:\windows\temp 2 could not be removed. Regardless, nothing has worked. I still get the exoclick.com trying to install and the millions of IEs. Is there a way can fix this once an for all. Webroot is not updated as my subscription has expired but it sent me this log:

Edit: removed and attached inline webroot log

Please help
 

Answer:Multiple Ie processes running in task manager

Welcome to Majorgeeks!

Please follow the instructions in the below link and attach the requested logs when you finish these instructions.

READ & RUN ME FIRST. Malware Removal Guide
 

1 more replies
Relevance 93.48%

Hello all wonderful people... I have some unexpected trouble with my computer. I run a Dell Inspiron 510m on Windows XP professional. Recently I noticed in task manager that there are several iexeplore.exe processes running, and when I tried to kill the 'spare' ones, they would not budge, or kill the main browser window but the spares remain. I have Panda Cloud Antivirus. I installed A-Squared anti malware and ran the full scan, it found some things and I remowed all the threats it found. However, the multiple iexplore processes continued... I ran a full scan with Malwarebytes Antimalware and it also found a few threats, which I also removed as the software instructed. However, stilll the multiple processes remain... I just did a DDS log, and I will attach the attach txt file. GMER froze on me... DDS (Ver_10-03-17.01) - NTFSx86 Run by STSTAdmin at 14:32:58.25 on 09/06/2010Internet Explorer: 8.0.6001.18702Microsoft Windows XP Professional 5.1.2600.3.1252.44.1033.18.510.128 [GMT 3:00]AV: Panda Cloud Antivirus *On-access scanning enabled* (Updated) {5AD27692-540A-464E-B625-78275FA38393}AV: Emsisoft Anti-Malware *On-access scanning enabled* (Updated) {0F8591BB-342B-4493-91C3-4E948ED21255}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wi... Read more

Answer:Multiple iexplore.exe processes in task manager

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

16 more replies
Relevance 93.48%

It started with this, and has progressed to me posting here. I don't mean to be lazy, but I thought that maybe it would be easier if you could see the link where I talked about what's been going on.DDS (Ver_09-07-30.01) - NTFSx86 Run by Joann Boyle at 20:51:39.67 on Mon 09/21/2009Internet Explorer: 8.0.6001.18702Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.767.436 [GMT -4:00]AV: avast! antivirus 4.8.1351 [VPS 090921-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupsvchost.exeC:\WINDOWS\Explorer.EXEsvchost.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exeC:\Program Files\ScanSoft\PaperPort\pptd40nt.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\WINDOWS\system32\ctfmon.exeC:\WINDOWS\system32\WTablet\TabUserW.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\WINDOWS\System32\... Read more

Answer:Possible infection, though I'm not sure of what - multiple IE processes in Task Manager

I know I'm not supposed to bump, I apologize - I know you're all working very hard right now.

I was just wondering if whatever this is poses a personal threat - we use this computer to access bank accounts, and I was unsure as to whether or not it was safe to continue doing so. I have not accessed my bank account on this computer since the day this actually happened, but I'm holding my breath for when my mom wants to access the cradit union site.

Thanks guys, and I apologize again. *is a bad poster*

10 more replies
Relevance 93.48%

Hi guys I was searching for info on this process and found these forums so here's my problem:
After using IE and getting some error that called up windows help and services center I noticed later that i have a bunch of mshta.exe running in my task manager so I downloaded that HJT program and got this:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:42:12 PM, on 11/7/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\System32\igfxpers.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\mshta.exe
C:\WINDOWS\System32\mshta.exe
C:\WINDOWS\System32\mshta.exe
C:\WINDOWS\System32\mshta.exe
C:\WINDOWS\System32\mshta.exe
C:\Program Files\Kasper... Read more

Answer:Multiple mshta.exe processes in my task manager

Delete any existing version of ComboFix you have sitting on your desktop
Please read and follow all these instructions very carefully​
Download ComboFix from Here or Hereto your Desktop.
As you download it rename it to username123.exe
**Note: It is important that it is saved directly to your desktop and run from the desktop and not any other folder on your computer**
--------------------------------------------------------------------
1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Very Important! Temporarily disable your anti-virus and anti-malware real-time protection and any script blocking components of them or your firewall before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results" or stop combofix running at all
Click on THIS LINK to see instructions on how to temporarily disable many security programs while running combofix. The list does not cover every program. If yours is not listed and you don't know how to disable it, please ask.
Remember to re enable the protection again after combofix has finished
--------------------------------------------------------------------
2. Close any open browsers and any other programs you might have running
Double click on combofix.exe & follow the prompts.​If you are using windows XP It might display a pop up saying that "Recovery console is not inst... Read more

3 more replies
Relevance 92.25%

I noticed recently when browsing through my system's task manager that multiple instances of iexplore.exe are running - even when I have not opened any internet explorer windows. Every 5-10 minutes, a new iexplore.exe instance appears in the task manager. Even if I end the process, more and more will show up - ad infinitum until my laptop overheats and goes to auto shutdown. I have run virus scans (norton antivirus), adware scans (adaware & spybot) and malware scans (a-squared) and have removed any threats that are detected, but the problem still remains. I hope someone is able to diagnose and fix the problem. Thanks in advance. I really appreciate your time and support. Here is my HijackThis Log:Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:03:43 AM, on 6/19/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\Explorer.EXE
C:\Program Files\Symantec AntiVirus\SmcGui.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program F... Read more

Answer:Multiple Iexplore.exe Processes Running In Task Manager

Hello dadrivrWelcome to BleepingComputer ========================If you are still in need of assistance please post a new Hijackthis log.

7 more replies
Relevance 92.25%

I noticed recently when browsing through my system's task manager that multiple instances of iexplore.exe are running - even when I have not opened any internet explorer windows. Every 5-10 minutes, a new iexplore.exe instance appears in the task manager. Even if I end the process, more and more will show up - ad infinitum until my laptop overheats and auto shutsdown. I originally posted this in the hijackthis log forum section, but they determined that it was a hardware issue rather than a malware issue (http://www.bleepingcomputer.com/forums/topic153073.html), so they redirected me to this forum section. I hope someone is able to diagnose and fix the problem. Thanks in advance. I really appreciate your time and support.

Answer:Multiple Iexplore.exe Processes Running In Task Manager

shut down or delete IE and try firefox,,, see if this works.

18 more replies
Relevance 91.43%

I will encounter issues every few days where I cannot access eMail accounts, and several applications as well. I receive IE is not working notifications incessantly along with webpages not responding popups, Another issue (which seems to be a precursor to having to reboot/restart)  is that there is significant (4-5 seconds) system activity AFTER closing/shutting down a webpage or application.  Each time this happens and I go to Task Manager / Processes, there will be 12-15 instances of "rundll32.exe" !!!!!
I have run MalwareBytes Anti-Malware, AVAST and others and nothing is found. 
I have run sfc /scannow and other investigative apps and nothing was found.
When I reboot / restart, all is well for a day or so.
Running Windows 7 SP1.
 
Any and all input appreciated.
 
 
 
 

Answer:Multiple "rundll32" entries in Task Manager Processes list

1.  Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 
2.  Please download and install Speccy to provide us with information about your computer.  Clicking on this link will automatically initiate the download.  

 
When Speccy opens you will see a screen similar to the one below.
 

 
Click on File which is outlined in red in the screen above, and then click on Publish Snapshot.
 
The following screen will appear, click on Yes.
 

 
The following screen will appear, click on Copy to Clipboard.
 

 
In your next post right click inside the Reply to Topic box, then click on Paste.  This will load a link to the Speccy log.
 
Louis

10 more replies
Relevance 91.02%

This problem is eating up my CPU and I am unable to do the things I want to do. Plus I dont even have Google Chrome installed on my computer...
 

Answer:Multiple Google Chrome Processes

Hello,

http://malwaretips.com/threads/preparation-guide-before-requesting-malware-removal-help.20334/
 

1 more replies
Relevance 91.02%

Initial symptoms started this morning. Have tried various methods to remove, but to no avail. I have attached the FRST logs as requested. Thank you in advance for your help.
 

Answer:Multiple Google Chrome processes

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

5 more replies
Relevance 90.2%

Hi Folks!

I have a few niggley concerns regarding the running of my PC, this website looked like it has offered some sound advice to others so I thought I'd see if you kind people could do the same for me...

A few weeks ago my PC went crazy, stopped responding, task bar disappeared, couldn't get on internet... I thought I'd had a virus, but somehow I wasn't 100% convinced of this. I basically managed to get it working again by sticking in the XP disk and repairing the installation of XP. This took many goes though... and I had my suspicions about Internet Explorer 8(?), Virus scans did not pick anything up either, anyway...

Since then, internet has seemed hit and miss in terms of speed, would not go at all this morn prior to a reboot, and there are many duplicate processes in the task manager, which is something I've never noticed before.

Is there anything I can do to check my system out?

Cheers for any help and advice!

GA

Answer:Multiple processes running in task manager - internet acting strangely

The freeware programs Process Explorer and Autoruns go even deeper in showing you what processes are running. Pay attention to non-Microsoft processes, although not all non-Microsoft processes are malware. Research the processes online.
What anti-virus cleaner did you run a full scan with? Is it current?

10 more replies
Relevance 90.2%

I found the process, Browser.exe*32 running this morning and boggin down my computer. The author of the program is listed as google chrome but I don't have that installed on any computer here and can't figure out how to stop it. All of the searches I ran on that process state it is a malware virus and can be removed with a little bit of help. If anyone is familiar and could walk me through the process I would greatly appreciate it!!  Thanks,JohnEdit: Moved topic from Windows 7 to the more appropriate forum.~ Animal

Answer:Multiple Browser.exe*32 processes running in task manager slowing down computer!

Please run the following scans.  Please download AdwCleaner and install it. When AdwCleaner opens you will see an image like the one below.  Click on Scan to start the scan. Once the search is complete a list of the pending items will be displayed.  If you see any which you do not want removed, remove the check mark next to it.   Click on Clean to remove the selected items.  If you have any questions about any items in the list please copy and paste the list in your topic so we can review it.   You will receive a message telling you that all programs will be closed so that the infections can be removed.  Click on OK. When the cleaning process is complete a log of what was removed will be presented.  Please copy and the paste this log in your topic.  Please run the ESET OnlineScanThis scan takes quite a long time to run, so be prepared to have the time to allow this to run till it is completed.***Please note. If you run this scan using Internet Explorer you won't need to download the Eset Smartinstaller.***Click on this link to open ESET OnlineScan in a new window.The ESET Online Scanner page will open, click on Yes, I agree to the trems of use, then click on Start, the scan will now begine.For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.Double click on the ic... Read more

7 more replies
Relevance 90.2%

Win 7 64 bit Dell Optiplex 780. 4G RAM.
 
A few days ago the system went sideways and now I have very high (but fluctuating) CPU usage and memory usage.  Processes in Task Manager  are running wild and some are showing multiple instances where I wouldn't have expect them to be so. Using Chrome to make this post but IE repeatedly crashes and allowing the crash to search for a resolution to the problem does not produce results. Details have shown issues with various dll files. 
 
I've temporarily removed avast. Installed and run malwarebytes, adware, jrt, ccleaner. Did a scan disc. All these come back clean.
 
Thinking this is a windows issue but not sure where to start. 
 
Any thoughts?
 
Thanks,
Dawn

Answer:Win 7 64 bit; cpu usage high; processes show multiple times in task manager

Hello chasingstillness
Please start with this program.
 
Download Malwarebytes Anti-Rootkit (A.K.A. MBAR) from HERE
Open the folder where the contents were unzipped and run mbar.exe
Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
Click on the Cleanup button to remove any threats and reboot if prompted to do so.
Wait while the system shuts down and the cleanup process is performed.
Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain.
If they do, then click Cleanup once more and repeat the process.
When done, please post the two logs produced they will be in the MBAR folder..... mbar-log.txt and system-log.txt
 
Thank You

2 more replies
Relevance 89.79%

I have multiple processes on Google Chrome running in the background and almost every time I open a new tab I get re-directed to ads / virus. I've ran a lot of different program and they all come up empty so I hope you can help.
 
Here are logs from FRST:
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:22-05-2016 01
Ran by Niklas (administrator) on DESKTOP-2GDOA4M (22-05-2016 11:20:24)
Running from C:\Users\Niklas\Downloads
Loaded Profiles: Niklas (Available Profiles: Niklas)
Platform: Windows 10 Home Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Apple Inc.) C:\Pr... Read more

Answer:Multiple Google Chrome (32 bit) Processes + Pop Ups in Browser

Duplicate post.This topic will be closed.

0 more replies
Relevance 89.79%

Apparently this is going around, but I just got hit with a bunch of fake google chrome processes, and I have never downloaded, installed or used chrome. Log files attached.

Thanks in advance for the help!
 

Answer:Multiple fake google chrome processes

I also ran a scan with malwarebytes anti-rootkit. Those logs are attached. It found an instance of the poweliks Trojan, which hit me last week and I thought was gone, but maybe this is all related? After the malwarebytes scan, the bogus processes are gone right now, but I'm skeptical that all is well now. One thing I do know is maybe it's time to ditch Norton 360...
 

5 more replies
Relevance 89.79%

I noticed after a reformat (previous severe infection) that it was only a few days before my system slowed down considerably.
I went into task manager and found 10-30 google chrome processes running. I removed google chrome and anything related, restarted , deleted spyware and opened it up again.
I tried to delete the processes and process trees only to have them appear again.
I am unable to use the internet much less my gaming community.
I can also provide a screenshot if necessary.
 

Answer:multiple google chrome processes running . . . .

I need Addition.txt
 

12 more replies
Relevance 89.79%

My computer has been bogged down by multiple fake google chrome processes that keep popping up.  I downloaded and ran the FRST, below are the FRST and Addition logs.  Any help will be greatly appreciated.
 FRST.txt   44.01KB
  0 downloads
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-12-2014 01
Ran by Kentaro Abe (administrator) on GALLY on 11-12-2014 02:48:49
Running from C:\Users\Kentaro Abe\Desktop
Loaded Profile: Kentaro Abe (Available profiles: Kentaro Abe)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Lavasoft Limited) C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dell, Inc.) C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualizat... Read more

Answer:Infected with multiple google chrome processes

Hello and welcome.  Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.”  Absence of symptoms does not mean your machine is clean!Please do not run any scans or install/uninstall any applications without being directed to do so.Please note that the forum is very busy and if I don't hear from you within five days this thread will be closed.   Open notepad. Please copy the contents of the code box below. To do this highlight the contents of the box and right click on it. Paste this into the open notepad. Save it in the same location as FRST (usually your desktop) as fixlist.txtHKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1451700218-2503860457-661068883-1000\...\Run: [xwmypuchpc] => regsvr32.exe /s "C:\Users\Kentaro Abe\AppData\Local\Macromedia\xwmypuchpc.dll" <===== ATTENTION
C:\Users\Kentaro Abe\AppData\Local\Macromedia\xwmypuchpc.dll
2014-11-11 20:20 - 2014-11-11 20:20 - 00000000 __SHD () C:\Users\Kentaro Abe\AppData\Local\EmieBrowserModeList
EmptyTemp:NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating systemNow run FRST again.When the tool opens click Yes to disclaimer.Press the Fix button just once and wait.The tool will make a log (Fixlog.txt) please post it to y... Read more

12 more replies
Relevance 89.79%

Almost every time I open up a new tab or try to go to a new URL in Google Chrome I get a pop up or re-directed to an ad or virus site. I have ran so many different scanners that come up with 0 that its starting to drive me crazy that its still there.
 
Here's the FRST logs (I downloaded that fixit.txt and ran it with additions):
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:22-05-2016 01
Ran by Niklas (administrator) on DESKTOP-2GDOA4M (22-05-2016 11:20:24)
Running from C:\Users\Niklas\Downloads
Loaded Profiles: Niklas (Available Profiles: Niklas)
Platform: Windows 10 Home Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Program ... Read more

Answer:Multiple Google Chrome (32 bit) Processes + Pop Ups in Browser

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/615148 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

0 more replies
Relevance 89.79%

I have multiple processes on Google Chrome running in the background and almost every time I open a new tab I get re-directed to ads / virus. I've ran a lot of different program and they all come up empty so I hope you can help.
 
I've attached logs from FRST:
 

 Addition_22-05-2016_11-21-16.txt   38.41KB
  1 downloads
 

 FRST_22-05-2016_11-21-16.txt   59.83KB
  2 downloads

Answer:Multiple Google Chrome (32 bit) Processes + Pop Ups in Browser

Duplicate post.This topic will be closed.

1 more replies
Relevance 89.79%

Multiple Google Chrome processes running, whose image name is Bkumbzlzkp.exe.
The file location for this is C:\Users\Gel\AppData\LocalLow\EmieSiteList\Moqhsillt\Xkjonjiipp.
 

Answer:Multiple Google Chrome processes running

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

4 more replies
Relevance 89.79%

Thank you in advance for any help you can provide.

It's really nice to know that for every bad guy creating these viruses, there's a good guy out there to help people in need. Thank you for the work you do, and thank you for reading my post.

I hope the information above is sufficient.

EDIT: P2P program utorrent has been disabled
 

Answer:Multiple Fake Google Chrome Processes

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

5 more replies
Relevance 89.79%

Hi, I am new to the forum but came here because I have seen another thread that looked similar to my problem.  I don't have Google chrome installed, but I see multiple processes running (named gtgpalgcum.exe *32) with Google Chrome as the description.  I believe my computer is infected with some kind of malware.  Can anyone help me with this issue? 
Stan

Answer:Multiple Google Chrome Processes Running

Welcome to Bleeping Computer,
Please do the following:
Please download the Farbar Recovery Scan Tool from here:http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ (for 32bit systems)http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ (for 64bit systems)
Note: Wait for the direct download to begin, do not click on anything else on the page.
save it to your desktop.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it.
When the tool opens click Yes to disclaimer.
Press the Scan button.
It will make a log (FRST.txt) in the same directory the tool is run.
Please attach that log to your reply.
The first time the tool is run, it makes a second log (Addition.txt).
Please attach that to your reply as well
NEXT
Download Malwarebytes Anti-Rootkit (MBAR) from the following link and save it to your desktop.http://downloads.malwarebytes.org/file/mbar
**Next, exit Malwarebytes Anti-Malware ( MBAM ) if it is running. You can do so via the notification area icon near the clock. Right click on the mbam icon, and select Exit.**
Next...Double click on the MBAR file you downloaded.
Approve the UAC prompt in Vista and newer operating systems.
Click OK on the next screen, to allow the package to extract the contents of the file to it's own folder, mba... Read more

2 more replies
Relevance 89.79%

Noticed a game acting odd yesterday then on start-up this morning I found all the silly processes. tried stopping them but obviously had no progress.
googled the processes and found you guys and the ability to help others with this issue.

Thank you in advance for any help you can give!
 

Answer:Multiple Google Chrome Processes Gqjmgrtv.exe *32

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

5 more replies
Relevance 89.79%

My hard disk is running like crazy and my pc won't go into sleep mode. I started task manager and found 6-7 Google Chrome processes running. They can't be stopped. They just start right back up. I don't even have Google Chrome installed. The processes all have hdeppwkv.exe *32 as an image name in task manager. They have Google Chrome as a description.
 

Answer:Multiple Google Chrome processes can't be stopped

Helllo,

My name is Argus and and I will be helping you with your computer problems.

Before we begin, please note the following:

I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable. ​Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
Right-click on icon and select Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
Press the Fix button just once and w... Read more

3 more replies
Relevance 89.79%

My hard disk is running like crazy and my pc won't go into sleep mode. I started task manager and found 6-7 Google Chrome processes running. They can't be stopped. They just start right back up. I don't even have Google Chrome installed. The processes all have hdeppwkv.exe *32 as an image name in task manager. They have Google Chrome as a description.

Thanks
 

Answer:Multiple Google Chrome processes can't be stopped

Helllo,

Before we begin, please note the following:

I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
==========================


Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable. ​Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
Right-click on icon and select Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
Press the Fix button just once and wait.
If for some reason the tool needs a rest... Read more

7 more replies
Relevance 89.38%

The problem I am experiencing appears to occur when I connect my DSL modem (without going onto the Internet). I opened Windows Task Manager and can watch as the number of processes increases from around 70 to 95 or so. I am observing multiple processes that show the user name as “BLANK”. Some use up to around 900,000K Memory (Private Working Set) according to Task Manager. These processes (and there may be up to 8 or more instances of each - conhost.exe seems to have the most instances listed), show up in Task Manager with the following names:
 
                Cmd.exe
                Conhost.exe
                Consent.exe
                Ctfmon.exe
                Dllhost.exe
                Explorer.exe
                Msdtc.exe
                Msiexec.exe
               ... Read more

Answer:Windows Task Manager shows multiple unwanted processes running when DSL connects

Greetings AutoResearch and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.If you would allow me to call you by your first name I would prefer to do that.===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter pr... Read more

29 more replies
Relevance 88.97%

Thank you for you help. Husband thinks it may have happened yesterday when attaching GoPro, but can't say for sure.
 

Answer:Multiple fake Google Chrome processes - CPU bogged down

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

5 more replies
Relevance 88.97%

Hi, I am infected with a virus of some sort which is causing multiple Google Chrome processes to be running using up almost all of the CPU. I have run and attached the scans.. This is very similar to the com surrogate virus I had on this computer last month which you helped me fix. Thanks in advance for your assistance.
 

Answer:Multiple Google Chrome exe processes running. -- virus?!

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

6 more replies
Relevance 88.97%

Hoping to soon have a green 'solved' sticker on my topic.
 

Answer:Multiple 'google chrome' processes eating memory

2nd file from the tool listed as Step 1
 

7 more replies
Relevance 88.97%

First noticed on 10/30/2014, in the volume mixer there were anywhere from 3 to 4 different Google Chrome volume bars displayed, all muted. If unmuted, the audio of an ad could be heard. When Task Manager was opened, there were multiple processes (orazjsv.exe) that were running, anywhere from 4 to 12 at any given time.

Tracing the folder to where orazjsv.exe is installed, I deleted the entire folder in Safe Mode only to have it reinstall in a different location once Windows was restarted. So far everytime I have deleted it, it has been from an existing folder in the AppData folder under my username, particularly a folder within the LocalLow folder. I have run Malwarebytes, Norton AV, and CCleaner. Currently I also have my firewall set to block the program from sending or receiving data.
 

Answer:Need Assistance, multiple fake google chrome processes

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Code:

Start
C:\Users\WastelandRogue\AppData\LocalLow\Adobe\pgnzuluwmcae
HKLM\...\Run: [] => [X]
HKU\S-1-5-21-645926314-533527359-3572142578-1001\...\Run: [Ycebtlrd] => regsvr32.exe /s "C:\Users\WastelandRogue\AppData\Local\Skype\Ycebtlrd.dll" <===== ATTENTION
C:\Users\WastelandRogue\AppData\Local\Skype\Ycebtlrd.dll
HKU\S-1-5-21-645926314-533527359-3572142578-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-645926314-533527359-3572142578-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = http://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=360&chn=retail&geo=US&ver=20&locale=en_US&gct=kwd&qsrc=2869
FF SearchPlugin: C:\Users\WastelandRogue\AppData\Roaming\Mozilla\Firefox\Profiles\uwzpg0nw.default\searchplugins\trovi-search.xml
C:\Users\WastelandRogue\AppData\Roaming\Mozilla\Firefox\Profiles\uwzpg0nw.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Users\WastelandRogue\AppData\Roaming\Mozilla\Firefox\Profiles\uwzpg0nw.default\searchplugins\safesearch.xml
C:\Users\Wast... Read more

3 more replies
Relevance 88.97%

Here are uploads of FRST log, DDS and Attach logs.

Any help is appreciated.

Regards
 

Answer:Multiple Fake Google Chrome Processes Running

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

7 more replies
Relevance 88.97%

Hi friends
 
Having yet another problem with this dang pc. Chrome has been starting to open multiple process even though I chose to turn that ability off (running apps in the background after closing the browser). Every webpage I go to is lagging. Facebook is constantly freezing, to the point I'm having to do a hard shut down. I have Windows 8, Avast (paid) and Malwarebytes (paid). Nothing is being found. Please help!

Answer:Windows 8~Chrome opening Multiple processes, slow pc, slow browser...

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scroll down.Double-click ... Read more

1 more replies
Relevance 88.97%

hello all

i have tons of processes in my task manager, even on startup.

when i shut down ccApp.exe either has to be forced to end or takes forever.

my mom decided she would mess with it and try to make it faster but she only made it worse.

i had to do a system restore just to get it working again, and then i started unchecking processes and startup items in msconfig (oops). so now the config utility comes up every time on startup.

powerreg scheduler.exe appeared in my startup menu and i have no idea what it is.

any help i could get cleaning this thing up and ending unnecessary processes would be greatly appreciated.
 

Answer:slow and tons of processes in task manager

11 more replies
Relevance 88.56%

ok I have a Dell gx240 with windows xp home edition with 512 mb of ram.
It has been running extremely slow lately.
and bringing up task manager to stop the unwanted processes isn't working at all (Ill hit end process and nothing at all happens)
And I too am also experiencing the search engine redirecting thing. sometimes clicking a link prompts a download for a application-octet stream(?) type file.....

Answer:Task Manager wont end processes, Google searches redirected

Hello can we run MBAM as it should resolve a few of these issues. 512 RAM with XP is the bare minimum so slownees will be somewhat common.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware (v1.45) and save it to your desktop.alternate download link 1alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button... Read more

11 more replies
Relevance 88.15%

Help is much appreciated, Thanks
 

Answer:Multiple rogue Google Chrome processes (rjjbiyctioq.exe) running

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

9 more replies
Relevance 88.15%

fake google chrome processes run in the background causing memory log jam. Processes keep popping up if you closes them or delete them. Location of running processes are similar to the other posts similar forums. Users\*name*\AppData\LocalLow\Adobe\eairvsfboeds\Hpgvkcia
 

Answer:Fake google chrome running multiple processes (ybbkifcdeb.exe)

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable. ​Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
Right-click on icon and select Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
Press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.


Fix with AdwCleaner

Please download AdwCleaner by Xplode and save the file to your desktop.
Right-click on icon and select Run as Administrator to start the tool.
Follow the prompts and click Scan.
When finished, please click Clean.
Upon completion, click Report. A log (AdwCleaner[S*].txt) will open.

Please include the contents of that file in your reply.
 

3 more replies
Relevance 88.15%

Multiple fake google chrome processes name pwkoxslg.exe
 
Farbar Recovery Scan Tool logs attached.
Thank you for your help.
 
 

Answer:Fake Google Chrome Multiple Processes (2014-11-13 1944)

Hello MarioDDN,  Welcome to Bleeping Computer.My name is fireman4it and I will be helping you with your Malware problem.Please take note of some guidelines for this fix:Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools.  If you do not understand any step(s) provided, please do not hesitate to ask before continuing.  Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean".In the upper right hand corner of the topic you will see a button called Follow This Topic.I suggest you click it and select Immediate E-Mail notification and click on Follow This Topic. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine. Finally, please reply using the Post  button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply, unless they do not fit into the post.  I will be analyzing your log. I will get back to you with instructions.  Download attached fixlist.txt file and save it to the Desktop.NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.NOTICE: This script was written specifically for this user, for use on that particular machi... Read more

8 more replies
Relevance 88.15%

Computer very slow a few minutes after startup.  I've tried several AV programs. 
 
FRST.txt and Addition.txt logs below.
 
Thanks,
 
.....
 
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014
Ran by admin (administrator) on HOMEOFFICE on 14-09-2014 22:48:14
Running from E:\
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: English (United States)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe
(Coupons.com Inc.) C:\Program Files\Coupons\CouponPrinterService.exe
(CrashPlan) C:\Program Files\CrashPlan\CrashPlanService.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe
(EMC Corporation) C:\Program Files\EMC Captiva\Captiva Cloud Runtime\Emc.Captiva.WebCaptureService.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_JT50RP.EXE
(PFU LIMITED) C:\Windows\twain_32\fjscan32... Read more

Answer:multiple processes: dllhost.exe COM Surrogate & jfkglnuyzli.exe Google Chrome

DDS txt file below.  attach.txt attached.
 
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 10.0.9200.16635
Run by admin at 3:54:14 on 2014-09-15
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.3070.1756 [GMT -7:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Coupons\CouponPrinterService.exe
C:\Program Files\CrashPlan\CrashPlanService.exe
C:\Program Files\EaseUS\Todo Backup\bin\Agent.exe
C:\Program Files\EMC Captiva\Captiva Cloud Runtime\Emc.Captiva.WebCaptureService.exe
C:\Windows\system32\EscSvc.exe
C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_JT50RP.EXE
C:\Windows\twain_32\fjscan32\FJTWMKSV.exe
C:\Program Files\EaseUS\Todo Backup\bin\GuardAgent.exe
C:\Windows\system32\hasplms.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\Program Files\Common Files\Intuit\DataProtect\QBIDPService.exe
C:\Program Files\TeamViewer\Version9\Te... Read more

16 more replies
Relevance 88.15%

I would greatly appreciated help!  My Windows 7 desktop is infected with malware that has keeps the CPU usage at extreme high levels although no processes show in Task Manager above about 10% usage.  There are multiple copies of a fake Google Chrome image named vbbxqhmz,exe which seem suspicious since I uninstalled Googgle Chrome.  I have run all the malware and spyware removal tools that I have and the problem persists.  I would be so grateful for help recovering my computer.
 
Here are my logs:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17420  BrowserJavaVersion: 10.71.2
Run by Julie at 13:44:07 on 2014-12-03
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.7991.2026 [GMT -5:00]
.
AV: Norton Security Suite *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Security Suite *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Security Suite *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Prog... Read more

Answer:Infected! Multiple google chrome vvxbqhmz processes, CPU @ 100% usuage

Hello starbusrt1989,
 
I'm Stan and I will be helping you for this problem.
 
First of all I want to clear some things about the malware removal process:
Do not run any tools on your own. This may affect the process of removal and may cause both slowdown and additional problems.
Read carefully the steps that I suggest you to do. Any mismatch will prolong this case.
Copy any scripts carefully so they stay exactly the same with the original. Otherwise the script may not work and we will need to rerun/recreate it.
Feel free to copy all the steps in offline environment. They may be easier to read and follow in this way.
Feel free to ask any questions about the malware removal process. I'm here to help you so nothing must be hidden or misunderstood.
Share with me any problems/changes you experience while working with the current system.
Please, do not use any quotes or code boxes when you post logs.
I want to inform you that I will be able to respond in the evenings - 07:00 P.M - 11:00 P.M. (UTC + 02:00) - since I'm working during most of the daytime. If I haven't posted anything for 48 hours straight, please, feel free to send me a personal message. I will bump the topic if there is no response from you for 3 days. After 5 days of inactivity, the topic will be closed.
 
I want to inform you that I'm still in my training program so my posts must be reviewed by an instructor. This may lead to a slight delay in my answers.
 
********************
 
Pleas... Read more

38 more replies
Relevance 88.15%

I have seen the threads where others had this problem. My task manager shows at least a dozen instances of Google Chrome running even though I have removed Chrome. Another users thread identified this as a Trojan Virus?
 
I have followed the Preparation Guide as best I can & attached the "DDS" and "Attach" logs. This is all pretty new / foreign to me & I am a little over my head but I think I attached what's needed.
 
 
 
 
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17344  BrowserJavaVersion: 10.65.2
Run by Tayler at 13:32:41 on 2014-11-05
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.3839.1040 [GMT -8:00]
.
AV: Norton AntiVirus *Enabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
SP: Norton AntiVirus *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windo... Read more

Answer:Multiple fake Google Chrome Processes - Logs included.

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/554911 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 88.15%

I have been having this problem for a few weeks now, it's getting REALLY annoying.

I don't know what's causing it or what's happening.

Sometime randomly after my computer has been on a while whenever I open task manager (ctrl alt del, etc) once I close the task manager the Icon for it will simply go to my system tray.

I can not close this icon, if I right click it it pops up with the usual "restore, close, always on top." However I can not do anything, if I click any of these it does nothing.

The worst part is, every single time I open the task manager a new one pops up.

It also shows up as multiple processes if I view running processes I'll have like a zillion "taskmgr.exe" running in the background and even If I try to close the processes it will NOT close here either.
The only way to stop it is to restart my pc.
 

More replies
Relevance 87.74%

All of my processes in the task manager are larger than they were a week ago. For example, i use a small program called Launchy, which is a equivalent of quicksilver (for accessing files). It used to be around 1000K, now it is 13980K in the task manager. Other files follow suit.

Pandascan will not run. It gets around 13% and closes down. I have done it in firefox and IE, and in safe mode.

Itunes started skipping at the beginning of each song, like it is waiting for memory or processor power to get the song going.

I have run AVG antispyware, spybot, and the DSS. AVG found:

C:\sysbdbi.exe Trojan Horse Downloader.Agent.NWC
C:\Windows\bywtrq.dll Trojan Horse Generic5.xgy

Deleted both of them.

It is still doing the same things after deleting the files.

Deckard's System Scanner v20071014.68
Run by Atha on 2008-05-28 14:09:43
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
19: 2008-05-28 18:10:08 UTC - RP320 - Deckard's System Scanner Restore Point
18: 2008-05-28 05:08:48 UTC - RP319 - Installed AVG Free 8.0
17: 2008-05-28 01:40:19 UTC - RP318 - System Checkpoint
16: 2008-05-27 01:38:10 UTC - RP317 - System Checkpoint
15: 2008-05-26 00:38:35 UTC - RP316 - Installed Drive Speed Checker


-- First Restore Poi... Read more

Answer:Task Manager processes larger, slow, trojan

Also, the Launchy program is now up to 14376K

Programs like Applemobiledevice are also growing as well. I have not used these programs since my first post.

Itunes also skips when tracks are pulled from an external hard drive, so i do not think it is the hard drive that is causing the stuttering/skipping at the beginning of each song.

1 more replies
Relevance 87.74%

Dear Team,

My system is running very slow from past week, it is showing multiple chrome.exe *32 processes and other processes too , check the attachment for all the processes running. System is too slow and the virus is not allowing me to copy files , even in the safe mode. My antivirus is up to date but still it is not recognizing this virus.
 

Answer:*32 processes running in task manager, system too slow

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

15 more replies
Relevance 87.74%

hiya, I have absolutely no idea when it comes to computers, I can turn it on and do what I need to do but that's about it lol.
my computer is being really slow lately, I started the task manager to see what was running and there are 84 processes running, I don't know what any of these are or if I need them all.
have tried google-ing but to be honest it's very confusing. any help would be appreciated thanks
 

Answer:computer slow 84 processes running in task manager

Hi, check and post
TSG System Information Utility - found here.
http://library.techguy.org/wiki/TSG_Valuable_links
=====
Download Security Check by screen317 from
http://screen317.spywareinfoforum.org/
Or
http://www.bleepingcomputer.com/download/securitycheck/

Save it to your Desktop.
Double click the install icon.
If using Vista - Win 7 - right click the install icon and select "Run as Administrator"
A command Prompt window will open.
Let it scan the Pc - press any key when asked.
It should now open in Notepad.
Copy and Paste the result of the scan in the reply box below.

The saved log will be called checkup.txt.
 

1 more replies
Relevance 87.74%

There's a fair number of Chrome.exe*32 running on my computer using up allot of my memory but have no idea what to do about it. I've run Malwarebytes which has allowed me to use my computer again but i do not feel has resolved the underlying issue.
 
 
I made a log using DDS and attached the attachment:
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.17496
Run by Derek at 17:57:16 on 2014-12-17
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.4091.2072 [GMT -7:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
SP: Microsoft Security Essentials *Enabled/Updated* {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServi... Read more

Answer:Multiple instances of Chrome.exe*32 running in task manager

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/560212 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

6 more replies
Relevance 87.74%

Hi,

My computer is having lagging issues and showing signs of possible infection. I am a Malwarebytes user, and so far the scans have been clean. That said, I have seen that the computer is making some outgoing requests that Malwarebytes is stopping, so I suspect there is something that has made it onto my hard drive.

I've attached the FRST and Addition scan reports from the Farbar Recovery Tool. Please let me know if you need any other information.

I appreciate any help you could give...thanks so much!
Kathy
 

Answer:Possible malware infection...task manager shows multiple processes taking up large amount of memory

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

5 more replies
Relevance 86.92%

Hi, I just found a neat little feature in Google Chrome and I'd like to share it with others who might not have noticed it.

First you'll click the wrench in the top-right of your browser.



Then navigate to the option 'View Background Pages'

Then in the open window you can manage the processes Chrome is currently using. To get a more detailed look click the 'Stats for nerds' option.




And you should find yourself at a page that looks like this:



Hope this helps!

More replies
Relevance 86.92%

Here is a copy of my HJT log

Logfile of HijackThis v1.99.1
Scan saved at 15:14:00, on 10/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mclogsrv.exe
C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\PROGRA~1\McAfee\MSC\mctskshd.exe
C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\BTHOME~1\Help\SMARTB~1\BTHelpNotifier.exe
C:\Program Files\btbb_wcm\McciTrayApp.exe
C:\Program Files\McAfee\MS... Read more

Answer:PC Running Very slow (lots of unusual processes in task manager too)

Hello sj89m,

Please copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

***************************************************

Download AVG Anti-Spyware from HERE
This is a 30 day trial of the programInstall AVG Anti-Spyware
Double-click the icon on Desktop to launch AVG Anti-Spyware
You will need to update AVG Anti-Spyware to the latest definition files.On the top of the main screen click Shield
Click the word active to change it to inactive
On the top of the main screen click Update.
Then click on Start Update. The update will start and a progress bar will show the updates being installed.
Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
Under "Reports"Select "Automatically generate report after every scan"
Un-Select "Only if threats were found"

When you have finished updating, EXIT AVG Anti-Spyware. Do Not run a scan just yet, we will shortly.

-----------------

Download and install CleanUp! but do not run it yet. (Not Recommended for XP64).

-----------------------------------

Please reboot your computer in Safe Mode by... Read more

9 more replies
Relevance 86.1%

I seem to have the "Google Process Malware" that a lot of others on this forum have. A dozen or more processes with the Description "Google Chrome" and an apparently random filename are in Task Manager. End Task on one and a few more appear.

Attached are FRST and Addition logs. I appreciate your help on what to do next. Thank you.
 

Answer:Chrome Process malware, multiple processes, computer slow

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

1 more replies
Relevance 86.1%

I keep getting memory error's. So I opened up task manager and I have about 10 instances of Google Chrome running and they keep multiplying. I don't even have Google Chrome on my machine.
 

Answer:Fake Google Chrome in task manager

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable. ​Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
Right-click on icon and select Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
Press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

4 more replies
Relevance 86.1%

Hey, Gang.

I'm new here.

I have an HP Media Center m7250n Desktop/PC, and it's been running slow for months. Below is my HijackThis Log. Any help would be appreciated:

Logfile of HijackThis v1.99.1
Scan saved at 4:22:06 PM, on 8/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Common Files\Symantec Shared\Security... Read more

More replies
Relevance 86.1%

Hi,

I've been having numerous blue screens in the last 3 weeks. My computer will be working as normal; but somedays it boots a little slow and then proceeds to BlueScreen within 5 minutes seemingly regardless of task.

Please help in anyway you can; I hate having a powerful PC be voided by continual BSOD.

Thanks

Answer:Multiple BSOD, TF2+Chrome, Skyrim+Task manager - LocaleID 2057

Hi PeacheyA.

Uninstall your installed version of the display driver.
How-To Uninstall AMD Catalyst Drivers From A Windows Based System
Then clean up any possible leftover.
Drivers - Clean Left over Files after Uninstalling
Then install version 13.9 WHQL only.
Previous AMD Catalyst? Display Drivers
Lately we have seen a lot of issues with the latest 13.12 WHQL AMD Catalyst.

When the driver is changed, Stress test the Graphics Card using Furmark.
Video Card - Stress Test with Furmark

Let us know the results.
____________________________________________

Code:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 119, {1, 6b89, 6e33, 6e32}

*** WARNING: Unable to verify timestamp for atikmpag.sys
*** ERROR: Module load completed but symbols could not be loaded for atikmpag.sys
Probably caused by : atikmpag.sys ( atikmpag+45b36 )

Followup: MachineOwner
---------

6: kd> !analyze -v
*******************************************************************************
* *
* ... Read more

1 more replies
Relevance 85.28%

I had been using AVG & found it adequate. I got this computer in fall 2009 with Windows 7 32-bit on it. Since then, I've been using Microsoft Security Essentials.But it never found anything, until this month.Nov 21, I decided to try AVG again. D/Led the 30 day trial version & ran it. It found 4 Trojans in less than an hour. There was a "buy right now" sales pitch - pushy already; I was suspicious. Deleted AVG on 26th.Dec 30, I found right away that my computer is infected with a serious, really active bit of Malware/virus. I don't know its name; it apparently settles into or at least uses a directory in Windows ... C:\\Windows\sysWOW\dllhost.exe is said to be the culprit. MalwareBytes was continuously blocking "ads," I guess they are, generated by dllhost.exe? Try as I may, I've not been able to do anything about it.(Update: I bought & used Malwarebytes in 2014, March thru July I think. It used a lot of CPU while running. Slowed me down. I thoughtlessly deleted it ... at least, I think I did.)The very frequent message that Malwarebytes is blocking outgoing "stuff" must have been generated by the virus itself, as MWB wasn't on here at that time. My CPU was running at=close to 100%. The main user seemed to be C:\Windows\SysWOW64\dllhost.exe.Dec 31, MSE found something!: Trojan:Win32/Powessere.A!reg - "severe, active." I said Remove it.Jan 1, MSE found Trojan:Win32/Powessere.A!reg - "severe, active" again. I said Quarantine it. I was in over my head.I'd "lost" my tru... Read more

Answer:More Badness & Task Manager Credits "Google Chrome"

Can you re-run malwarebytes this time remove the infections and post the new log.   Step 1: Minitoolbox. Please download MINITOOLBOX and run it.Checkmark following boxes:Flush DNSReset FF proxy SettingsReset Ie Proxy SettingsReport IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory sizeList Devices (problems only)Click Go and post the result. Step 2: Junkware Removal Tool. Please download Junkware Removal Tool and save it on your desktop.Shut down your anti-virus, anti-spyware, and firewall software now to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click it and select Run as administrator.The tool will open and start scanning your system.Please be patient as this can take a while to complete depending on your system's specifications.On completion, a log is saved to your desktop and will automatically open.Please post the JRT log.Step 3: Adware Cleaner. Please download AdwCleaner by Xplode onto your desktop.Close all open programs and internet browsers.Double click on adwcleaner.exe to run the tool.Click on Scan button.When the scan has finished click on Clean button.Your computer will be rebooted automatically. A text file will open after the restart.Please post the contents of that logfile with your next reply.You can find the logfile a... Read more

1 more replies
Relevance 85.28%

Hi,
 
I noticed a few days ago that my computer was running slow.  I opened the task manager and noticed that the dllhost.exe*32 was in my Task manager over 20 times.  I ran my antivirus and nothing came up, I have both Malware, and Comodo.  I read through some removal logs and found one that was the same issue as mine basically.  I downloaded the Farber Recovery Scan Tool.  At first, I didn't read ALL the way through it and ended up downloading someone else's fixlist.txt that was part of a reply.  At the time I just figured it was a blanket fix for everyone, didn't realize it was for that specific computer.  So I pressed fix and it seemed to work......temporarily.  I also deleted Chrome but it still pops up in my Task Manager although I don't have the program. 
 
So...now I have read more and am going to do this the right way.  I ran a new scan and am including it in the post.  Hopefully someone can help me fix the problem.  I really appreciate all the help. 
 
I have a HP Pavillion dm4, 64 bit, running Windows 7 Home Premium
 
Here are my logs:
 Addition.txt   40.46KB
  4 downloads
 

 FRST.txt   82.95KB
  5 downloads
 

 Shortcut.txt   81.92KB
  1 downloads
 
 
Any help would be greatly appreciated.  Thanks so much,
 
Mik

Answer:dllhostexe*32 and google chrome app appear over 20 times each in Task Manager.

Hi Mik,please do the following steps:Step 1Please download this attached
 fixlist.txt   2.7KB
  7 downloads and save it in the same directory as FRST.Start FRST with Administrator privileges.Press the Fix button.When finished, a log file (Fixlog.txt) pops up and is saved to the same location the tool was run from.Please copy and paste its contents in your next reply.Step 2Start FRST with administator privileges.Press the Scan button.When finished, FRST will produce a log (FRST.txt) in the same directory the tool was run from.Please copy and paste this log in your next reply.

17 more replies
Relevance 85.28%

I am experiencing the same issues as some of your other users with a Fake Google Chrome process residing my Task Manager screen. My issue on my Laptop began yesterday, after I tackled removing a dllhost.exe issue over the weekend. I thought I had done well to get rid of it, using information from your forum, but then this file showed up the next day.My file is titled "Immytfefs.exe" and it states that it resides in the "C:\Users\User\AppData\LocalLow\Adobe\nmvkurfye" directory.It says it is a Google Chrome process, but I have uninstalled that program, and it is still there. I have Norton360 and MalwareBytes running, and neither detect this issue. I have downloaded your FARBAR Recovery Tools and ran the process to create the First and Addition files. and will attempt to upload them with this issue request. [Can't upload] If anyone has answers to this, that would be much appreciated.I came to this forum, because I can see others are currently experiencing the same issues.Please let me know what I can do to resolve this.  I think this is a true virus...Sincerely,David I can't seem to upload the FRST and Addition files to this post, so maybe someone can help me with that also. FRST.txt************Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-11-2014Ran by User (administrator) on USER-PC on 11-11-2014 12:54:20Running from C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DFMFWEVJLoaded Profile: User (Avai... Read more

Answer:Fake Google Chrome exes in Task Manager

Ran ESET Powelikscleaner.exe tool and did find Poweliks virus, and cleaned it.  Do not see the multiple files in Task Manager running behind the scenes.  Virus may have been involved with that!
Will keep the forum posted if any other files pop up.  Thanks for your help, and I am being patient...just reading alot of what others are experiencing.

3 more replies
Relevance 84.46%

Hi,

I bought a Sony Vaio laptop for christmas last year and recently it has started to crash when logging in or taking ages to allow me to access any programs or go onto the internet. I have tried to look through task manager to disable processes and services that may not be needed but I am very limited on my knowledge for what is needed and how to actually remove them.

I am worried I may have some kind of malware running to slow my system down or may have broken something whilst trying to sort the problem myself so please can you help me trying to get this laptop working back to its optimum?

My TSG Sysinfo is:
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Pentium(R) CPU B940 @ 2.00GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 2
RAM: 4043 Mb
Graphics Card: Intel(R) HD Graphics Family, 1797 Mb
Hard Drives: C: Total - 291858 MB, Free - 226325 MB;
Motherboard: Sony Corporation, VAIO
Antivirus: Panda Internet Security 2012, Updated and Enabled

Hijack this:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:20:58, on 30/10/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)
Boot mode: Normal
Running processes:
C:\PROGRAM FILES (X86)\PANDA SECURITY\PANDA INTERNET SECURITY 2012\WebProxy.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNo... Read more

More replies
Relevance 84.05%

My lap top is running slow my google has been taken over by yahoo and i have lots of chrome,exe*32 files in mt task manager. i've removed yahoo as my search and put google as my deault but yahoo just comes back again. i havent used the lap top in a while my daughter uses it more she doesnt know whats happened, im a complete novice and dont know one end of the lap top from the other so will need a patient helper and no pc jargon as i wont understand, im not even sure if ive posted this thread right.
thanks
 

Answer:google taken over by yahoo and lots of chrome.ex*32 files in task manager

Helllo,

My name is Argus and and I will be helping you with your computer problems.

Before we begin, please note the following:

I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not be able to help you if you do not follow my instructions.


Rules and policies

We won't support any piracy.
That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!
The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled befor... Read more

11 more replies
Relevance 84.05%

I am suddenly unable to use Google Chrome (nothing happens), task manager (nothing happens). I have tried clicking on a system Reset, nothing happens. I have tried a restore, message says it is unable to start restore. PC is taking ages to come on and switch off.

Other things are slow. PC is practically unusable. Any suggestions?

Answer:Reset, task manager, Google Chrome plus other things not working

Do a repair install.
It will allow you to keep your files, settings and apps.
No product key is required.
Activation is automatic.
Repair Install Windows 10 with an In-place Upgrade

14 more replies
Relevance 83.64%

Guys I just joined to help you out with this. I have been infected twice now with this Chrome random executables. It installs as you all have said
C:\Users\jschwartz\AppData\LocalLow\Microsoft\Pjddrcnolzd\updovrrefmes

It creates a Schedule Task in Task Scheduler to relaunch a random dll. If your infected you can sort scheduled tasks by task run in the last 1 hour.

BTW all folder directories it creates under the Locallow directories are random as well as the dll names and exe's are all random too. If you use "process Explorer" you can suspend the regsvr32.exe then kill all the random executables it creates.

I don't know which program is launching regsvr32.exe but the command is shown when my User Access Control prompts me to let it run. Heres how its launched:

C:\windows\syswow64\cmd.exe /c start regsvr32.exe "Path to the random dll under the locallow directory"

Hope this helps....still investigating. This problem I got infected from just regular browsing on the internet. No inappropriate websites. This is my work laptop so I don't have Admin rights but can contribute with what I find.

Hope this helps.
 

Answer:Fake Google Chrome Processes making computer slow

Scan with Farbar Recovery Scan Tool

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

1 more replies
Relevance 83.64%

I ran malware and it is clean but included the file. The farbar files are attached. Thank you for all your help.

Joel
 

Answer:Very slow computer, Google Chrome processes running when it is not installed

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

26 more replies
Relevance 83.64%

My laptop has been running extremely slowly. I often get errors when trying to go to websites - IE says it can't display the page. When I view the Windows Task Manager, I see multiple processes running with the description "Google Chrome" however this program is not currently installed on my computer. I downloaded the Farbar Recovery Scan Tool and have attached the FRST file. Thanks in advance for your help!
 

Answer:Very slow computer, Google Chrome processes running when it is not installed

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

12 more replies
Relevance 83.64%

I'm having a lot of trouble with this virus/malware and have tried a couple methods suggested on this forum. Mabye because fix designed for that person. I've attached a FRST scan below.
 

Answer:Fake Google Chrome Processes making computer slow

Please Reply If you can!
 

4 more replies
Relevance 82%

Hi there,
 
I have a PC that is very slow when connected to the Internet and slows down the rest of our network.  I have run many programs to try and compile all the information that I have for you.
 
Attached is the DDS and Farbar logs I ran earlier today.  I've also run rkill, TDSSKiller, Malwarebytes, AdwCleaner, Emsisoft Emergency Kit, Rogue Killer, & Junk Removal Tool, all to no avail to fixing this yet.  Any help would be appreciated.  Thank you!
 
Ryan.

Answer:Slow PC, Multiple svchost.exe files in Task Manager

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/552789 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 81.59%

Hello,

First off, I'm a new member to the forum and I would like to express my sincere appreciation for help resolving this problem. I'm usually able to clean up malware but have not been successful in this case. As I've read through the furum, I've noticed other posts with a similar issue so this must be something new going around.

The issue I have is popups (always three windows) which became noticeable about five days ago and prompted my actions. I have two accounts on the infected PC and the issue is present on one account while the other account is free of the issue. As I investigated, I noticed a fake google chrome entry in the processes tab of the task manager. Its name is "cphngsji.exe*32" and its listed description is "google chrome." There are 10 to 15 entries in the task manager and it varies increasing and decreasing randomly. The randomly increasing and decreasing entries are visible and correspond to peaks and valleys in the CPU usage trace on the performance tab of the task manager. I also have an issue with the CPU fan running a great deal of the time when the infected account is active. This began several months ago and I now believe it is a result of this infection.

So far I have run my antivirus (McAfee), a tool called SUPERAntiSpyware Free Edition. They were able to find and fix other bugs but not this one. I also ran a McAfee tool called 'GetSusp' which identified three PUP's and one Assumed Dirty ... Read more

Answer:Fake google chrome entry in task manager causing popups and system slowness

Helllo,

My name is Argus and and I will be helping you with your computer problems.

Before we begin, please note the following:

I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable. ​Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
Right-click on icon and select Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
Press the Fix button just once and wa... Read more

7 more replies
Relevance 81.18%

Hi, my laptop is running really slowly and has got a lot worse recently. At times it isn't too bad but it doesn't take much for it to become overwhelmed - today it ground to a halt completely. I would be incredibly grateful if you can help in any way. Thank you.
 

Answer:Slow laptop, many chrome.exe*32 processes running

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

16 more replies
Relevance 81.18%

I have numerous svchost.exe that are executing at the same time. CPU pins at 100%. I go to task manager and close the guy that is killing my CPU....HELP

Logfile of HijackThis v1.99.1
Scan saved at 5:59:35 PM, on 9/29/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell\AccessDirect\dadapp.exe
C:\Program Files\AnalogX\CookieWall\cookie.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Dell\AccessDirect\DadTray.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Prog... Read more

Answer:system running slow..multiple svchost.exe in task manager

16 more replies
Relevance 80.77%

Computer running very slow, a couple of dozen tasks show up in Windows Task Manager with Image Name Nuyxhacoxa.exe having Decription 'Google Chrome'.

Chrome has been uninstalled from the system.
 

Answer:Malware/Virus infection - dozens of jobs showing in task manager with Description = 'Google Chrome'

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

8 more replies
Relevance 79.95%

Someone said I need to find the binary file kicking off all these processes? How do I do that? I've run FRST and attached the output as well.
 

Answer:Multiple ckfgiex "Google Chrome" looking processes

Helllo,

Before we begin, please note the following:

I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.


Download Malwarebytes Anti-Rootkit to your desktop.

Double-click the icon to start the tool.
It will ask you where to extract it, then it will start.
Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
Click in the introduction screen "next" to continue.
Click in the following screen "Update" to obtain the latest malware definitions.
Once the update is complete select "Next" and click "Scan".
When the scan is finished and no malware has been found select "Exit".
If malware was detected, make sure to check all t... Read more

8 more replies
Relevance 79.13%

Hello guys, logging to this site after a long hiatus (good streak of problem-free PC!)

I recently bought a Acer Q302LA laptop and installed many software on it (mainly GOG games, Sophos, WinRAR, virtual clone drive, nothing illegal or dubious). Not sure if this is relevant, but somehow I downloaded Trovi search engine, but I uninstalled it via add/remove programs, changed homepage settings and search engine in Firefox and IE, and ran MBAM, so I believe I have removed it completely.

Now my problem is this: I noticed that I am having trouble with both firefox and IE, in that I will have multiple instances of both in task manager that I am unable to force kill process, giving me message that access is denied. As a result, I cannot open new firefox after the last one is closed. In addition, when I was able to open firefox after restarting my PC, both firefox and IE take forever to load pages, with spinning logos on the tabs. What is perplexing is that sometimes these web browsers linger in task manager after restarting, even if I didn't start these programs.

So as of now I have 8+ IE and 2+ firefox in my task manager that I cannot kill, and excruciating slow loading of web pages or inability to open new firefox without restarting.

I ran both MBAM and Sophos, didn't detect any malware/virus. What do I do next?? Am I in right forum??

Thank you for you help!!

Answer:Can't kill multiple firefox and IE in task manager, hang process, slow loading

The task manager should show a process for each tab in IE and for each separate window for Firefox. I would suggest uninstalling Firefox and re-installing, to see if the problem returns.

Within IE, go to "Manage add-ons" by clicking on the cog icon in the top right hand corner (Tools (ALT + X)) and look through the extensions, toolbars, etc., to see if anything suspicious is there (disable anything you are unsure about).

2 more replies
Relevance 77.08%
Answer:In windows task manager: 8 chrome procceses in chrome built in task manager: 4 procceses

that's normal, Chrome uses multiple processes to increase stability/performance.
 

1 more replies
Relevance 75.44%

My computer is slow and locking up. I noticed yesterday I have duplicate processes and new processes running with .exe *32. Chrome is duplicated this way too. Then, when I opened Internet Explorer, IE was duplicated and Bing and Bing Bar was duplicated. I followed all the instructions and am uploading the files requested below.

Here are some examples of the files that are showing in my Task Manger:
armsvc.exe *32
BBsvc.EXE *32
Evernote.exe*32
EvernoteClipper.exe *32
afcdpsrv.exe *32
chrome.exe *32
chrome.exe *32
chrome.exe *32
chrome.exe *32
chrome.exe *32
chrome.exe *32
GoolgeCrashHandler.exe *32
Evernote.exe*32
EvernoteClipper.exe*32
EvernoteTray.exe*32
jhi_service.exe*32
LMS.exe*32
mbamscheduler.exe*32
mbamservice.exe*32
mbam.exe*32
ONENOTEM.exe*32
WINWORD.exe*32
SkypeC2CPNRSvc.exe*32
SkypeC2CAutoUpdateSvc.exe*32
UNS.exe*32
 

Answer:Multiple Processes With .exe *32 Extensions. Multiple Chrome Instances Too.

I am not seeing any malware in those logs at all.

If you are not having any other malware problems, it is time to do our final steps:
We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
After doing the above, you should work thru the below link:
How to Protect yourself from malware!
 

7 more replies