Computer Support Forum

multiple instances of iexplorer.exe

Question: multiple instances of iexplorer.exe

***CORRECTED***

I have noticed that my computer keeps slowing down and when I look at task manager i will have several (sometimes up to 8) instamces of iexplore.exe running, but only one ie window is open. This seemed to have started when I enabled pop-up blocker on Yahoo companion, but it could be coincidence.

Also, periodically my IE and several other programs will stop functioning. If I can get to my computer I can access the internet, but IE will not open. If I do a system restore to the previous day then everything will work fine again for a week or maybe a couple of days.

HELP!!!

Relevance 100%
Preferred Solution: multiple instances of iexplorer.exe

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: multiple instances of iexplorer.exe

12 more replies
Relevance 88.56%

Hi guys. Just two days ago I was infected with System Progressive Protection. I seem to have removed it and it has never returned, but I noticed that there are multiple instances of iexplorer.exe in my task manager that keep popping up whenever I try to end it. Also, my computer cannot stream videos as fast anymore, if that has any relation to the iexplorer.

Thanks!

Answer:Multiple instances of iexplorer.exe

Hello,If you have multiple IE processes open, and no IE windows open - then you've most likely got an infection that's "phoning home". We need some info.MiniToolBoxPlease download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.Please Download TDSSkiller Launch it. Click on change parameters-Select TDLFS file system Click on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan results.Please download Malwarebytes Anti-Malware and save it to your desktop.Important!! When you save the mbam-setup file, rename it to something random (such as 123abc.exe) before beginning the download.Malwarebytes may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the I... Read more

4 more replies
Relevance 88.56%

I have the same issue, and understand it's part of how IE 8 works. But, like others, after I close all instances of IE, I still have some listed in my task manager, some very large, eating up memory. I'm still on IE 8. Would upgrading to 10 help, or no?

Answer:Multiple iexplorer.exe instances

Uninstall all versions of Java that you might have and see if you can live without it.

Restart your computer.
Do not open IE.
Look in Task Manager to make sure the IE is not loaded.
Wait a few minutes - while doing nothing with the computer.
Re-check Task Manager to make sure the IE is not loaded.

Now open IE and do a few of your normal things.

Close IE and watch the Task Manager for a while - sometimes it can take several minutes for all instances of IE to leave RAM after you close the window(s). If they stay there overnight, you have a problem :-)

I've not used IE10 - so I cannot speak to that, but I would suggest moving to at least IE9 after the tiny experiment above. If IE9 continues to hang around in RAM after closing the windows, then there are several more things we can try.

edit: what antivirus tool are you using?

1 more replies
Relevance 88.56%

Hey I need some help. I accidentally ran a file that contained a malware. I ran it while I was installing software and AVG was in install mode. What happens is that every time I boot my computer Iexplorer.exe is loading multiple times. As a result my computer is dragging and wierd things such as my screen going black keeps occuring.

I have AVG antivirus, Comodo firewall, spyware guard, and spybot. I feel like an idiot for screwing this up and need help fixing my computer. I have attached Hijackthis. I tried to run DSS but when I tried to DL it, the website said there was an issue with the program.

Logfile of HijackThis v1.99.1
Scan saved at 10:27:49 PM, on 01/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\... Read more

Answer:Multiple instances of IExplorer

Hello afclark82,


Quote:




I tried to run DSS but when I tried to DL it, the website said there was an issue with the program.




There is no issue with the program. Please go ahead and allow the download and post the requested logs.

Don't forget the gmer scan as well.

10 more replies
Relevance 88.56%

Hello,
 
Recently I noticed that the computer is running multiple intances of iexplorer.exe. The processes seem to do nothing. A new one gets started every few muntes or so by cvshost with PID that does not appear in the task list.
 
I have tried may malware/virus removal tools.
 
Here is the log:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17280  BrowserJavaVersion: 10.71.2
Run by Orlin Vakarelov at 12:40:37 on 2014-10-24
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.3933.647 [GMT -4:00]
.
AV: Symantec Endpoint Protection *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Symantec Endpoint Protection *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Symantec Endpoint Protection *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\acnamlogonagent.exe
C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
C:\Windows\system32\svchost.exe -... Read more

Answer:Multiple instances of iexplorer.exe

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).===Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first t... Read more

24 more replies
Relevance 87.74%

Hi everybody,
I am not a experienced user and I am facing a problem since 3-4 weeks: PC slowed down and I verified that multiple instances of iexplorer.exe *32 are running at the same time. I guess this is using a lot of memory and is the reason of the problem i'm facing.
I am running windows 7 home premium with service pack 1 and it's the first time i am facing this problem on this laptop, that i am using since one year.
 
My antivirus (McAfee) is updated and I run spybot but it didn't find anything.
 
Any help?
 
Thank you

Answer:multiple iexplorer.exe *32 instances running

Please download MiniToolBox  , save it to your desktop and run it.
 Checkmark the following checkboxes:  List last 10 Event Viewer log  List Installed Programs  List Users, Partitions and Memory size.
 Click Go and paste the content into your next post.
 Also...please Publish a Snapshot using Speccy - http://www.bleepingcomputer.com/forums/topic323892.html/page__p__1797792#entry1797792 , taking care to post the link of the snapshot in your next post.
 
Louis

4 more replies
Relevance 86.92%

Hello everyone,

Recently, I have been having an issue with my computer connecting to the internet using IE8. After a restart of the computer, I am able to connect to the internet, but if I close the browser and try to log in later I am not able to get to the internet.

Today, while trying to figure this out I noticed that I have multiple instances of iexplorer listed in Task Manager even when IE is not open.

Hoping someone could be of assistance. Here are the logs that are requested. I have the Attach.txt log but have been unable to attach it to this post.

HijackThis Log

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:14:23 PM, on 1/16/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Charter Security Suite\Anti-Virus\fsgk32st.exe
C:\Program Files\Charter Security Suite\Common\FSMA32.EXE
C:\Program F... Read more

More replies
Relevance 86.92%

I made a mistake by trying to download something I didn't trust, now I'm quite certain there's a virus. Microsoft Security Essentials isn't able to clean it, it detects it and I know where the file is, but it just gets stuck on cleaning it.
 
Items: 
containerfile:C:\Users\April\AppData\Local\Google\Chrome\User Data\Default\File System\005\p\00\00000001
file:C:\Users\April\AppData\Local\Google\Chrome\User Data\Default\File System\005\p\00\00000001->The Sims 4 (Origin) PC full game + DLC ^^nosTEAM^^/Sims4-Origins-nosTEAM.part3.rar->The Sims 4\Game\Bin\3dmgame.dll

Answer:Multiple instances of iexplorer.exe in task manager

Welcome aboard  Download TDSSKiller and save it to your desktop.Doubleclick on TDSSKiller.exe to run the application, then on Start Scan.If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here.

3 more replies
Relevance 85.69%

My problem is that my computer has been running slow because I have multiple instances of iexplorer.exe running in the process manager for some reason.. Although I use internet explorer, even after I close it, the iexplorer.exe will stay open in process manager, and not just one instance of it, but multiple.. From 2-4.. Any help would be appreciated..Thanks in advance..Running windows xp LEGIT not cracked..Logfile of Trend Micro HijackThis v2.0.2Scan saved at 2:32:35 PM, on 4/11/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\windows\system\hpsysdrv.exeC:\WINDOWS\system32\hkcmd.exeC:\HP\KBD\KBD.EXEC:\Program Files\Multimedia Card Reader\shwicon2k.exeC:\Program Files\HP\HP Software Update\HPWuSchd2.exeC:\Program Files\ESET\ESET Smart Security\egui.exeC:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exeC:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exeC:\WINDOWS\ALCXMNTR.EXEC:\... Read more

Answer:iexplorer.exe eats my bandwidth! multiple instances open

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions... Read more

14 more replies
Relevance 85.69%

I did the unthinkable and attempted to install some questionable software. Now it seems my computer is infected. Any open Windows Explorer window will close after a few seconds and multiple instances of Internet Explorer are magically open in the task manager using CPU and DISK.
 
I am running Windows 8.1 Pro x64
I have tried a normal scan using malwarebytes and adwcleaner but the only thing that popped from malwarebytes was PUP.Optional.Somoto.  I am currently running the ESET online scanner and am willing to run a bunch of tools and post lots of logs
 
Thanks in advance for the help.

Answer:explorer.exe crashing -- multiple instances of iexplorer.exe open

ESET online scanner results:
 
C:\Users\All Users\Microsoft\Crypto\RSA64\rsa64.dll a variant of Win64/Sathurbot.A trojan
C:\Users\All Users\Microsoft\Crypto\RSA64\temp\tmp809A.exe a variant of Win32/Injector.BIDT trojan
C:\ProgramData\Microsoft\Crypto\RSA64\rsa64.dll a variant of Win64/Sathurbot.A trojan cleaned by deleting - quarantined
C:\ProgramData\Microsoft\Crypto\RSA64\temp\tmp809A.exe a variant of Win32/Injector.BIDT trojan cleaned by deleting - quarantined
C:\Users\blave\AppData\Local\Temp\rd.exe a variant of Win32/OutBrowse.AB potentially unwanted application deleted - quarantined
C:\Users\blave\AppData\Local\Unlmedia\chrome.dll a variant of Win32/Packed.Themida.AAJ trojan cleaned by deleting (after the next restart) - quarantined
D:\BACKUP\Carrie\Downloads\PDFConverterSetup.exe a variant of Win32/InstallCore.D potentially unwanted application deleted - quarantined
D:\Downloads\DTLite4491-0356.exe Win32/DownWare.L potentially unwanted application deleted - quarantined
D:\Downloads\isobuster_install.exe Win32/SmartFileAdvisor.A potentially unwanted application deleted - quarantined
D:\Downloads\sumo.exe Win32/DownWare.W potentially unwanted application deleted - quarantined
D:\Games\Trials Fusion\datapack\uplay_r1_loader64.dll a variant of Win32/Packed.VMProtect.ABD trojan cleaned by deleting - quarantined
Operating memory multiple threats
It was able to remove all except the first two. I used Unlocker to delete the entire contents of C:\Users\All Users\Mi... Read more

4 more replies
Relevance 84.87%

Hello everyone,

Recently, I have been having an issue with my computer connecting to the internet using IE7. After a restart of the computer, I am able to connect to the internet, but if I close the browser and try to log in later I am not able to get to the internet.

Today, while trying to figure this out I noticed that I have multiple instances of iexplorer listed in Task Manager even when IE is not open.

Any assistance that you may provide would be greatly appreciated.

Thanks
 

Answer:IE not reponding when launched, Multiple instances of iexplorer.exe in task manager.

So I just noticed that I should have posted several scan logs for this. Here are the logs for HijackThis and GMER. I could not get the DDS scan to complete as I kept getting a Blues Screen of Death when running it.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:38:47 AM, on 12/11/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Charter Security Suite\Anti-Virus\fsgk32st.exe
C:\Program Files\Charter Security Suite\Common\FSMA32.EXE
C:\Program Files\Charter Security Suite\Anti-Virus\FSGK32.EXE
C:\Program Files\Charter Security Suite\Common\FSHDLL32.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\stsystr... Read more

1 more replies
Relevance 84.87%

Over the past few days, I have noticed my computer behaving strangely.Windows starts up every 2nd or 3rd timewindows takes forever to startsystem is at 100% capacity even when no programs are runningsystem processes run when I haven't started the programs: calc.exe (one to five instances at the same time), cmd.exe (starts with one and gradually increases to 5-10), iexplorer.exe (starts with one, increases, and uses about 5000kb each. I rarely use IE and when I do, it opens under "owner" not "system")Suddenly, my laptop went from 2GB free to 300MB free. I hadn't installed or downloaded anything that I know of. In fact, I have been deleting unused programs and files and clearing out my recycling bin.I've tried running AVG virus scan, but it takes 20+ hours and my laptop overheats and shuts off before it finishes. All it finds are cookies. I've since tried running a couple different scans to see if it's just that AVG isn't powerful enough.This wasn't the case before...I could complete the virus scan in a few hours. I really don't know what is wrong. I know my laptop is getting old and decrepit but I am trying to make it last as long as possible. Thanks for your help!This is my HiJackThis txt:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:18:45 PM, on 2/23/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16762)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\s... Read more

Answer:Multiple instances of calc.exe, cmd.exe, iexplorer.exe, degraded system performance

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for p... Read more

3 more replies
Relevance 84.87%

Hello, this is my first time here.
I recently had to travel alot and leavin my laptop for long peroids of time with people who had access to it before I was able to retrieve it. And this happened a few times. Each time I had the time I sat down and tried to work on the problems as I started seeing them come up, the reason for my asking for a helping hand is because it's come to the point where they are coming in faster than I can get rid of them.
 
Now about the current problems.
Every time I turn my laptop on I notice my CPU slowly but constantly climb, when investigating it in the task manager, I noticed multiple instances of "iexplorer.exe *32 bit" and "iexplorer.exe" running, no matter how many or how fast I close them, they keep coming back.
When using either chrome or firefox my homepage keeps getting set to www.trovi.com and google searches are almost always redirected, hitting back will result in either a blank page or the page I had originally clicked on it's 50/50.
I'm not sure if this is virus related or not, but it only started happening while I was away, the CD rom will either accept a disc then spit it out, won't accept it at all, it'll accept it and play, accept it and not play, or any combo of the above, and not let me spit it out unless I reboot and spit it out on start up. The problem starts that, this is all with the same 3 new discs, that are clean and without a scratch.
 
One other thing to note, I do not have my windows disc any longer (Not tha... Read more

Answer:Browser redirection, Multiple iexplorer.exe instances eating CPU (No more space)

Hi there,this doesn't look to good.. The computer is severly infected.Let's gather some more information first to see if there is also a bootkit present:Please download TDSSKiller and save it to your Desktop.Start tdsskiller.exe with administrator privileges.Accept the EULA and the KSN Statement.Click on Change parameters.Make sure that all available options (except "Loaded modules") are checked and click OK.Click on Start scan.If any threats are found don't delete them but choose the Skip option for all of them.Click on Report to open the log file. (It is also saved at C:\TDSSKiller.<version_date_time>_log.txt).Copy and paste its contents in your next reply.

14 more replies
Relevance 66.83%

Please check my HijackThis logfile and let me know if something looks strange. My computer is running very slow. I have run malwarebytes and it found nothing. I have one iexplorer window up and it shows two processes running? Please help.Thanks, KenLogfile of Trend Micro HijackThis v2.0.2Scan saved at 10:24:55 AM, on 10/20/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeD:\Program Files\Java\jre6\bin\jusched.exeC:\WINDOWS\system32\ctfmon.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeD:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\WINDOWS\system32\taskmgr.exeC:\Program Files\Trend Micro\HijackThis\HijackTh... Read more

Answer:Two Instances of Iexplorer.exe in processes

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Relevance 66.42%

I have noticed of late that I have two iexplorer.exe programs running in task manager at the same time so I think I have something going on. I would like to fix it. I have uninstalled ie 8 and reinstalled and it's still doing it so I think the problem is getting bad.

any help would be greatly appreciated

Answer:two instances of iexplorer.exe running at the same time

Hello,Please follow the instructions in ==>This Guide<== starting at step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then post them in a reply to this topic by using the Add Reply button.If you can produce at least some of the logs, then please create the post and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Please note that I am not a member of the Malware Removal Team and will not be assisting you in removing the infection. I'm simply helping you to post the information they need in order to assist you.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.Orange Blossom

8 more replies
Relevance 66.42%

The computer has become extremely slow and I have been getting pop ups. As soon as I start the computer two instances of iexplorer.exe are running. can someone take a look at my hijack this log thanks
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 6:57:43 AM, on 6/27/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\USB Disk Win98 Driver\Res.EXE
C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE
C:\Program Files\McAfee\Common Framework\UdaterUI.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\WALGRE~1\WALGRE~1\data\Xtras\mssysmgr.exe
C:\Program Files\McAfee\Common Framework\McTray.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\iPod\bin\iPodService.exe
E:\PortableApps\PortableAppsMenu\PortableAppsMenu.exe
E:\Port... Read more

Answer:Solved: two instances of iexplorer runing

anybody want to have a crack at it
 

2 more replies
Relevance 66.42%

Hello, my infection constantly tries to open iexplorer and go to chinaontv.com, findology.com, abcjmp.com.

Thanks in advance for your help.
below is my dds scan log file:

DDS (Ver_09-06-26.01) - NTFSx86
Run by RyRy at 8:20:34.70 on Sat 06/27/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3455.2823 [GMT -6:00]

AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\nvraidservice.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
svchost.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
C:\Program Files\Logitech\Logitech WebCam Software ... Read more

Answer:Hidden iexplorer.exe, 10 instances, "chinaontv.com"

SOLVED.

virus was caught at startup and cleand using Avast. Virus installed itself to the system32 directory as ctfmon_su.exe

Avast is the only thing that saw it. Panda, Mcafee, Spybot all failed to catch it.

2 more replies
Relevance 65.6%

I have a friends laptop that is "running slow", especially on the internet. IT is a Compac Presario CQ60 running Windows 7 Home Premium w/4 mgs of memory. The only anti-virus program I found was MS Essentials and Windows Defender. She complains of the browser running way too slow. I found that in Task Manager there are a lot of instances of iexplorer.exe running, even if I haven't launched this browser. I then tried Chrome and find the same thing showing up in Task Manager. I have run Malwarebytes Anti-malware and it found 455 instances of crap, which I had it delete. I also noticed that it would get pop-ups every 30 seconds from Malwarebytes trying to contact to different websites with bad reputations. Of course the program blocked it. I ran through the steps in your Malware Removal thread and will post the logs below. After running through all of the steps, her laptop is running much better and I do not see any issues of the browser running slow or see many instances showing up in the Task Manager. I will await your feedback.

Thanks, Stormy
 

Answer:Too Many Instances Of Iexplorer Showing In Task Manager

The logs look good. You can re run Malware Bytes and have it remove anything else it may find.
You can then use Windows Explorer to find and delete:

C:\Program Files (x86)\GUMDECA.tmp
C:\Program Files (x86)\GUTDEEA.tmp

If you are not having any other malware problems, it is time to do our final steps:
We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
After doing the above, you should work thru the below link:
How to Protect yourself from malware!
 

6 more replies
Relevance 65.6%

Okay, I have a stupid issue with IE running in my background, which will NOT go away, i try ending the processes, but they come back right away using 8,000k of memory eahc time, sometimes upwards of 4 of them open, and reluctant to close

Google searching this i have found this could be the work of some sort of virus controlling how they run and could very well cripple my system over time, so i need some insight into this, am I being too paranoid or is this a legitimate issue that i am having trouble ridding of?

I did run superantispyware, spybot S&D and CCleaner as one youtube thing told me to try, as my AVIRA program will not find anything and nor did the three listed before, so i tried combofix last and even that didnt give me any results. should I post the Combofix log?

Answer:two iexplorer.exe instances running - wont close

Hi Khanar,If you think your computer may be infected I would recommend posting in the Am I infected? What do I do?Before posting read Before You Post About A Problem .Pauline

2 more replies
Relevance 65.6%

Okay, I have a stupid issue with IE running in my background, which will NOT go away, i try ending the processes, but they come back right away using 8,000k of memory eahc time, sometimes upwards of 4 of them open, and reluctant to close, I dont even use IE at all, i am a firefox userGoogle searching this i have found this could be the work of some sort of virus controlling how they run and could very well cripple my system over time, so i need some insight into this, am I being too paranoid or is this a legitimate issue that i am having trouble ridding of?I did run superantispyware, spybot S&D and CCleaner as one youtube thing told me to try, as my AVIRA program will not find anything and nor did the three listed before, so i tried combofix last and even that didnt give me any results. should I post the Combofix log? (told to post in this forum rather than another)

Answer:two iexplorer.exe instances running - wont close

Welcome aboard Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next t... Read more

1 more replies
Relevance 65.19%

Hi there, first time poster but after googling my problem I found myself clicking on links to this site often enough, so I figured why not.
 
My computer is experiencing erratic, temporary (yet highly frustrating), halts or lag when opening closing programs, using chrome, basically it can happen at any time. I have followed all of the guides available and the only thing I notice odd is that iexplorer.exe and iexplorer.exe *32 have multiple running processes, even though I am not using it. The only other thing that I can think of is that I disabled Divx Update from starting up in msconfig, as it would attempt to update and never finish, giving me error messages. 
 
The divx error message, and random errors saying that adobe flash player must be installed to view this are the only real technical error screens I have seen, beyond a program (vlc, steam, etc) freezing up and windows saying it has stopped responding. Do I have some kind of virus my stuff isn't picking up? Any help would be greatly appreciated!
 
 
 
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 10.0.9200.16611  BrowserJavaVersion: 10.21.2
Run by John at 3:16:58 on 2013-06-27
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.8109.3283 [GMT -4:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updat... Read more

Answer:Multiple iexplorer / iexplorer *32 chewing up resources when not in use

soooo many other people have been responded to =/ i feel left out i guess

13 more replies
Relevance 64.78%

Hello,

I am in desperate need of a rescue! My computer is not running slow or freezing (yet). It actually runs pretty well. However, I know there is a rogue virus present...if not two or three. This laptop once belonged to my girlfriend, who got it from her uncle, so I can't tell which files to keep and which to delete!!!!

First of all, I notice three or more instances of iexplorer.exe in taskmanager and process explorer, even when I am not connected to the internet. I have tried just about every logical solution posted on forums like bleepingcomputer.com, but still no luck. I tried deleting iexplorer.exe from the c:/program files/internet explore directory but the .exe just keeps coming back! I even tried to be smart and uncheck the load startup processes box in msconfig, restart, and then search for any iexplorer.exe in the wrong directory to delete them, close but no cigar. It just will not go away.

Secondly, I have been trying to use Malwarebytes (using a renamed mbam.exe from a prior virus problem), Spybot Search & Destroy, Auslogics Registry Cleaner, and even the newest AdAware to get rid of the virus. Malwarebytes will scan all the way through, and then it stops responding right b4 the completion, leaving me unable to click to see the report and fix the problems. However, if I abort the scan early Malwarebytes is able to show the report and fix the problems found, but there is still more to fix. The other antivirus programs will comp... Read more

Answer:Many instances of iexplorer.exe, MalwareBytes freezes right b4 quarantine, The Works...

If mbams hangs mid way thru scan Please add the following files to the exclusions list in your anti-virus:C:\WINDOWS\system32\drivers\mbam.sysC:\WINDOWS\system32\drivers\mbamswissarmy.sysC:\Program Files\Malwarebytes' Anti-Malware\mbam.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exeAlso try...ATFPlease download ATF Cleaner by Atribune & save it to your desktop.Double-click ATF-Cleaner.exe to run the program.Under Main "Select Files to Delete" choose: Select All.Click the Empty Selected button.If you use Firefox browser click Firefox at the top and choose: Select AllClick the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browser click Opera at the top and choose: Select AllClick the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program.Note: On Vista, "Windows Temp" is disabled. To empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator".------------------------------------SAS, may take a long time to scanPlease download and scan with SUPERAntiSpyware FreeDouble-click SUPERAntiSypware.exe and use the default settings for installation.An icon will be created on your desktop. Double-click that ico... Read more

4 more replies
Relevance 64.78%

I've read around and tried typing net administrator /active:yes and I could'nt delete the file still, kept telling me I needed permission. I then tried a System Restore, but here it was in the registry or something, so that didn't work either. Then, I got HijackThis and here are my logs, on the task managers > processes tab, there are A LOT of winlogon.exe and iexplorer.exe's running, please help me Logfile of Trend Micro HijackThis v2.0.2Scan saved at 5:18:52 PM, on 2/6/2010Platform: Windows Vista (WinNT 6.00.1904)MSIE: Internet Explorer v8.00 (8.00.6001.18882)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\explorer.exeC:\hp\support\hpsysdrv.exeC:\Program Files\HP\HP Software Update\hpwuSchd2.exeC:\Program Files\Lexmark 1300 Series\lxdcamon.exeC:\Windows\System32\jusched.exeC:\Program Files\Sophos\AutoUpdate\ALMon.exeC:\Windows\system32\rundll32.exeC:\Windows\system32\Taskmgr.exeC:\hp\kbd\kbd.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Inte... Read more

Answer:winlogon.exe -- iexplorer.exe (ALOT OF INSTANCES RUNNING AT THE SAME TIME)

Hello and welcome to Bleeping Computer! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Fo... Read more

2 more replies
Relevance 63.96%

Hi,
 
One account on my home computer recently started having a pop up message about 4 minutes after logging in.  The message says:  "Internet Explorer has stopped working"  "A problem caused the program to stop working correctly.  Windows will close the program and notify you if a solution is available.".    
 
This would pop up even if internet explorer wasn't started.   Looking through task manager and process explorer,  I found that there were two instances of iexplorer running with svchost.exe being the parent process.   I'm also seeing some unusual command line options on these two iexplorer process that make me suspicious that it maybe malware.
 
C:\Program Files\Internet Explorer\iexplore.exe" –Embedding
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:xxxx CREDAT:xxxxxx /prefetch:2
 
(where xxxx are numbers)
 
I've scanned with microsoft security essentials and Malwarebytes,    Initially MSE found some problems and cleaned things up but I still have these processes running under just one user.
 
Any idea what and why these are being started as one user?
 
Thanks,
Rob

Answer:svchost.exe spawning two instances of iexplorer with SCODEF & CREDAT paramaters

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Up... Read more

21 more replies
Relevance 63.96%

Hi,

I have a very similar, if not identical problem to that mentioned in : http://forums.techguy.org/virus-other-malware-removal/940054-clicking-sounds-invisible-pop-ups.html

"Been having this issue since a couple of days.

Clicking sounds, like when you open a program. When that happens, I ALT+TAB and a Windows Explorer icon appears (I use Firefox), usually with ads or something related, I try to select it, but nothing happens, I ALT+TAB again, and the icon disappears. It doesn't happens always when it clicks, but most of the time. Hope that makes sense.

Also audio ads on the background.

Don't know if it matters, but when I disconnect from the internet and the pop-up issue gets way worse."

Should I follow the same procedures advised in that thread and post the logs here?

Thanks very much for you help.
PS. I am quite concerned that my Norton Internet Security 2010 did not pick this up, even when I manually scanned my system.
 

Answer:Clicking sounds, invisible multi-instances of iexplorer.exe, audio ads etc

9 more replies
Relevance 61.09%

My computer is slow and locking up. I noticed yesterday I have duplicate processes and new processes running with .exe *32. Chrome is duplicated this way too. Then, when I opened Internet Explorer, IE was duplicated and Bing and Bing Bar was duplicated. I followed all the instructions and am uploading the files requested below.

Here are some examples of the files that are showing in my Task Manger:
armsvc.exe *32
BBsvc.EXE *32
Evernote.exe*32
EvernoteClipper.exe *32
afcdpsrv.exe *32
chrome.exe *32
chrome.exe *32
chrome.exe *32
chrome.exe *32
chrome.exe *32
chrome.exe *32
GoolgeCrashHandler.exe *32
Evernote.exe*32
EvernoteClipper.exe*32
EvernoteTray.exe*32
jhi_service.exe*32
LMS.exe*32
mbamscheduler.exe*32
mbamservice.exe*32
mbam.exe*32
ONENOTEM.exe*32
WINWORD.exe*32
SkypeC2CPNRSvc.exe*32
SkypeC2CAutoUpdateSvc.exe*32
UNS.exe*32
 

Answer:Multiple Processes With .exe *32 Extensions. Multiple Chrome Instances Too.

I am not seeing any malware in those logs at all.

If you are not having any other malware problems, it is time to do our final steps:
We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
After doing the above, you should work thru the below link:
How to Protect yourself from malware!
 

7 more replies
Relevance 56.58%
Question: Multiple Instances

Well could anyone tells me why window could play multiple song in different media player without going into deadlock

Answer:Multiple Instances

Why not ?  It is just an example of multi-tasking. It is entirely possible to run WMP and, say, VLC, at the same time.
 
In fact you just made me try an experiment. Using VLC I started a music track running then switched over to YouTube and started a video going. I was able to hear both the voice-over on the video and my music track. I admit this surprised me since I expected the video would disable the music track, but no.
 
Chris Cosgrove

1 more replies
Relevance 56.58%

Any advice from any of you pros about setting up my Internet Explorer so that I can run multiple instances of it? Whenever I click the icon again, the current window closes and a new one opens. Also on some sites, it will close and open in a new window and won't let me hit the back button...
Thanks!

Answer:how to:? multiple instances of IE in XP

Has it always been like that? Try to "restore defaults" in the advanced tab of internet options. I don't think that will fix it, but its worth a shot (if you don't want to restore defaults you can try just disabling "resuse windows for launching shortcuts").

Also, try hitting ctrl + n and see if it opens a new window

If that doesn't work you might try checking for viruses or spyware (or anti-spyware software that won't allow more than 1 instance to block popups)

Would you mind posting system specs? (e.g. manufacturer if preassembled, cpu, etc...)

5 more replies
Relevance 56.58%

Hello, thank you for hosting this forum!
I used to be able to click on the IE icon and open multiple instances/internet windows.
I am no longer able to do so. I searched (googled this problem) and found a discussion board (old - 2002) that might point to BHO as the root of the problem, but I am not experienced enough to know how to disable a BHO.
I would copy and paste the advice given by one savvy BHO techie, but I need to copy to a word doc, then copy & paste here, since opening another IE window results in overriding this one.
I use XP Professional.
I recently installed Adobe Acrobat version 7, which includes a speed launch.
I use Webroot for spyware protection, and recently upgraded Webroot to the newest version.
I am not sure if the mulitple instance ability was working at the time I updated Webroot/installed Adobe.
I will search for the BHO info and post shortly.
Thanks for your help!

Answer:Multiple Instances Of Ie

Hello, thank you for hosting this forum!I used to be able to click on the IE icon and open multiple instances/internet windows. I am no longer able to do so. I searched (googled this problem) and found a discussion board (old - 2002) that might point to BHO as the root of the problem, but I am not experienced enough to know how to disable a BHO.I would copy and paste the advice given by one savvy BHO techie, but I need to copy to a word doc, then copy & paste here, since opening another IE window results in overriding this one.I use XP Professional.I recently installed Adobe Acrobat version 7, which includes a speed launch.I use Webroot for spyware protection, and recently upgraded Webroot to the newest version.I am not sure if the mulitple instance ability was working at the time I updated Webroot/installed Adobe. I will search for the BHO info and post shortly.Thanks for your help!Here is what I found in a google search from 2002:"Request for Answer Clarification by edwardj51-ga on 12 May 2002 15:07 PDT If my IE6 installation was functioning normally, I would be able toclick the Internet Explorer icon, say, 3 times to bring up 3 windows.My question is 1) why did this capability go away? and 2) How do Iget it back?"edwardj51-ga:I ran a search against Google Groups and found someone with exactlythe problem you are experiencing. The link (and piece of softwarementioned in it) should fix your problem. I've used the program myselfand it works.[url="http:/... Read more

1 more replies
Relevance 56.58%

Did a quick search on the forums but maybe I wasn't searching the right keywords :-\

Does anyone know how to run multiple instances of any given program? If you try to load the same program twice it will throw you into the currently running app. I do not want this for what I am trying to do. So, is there some way to get two seperate instances of the same program?
 

Answer:Run Multiple Instances.

how about letting us know what program... sure its possible
 

2 more replies
Relevance 56.58%

Sometimes when opening a site, IE stalls and I have to type CTRL/ALT/DELETE to open the task manager. Many times I find numerous instances of IE running in the Services area. If I stop the individual IE's the site will then open properly. This action is not exclusive to any one particular site but can happen when I try to view any random site. Any ideas what to do to correct this?
 

Answer:Multiple Instances of IE

I tried to edit my question but was not quick enough. I meant to say that I found the multiple instances of IE in the PROCESSES area and not the Services area.
 

2 more replies
Relevance 56.58%

I have Windows 7

I have multiple installations of Microsoft Visual C++ (see pic below)



I also noticed that a computer with XP on it had multiple installations of .NET Framework (see pic below)



Are these all needed? Just wondering...

Answer:Multiple Instances..

The images are very tiny on my screen, and when I expand them, they're blurry, but I think I'm reading them correctly anyway.
They look like different versions or patch-levels.
There's .NetFramework 1.1, 2.2, 3.0, 3.5, plus each has patches and service packs, so it's not unusual to see multiple versions, or even the same version with different patch-levels.

It also looks like you have Windows 7 x64, so you sometimes will get both the x32 and the x64 versions, since every x64 system has quite a few x32 applications. If nothing else, Internet Explorer comes in both x32 and x64 versions. Since many web sites require Flash and other plugins/addins to run (most plugins only come in x32), many sites won't even function with IEx64. That's an example of why you need both versions of .Net.

The thing with Visual C++ though is that many programs need Visual C++ components. Many installers install blind - they don't check your computer to see if the components already exist, or a newer, compatible component is available. For backwards-compatibility, older components are often shoved onto a newer computer. It sure adds lots of clutter, but it makes your computer more robust. Most of us can run just about anything, these days. There are even a few things that didn't run on my Vista PC that will run on Windows 7, without even using XPMode.

3 more replies
Relevance 56.17%

As the title says. I can close them but they just pop up again after roughly 5 minutes. Seems to be opening weird programs I've never seen (in Process Viewer).
 
I made a post once before but a bunch of stuff happened and I wasn't able to follow through.
 
Thanks for your time.

Answer:Multiple Instances of dllhost.exe

Start with the scanning for Poweliks. If it is found and removed there will be more cleanup of other malware to do.
 
Please download Powelikscleaner (by ESET) and save it to your Desktop. (let me know if poweliks was found and removed as shown in the last image)
1.  Double-click on ESETPoweliksCleaner.exe to start the tool.
2.  Read the terms of the End-user license agreement and click Agree.
3.  The tool will run automatically. If the cleaner finds a Poweliks infection, press the Y key on your keyboard to remove it.
 

 
4.  If Poweliks was detected "Win32/Poweliks was successfully removed from your system" will be displayed. Press any key to exit the tool and reboot your PC.
 

27 more replies
Relevance 56.17%

Hello. I'm running Win 7 x64 on an Alienware Aurora desktop PC. Every few days Norton Internet Security reports that at least one of my CPUs is at 100% capacity because of realplay.exe. Task Manager "Processes" tab then shows four or five instances of realplay.exe running, even though I haven't intentionally opened the program. I think it usually happens when I've been watching a video with another program, though I haven't kept track. Norton Anti-Virus says my machine is clean of viruses and spyware.

Thanks for any help.

Here are my results from TSG SysInfo:

Tech Support Guy System Info Utility version 1.0.0.1
OS Version: Microsoft Windows 7 Ultimate , Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, Intel64 Family 6 Model 26 Stepping 5
Processor Count: 8
RAM: 8182 Mb
Graphics Card: ATI Radeon HD 5900 Series, 1024 Mb
Hard Drives: C: Total - 944447 MB, Free - 588043 MB; D: Total - 953866 MB, Free - 639438 MB; K: Total - 953867 MB, Free - 121498 MB; P: Total - 476937 MB, Free - 257639 MB; R: Total - 1430796 MB, Free - 458162 MB; S: Total - 953867 MB, Free - 707713 MB;
Motherboard: Alienware, 0H869M, A00, ..CN697029AC0490.
Antivirus: Norton Internet Security, Updated and Enabled
 

Answer:Multiple instances of realplay.exe, 100% CPU use

Out of curiosity, do you really need RealPlayer? I dumped this program years ago and never looked back, it went from a good program to bloatware pretty fast and there are many alternatives available and few sites use RealPlayer content these days.
 

3 more replies
Relevance 56.17%

Hey Guys,I am trying to figure out why I have so much network traffic going back and forth. My computer is networked with other computers, but I unplugged all other computers from my router and only had it connected to the internet. My Local Area Connection Status window shows tons of packets uploading and downloading even when I am not doing anything via internet or intranet. I thought it could be windows update, but I am completely updated. Ran some virus scans and it is flagging svchost.exe as a problem. So not sure what is going on. Can anyone help? =) My Hijack log is below.BryanLogfile of HijackThis v1.99.1Scan saved at 7:08:43 PM, on 6/1/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0011)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\CAPM5RSK.EXEC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spool\drivers\w32x86\3\CAPM5SWK.EXEC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\ScanSoft\PaperPort\pptd40nt.exeC:\PRO... Read more

Answer:Multiple Instances Of Svchost.exe

Hi bpellican, I am SifuMike and I will be helping you. Ran some virus scans and it is flagging svchost.exe as a problem.Do you still have the virus scan log? If so, then post the virus scan log. Did it find a virus? If so, did it give you the location? You will need to use Internet Explorer for this scan. Disable your antivirus program and go here to run BitDefender Online Scan. Click on I Agree. Avoid clicking on other links as you don't need to try out the full install at this point, just the online scanner.When the ActiveX Control has loaded, click on "Click here to scan". Please be patient, as this scan may take a few hours. It all depends on the number of files on your computer. NOTE: If you are running XP SP2, you may need to click on the Information Bar to allow the ActiveX to install and may need to repeat the BitDefender Online Scan.When BitDefender completes the scan, select the "Detected Problems" tab. Click on "Click here to export scan". Save the file as an HTML to your Desktop. Then click on the saved file and allow it to open with your browser. Go to Edit - Select All then copy/paste that log back here. Post the BitDefender log.******************Download ATF (Atribune Temp File) Cleaner? by Atribune DO NOT run it yet. Download and install AVG Anti-Spyware 7.5 (formerly Ewido) This is a 30 day trial of the programAVG Anti-Spyware is designed to be used to both scan for and remove malicious files and also to run in real-ti... Read more

2 more replies
Relevance 56.17%

Hi All,

Did a search here but can't find anything related to this. I have Windows Explorer pinned to the taskbar.

How can I launch multiple instances so that I can drag files from one drive to another?

If I click on it in the taskbar, it just shows or hides the current view, but I need a second copy running.

Thanks

Answer:Multiple instances of Explorer -- how?

OK, just figured it out. I right click and there is a menu item for "Windows Explorer" which launches another copy.

I knew it had to be simple.

5 more replies
Relevance 56.17%

In Windows 7 I could hit the Windows key and then type calc for example and hit enter to fire up the calculator. I can still do that in Windows 8 but before when I would do that it in Windows 7 it would always open up a new a new instance. In
Windows 8 it just kicks back to the instance that is already running. Anyone know how to make it open a new instance?

Vincent Sprague

More replies
Relevance 56.17%

Hey guys, I have had multiple instances of mshta.exe running on my PC for a couple of days - I've tried using standard AV software (Symantec, Avast) and have always used a firewall (ZoneAlarm) and run weekly spybot checks. However, I had a couple of viruses detected previously that I deleted from Symantec's quarantine, but was still having google searches hijacked using IE or Chrome.

In the middle of running the GRME software (note that it detected rootkits on initial launch) a few minutes ago (when the multiple mshta.exe were running), I blue screened and thus had to reboot.

Since then, I've thus redone the DDS Download and GMRE links, but I have the older files for the DDS (before the crash) if those are more helpful (after the blue screen reboot, no instances of mshta.exe are running). For now, I have rerun the DDS and GRME software here and used these new logs.


Sidenote: I wonder if the bluescreen means the rootkits have not loaded up again? Is that why I'm not detecting anything.
Update 2: My computer just froze, again. I wonder if the GMRE link is the issue.

Answer:Multiple instances of mshta.exe

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.

Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.

Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

2 more replies
Relevance 56.17%

I like several folks have been hit with malware.Exact same as this thread...http://www.bleepingcomputer.com/forums/topic331838.htmlI do not use IE, but firefox...all the sudden noticed multiple instances of iexplore.exe in task manager, my sound went dead, etc.would kill the iexplore.exe process and it would just keep coming back..I have tried MULTIPLE software packages all with no luck......I renamed iexplore.exe to iexplore.bak (and the various hidden ones) and that stopped it... but as soon as I renamed it back, it started right back up....I have attached requested logs...GMER crashed and would not finish (fast BSOD, couldn't catch the error)It appears that I am not the only one with this annoying issue.DDS (Ver_10-03-17.01) - NTFSx86 Run by Curtis at 17:14:28.10 on Thu 07/15/2010Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_07Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3070.2137 [GMT -4:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}AV: Emsisoft Anti-Malware *On-access scanning disabled* (Updated) {0F8591BB-342B-4493-91C3-4E948ED21255}============== Running Processes ===============C:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exe 4svchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupsvchost.exeC:\Program Files\AVG\AVG9&#... Read more

Answer:Multiple instances of iexplore.exe, et. al

if anyone finds this,..these worked for mehttp://www.techspot.com/vb/topic149687-2.htmlwhile not exactly the same.. it was able to get me in the ballpark and get up and running...

3 more replies
Relevance 56.17%

Hello Everyone:

I am having some issues which I'd appreciate some help with. I have experienced quite a few BSOD's and the error codes are

ATTEMPTED_SWITCH_FROM_DPC
MEMORY_MANAGEMENT
IRQL_NOT_LESS_OR_EQUAL
PFN_LIST_CORRUPT

I have tried to follow along with the other posts from BSOD crashes to fix this myself but I have to admit failure. any help will be appreciated.
I have tried to follow the posting instruction if anything is missing please let me know

Thank-you in advance

Jeff

Windows 7 Ultimate x64 installed Summer 2010
Homebuilt Computer
Full retail
Hardware 2009
Intel Q9550
ASUS P5Q delux motherboard
ATI Diamond All in wonder HD video card
4 x 2GB Crucial DDR2 800 4-4-4-12 Memory

Answer:Multiple instances of BSOD

1. ASACPI.sys the 2005 version is a huge cause of BSOD's






Quote:

Please visit this link: ASUSTeK Computer Inc.-Support- download_item_mkt
Scroll down to the Utilities category, then scroll down to the "ATK0110 driver for WindowsXP/Vista/Windows 7 32&64-bit " (it's about the 8th item down).
Download and install it.
Go to C:\Windows\System32\drivers to check and make sure that the ASACPI.sys file is date stamped from 2009 or 2010 (NOT 2005).



Code:
ASACPI.sys fffff880`0484f000 fffff880`04857000 0x00008000 0x42476c4c 28/03/2005 06:30:36
2. Please update this driver:
NCREMOTEPCI.SYS , which is Technisat digital satellite driver:
http://www.technisat.com/index149b.h..._Drivers,en,33

Code:
NCREMOTEPCI.SYS fffff880`02782000 fffff880`02790000 0x0000e000 0x4505cb76 12/09/2006 00:47:50
3. Dumps also indicate your GPU drivers as the culprit

(Do these steps even if you have already have the latest ATI drivers)

- Uninstall the ATI drivers including Catalyst Control Center
- Use driver sweeper to remove leftover ATI display driver files http://phyxion.net/Driver-Sweeper/Dr...Version-2-8-5/
- Reboot
- Install the latest drivers AMD Graphics Drivers & Software
- Reboot

4.Test your RAM(Do it if the above does not work)
RAM - Test with Memtest86+


Code:
BugCheck 100000B8, {fffff80002e0bc40, fffffa80061e3b60, 0, 0}

Unable to load image \SystemRoot\system32\DRIVERS\atikm... Read more

3 more replies
Relevance 56.17%

This isn't really a bug issue or anything, but I was wondering how I would go about running multiple instances of the same program.

For example, when I open Internet Explorer, it opens a new instance of the program every time I click the exe. But some programs don't do this. No matter how many times you click the exe, it will only check to see if the program is running, and avoid opening a new instance of the program.

So how could I go about this?
 

Answer:Running multiple instances...

You can usually start another instance from a Command Prompt using the START command. You most likely will have to use the complete path using the short name format.

i.e., progra~1

If you have questions about this and need more details let us know. If I am not around someone else should be able to help you.
 

2 more replies
Relevance 56.17%

I have a Dell Inspiron, 64 bit, that runs on Windows 7. Forgive me if I put a n00bish post, but I am at the end of my rope here. I wanted to try and fix it myself before coming here but I'm desperate.

Sometime in November, my computer bluescreened out of the blue. I didn't think much of it at the time. First of all, I baby my laptop, never install anything I'm not sure about, and I never go to sites if I'm not 100% confident in them. However, the shut downs started becoming more frequent, like once every three days. Then I started getting worried and rushed to start backing things up. Over time, I have discovered the following patterns:

1. It bluescreens whenever it is idle for more than 30 minutes
2. bluescreens after running for three hours
3. Bluescreens whenever I use windows to create a system back up. It won't even let me create my own system restore points anymore
4. bluescreens whenever I install ANYTHING
5. bluescreens whenever I try to update

Naturally I've tried doing virus scans. Got nothing. I tried repairing the disk. That went fine. I did a memory check, it says that the memory is good. I did a defrag, but it only made it through 80% before BSODing. And I did a system restore to the point before it started BSODing. No luck. All the drivers say they are up to date, as well.

Here's the thing, I NEVER do windows updates. I honestly don't trust them because windows updates have killed my last two laptops. But of course now that I actually try to install any... Read more

Answer:BSOD Multiple Instances/Possible Causes

Please upload your msinfo32.nfo file. To get this: Start Menu -> Type msinfo32 into the Search programs and files box -> When it opens, go to File, Save -> Save as msinfo32.nfo and save in a place you will remember -> Let it finish the process of gathering and saving the system info -> Right click the .nfo file, click send to compressed (zipped) folder -> Upload the .zip file here.

Please upload your msinfo32.txt file. To get this: Start Menu -> Type msinfo32 into the Search programs and files box -> When it opens, go to File, Export -> Save as msinfo32.txt and save in a place you will remember -> Let it finish the process of gathering and saving the system info -> Right click the .txt file, click send to compressed (zipped) folder -> Upload the .zip file here.

9 more replies
Relevance 56.17%

I have no clue where the proper posting place for this topic would be so forgive me if it is incorrectly placed....
I also can tell you i run XP pro. if this helps...
Anyways, I have about 20 or 21 instances of a file named "hpothb07.*" on my system. I already know that this is a HP file. The files are in formats
".dat" and
".tif" and
also two instances are in ".jpg".
They range in size from 1kb up to 364 kb.
The strange thing that made me notice this was that I had an image file with that name...but it had not been named this before. It had another name. When I opened the image file in preview, it appeared and at the top the file name in the header of the picture viewer was indeed it original name.
The file locations are listed as being in program files/hewlettpackard and also in just normal program files, no sub directory, and in c"/windows, and in my documents and also in my computer.

What the hell is up with this? Is this normal?
 

Answer:multiple instances of file

I can only guess since this seems to be pretty bizarre behavior for something as reputable as HP. I will assume it's a scanner.

Let's consider that when you normally use the scanner and its software, it runs from its own Directory. Then it creates all sorts of temporary files as it performs its jobs. Now lets consider that you have somehow gotten the executable software for the scanner outside its parent directory. Then it creates files where ever it may be resident. That's all a wild stab so we can't be sure at this point.

I would recommend uninstalling it, then doing a full clean up to insure that all files and directories are gone. Then run your favorite Registry cleaner (I like RegCleaner from JV) and get it all out.

Then reinstall it and see if its more sociable.

Good luck.
 

1 more replies
Relevance 56.17%

My WIndows 7 laptop is running several instances of iexplore.exe and is tying up the CPU. 
 
I've run malware and Microsoft Esstential scans cleaning off several viruses, but the problem still persists.
 
What would you suggest that I do to resolve this issue?
 
Thanks,
Scott

Answer:Multiple instances of iexplore.exe using up CPU

It's an issue only if you have no browser windows open in IE.  One instance of IE runs all the time...every time a new window is opened and remains open, an additional instance is reflected in Task Manager.  If you have 3 IE windows open...Task Manager should reflect 4 instances of iexplore running.
 
Louis

18 more replies
Relevance 56.17%

Hijackthis Log : Need help Hi:I am having problems with multiple instances of IE 7.0 appearing in the task manager. Please find the Hijackthis log Thanks,Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:13:24 PM, on 7/21/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Unable to get Internet Explorer version!Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Citrix\GoToMyPC\g2svc.exeC:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exeC:\Program Files\Citrix\GoToMyPC\g2comm.exeC:\Program Files\Citrix\GoToMyPC\g2pre.exeC:\Program Files\Citrix\GoToMyPC\g2tray.exec:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exec:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exeC:\Program Files\McAfee\MPF\MPFSrv.exeC:\WINDOWS\system32\nvsvc32.exeC:\Program Files\SiteAdvisor\6261\SAService.exeC:�... Read more

Answer:Multiple Instances Of Ie 7.0/ Computer 2

Looks like the following entry caused the problem and hence fixed

O21 - SSODL: SvcLauncher - {3D21F72C-DCD8-36E2-1230-D486AB9A9843} - C:\WINDOWS\system32\ybjewaxqh\Director_cxjyenay.dll
O22 - SharedTaskScheduler: SvcLauncher - {3D21F72C-DCD8-36E2-1230-D486AB9A9843} - C:\WINDOWS\system32\ybjewaxqh\Director_cxjyenay.dll

2 more replies
Relevance 56.17%

Hi:I am having a problem with an instance of IExplore.exe in the task manager without opening internet explorer. Please advise. I have included the Hijack log. ThanksRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Logitech\Bluetooth\LBTSERV.EXEC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeC:\WINDOWS\system32\drivers\dcfssvc.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exec:\program files\common files\mcafee\mna\mcnasvc.exec:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exeC:\WINDOWS\system32\dla\tfswctrl.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\Program Files\Logitech\SetPoint\LBTWiz.exeC:\PROGRA... Read more

Answer:Multiple Instances Of Ie 7.0/ Computer 1

Looks like the following entry caused the problem and hence fixed

O21 - SSODL: SvcLauncher - {3D21F72C-DCD8-36E2-1230-D486AB9A9843} - C:\WINDOWS\system32\ybjewaxqh\Director_cxjyenay.dll
O22 - SharedTaskScheduler: SvcLauncher - {3D21F72C-DCD8-36E2-1230-D486AB9A9843} - C:\WINDOWS\system32\ybjewaxqh\Director_cxjyenay.dll

3 more replies
Relevance 56.17%

My CPU usage is running at 100% - multiple instances of realplay.exe are the suspected culprit...Deleting gives me back my resources, but they show back up. Also have multiple (20+ !!!) of mshta.exe. that are not eating up resources/memory, but obviously an issue somewhere.

Thanks for any/all comments help...
Logfile of Trend Micro HijackThis

v2.0.4
Scan saved at 4:38:29 PM, on 3/26/2011
Platform: Windows XP SP3 (WinNT

5.01.2600)
MSIE: Internet Explorer v8.00

(8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common

Files\Apple\Mobile Device

Support\AppleMobileDeviceService.exe
C:\Program

Files\Bonjour\mDNSResponder.exe
C:\Program Files\Spyware

Doctor\BDT\BDTUpdateService.exe
C:\Program Files\Carbonite\Carbonite

Backup\carboniteservice.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\Common

Framework\FrameworkService.exe
C:\Program Files\Common

Files\Motive\McciCMService.exe
C:\Program Files\McAfee\VirusScan

Enterprise\Mcshield.exe
C:\Program Files\McAfee\VirusScan

Enterprise\VsTskMgr.exe
C:\Program Files\McAfee\C... Read more

Answer:cpu 100% multiple instances of realplay.exe

7 more replies
Relevance 56.17%

First the computer wouldn't even get past the "Windows is starting up" screen. I was able to get in using Last Known Good Configuration. I have used Malwarebytes antimalware and combofix. Seems to have cleaned some stuff up, but still slow and infected. Here is my HJT log. Please help.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 8:36:34 AM, on 10/2/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16705)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\PROGRA~1\Grisoft\AVG7\avgrssvc.exeC:\WINDOWS\System32\wltrysvc.exeC:\WINDOWS\System32\bcmwltry.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\ehome\ehtray.exeC:\Program Files\Google\Google Desktop Search\GoogleDesktop.exeC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC: ... Read more

Answer:Infected With Multiple Instances

Hello matthewdf,

Please post the reports from MBAM and ComboFix, and tell me why you think you're still infected.

Thanks,
tea

4 more replies
Relevance 56.17%

I on a daily basis run a program that use's the "web browser" control. Let's just say I need to constantly check 3 hotmail accounts (24-7), all with their own cookies etc.

So far, the only solution I've found is to create new user accounts under win7 & run 1 instance of the hotmail program on each username. Thus, keeping the cookies etc. seperate from each other & allowing me to login 3 accounts at once. By having 3 user accounts setup.

Please tell me there is an easier (less ram intensive) way to emulate seperate instances of the win7 operating system??

Thanks! :major
 

Answer:Best way to run multiple instances of Win7?

How about checking your 3 mail accounts with an email client like Outlook or Thunderbird? Then you won't need 3 user accounts or 3 Windows instances.
 

3 more replies
Relevance 56.17%

My computer is running fine but I'm worried about some processes I noticed in the Task Manager. There are 13 instances of the svchost.exe process which sounds like alot... so that's one of my worries. Also, one is consuming about 41,000 K of memory and another, about 60,000 K of memory. So, someone educate me on this. Is this typical for a Vista? How can I check if one is a legit process?

Answer:svchost.exe multiple instances

My Vista virtual machine has 12 svchost.exe processes running. I haven't added anything to it - so I'd suspect that 13 is OK
Mine range from 49,032 K to 38,480 K and lower.

I would suggest one of these free, online scans to ensure that there's no problem with the system: http://www.carrona.org/malware.html (read the details at the link)

If you want to find out what's running under each, right click on it and select "Go to services". That'll tell you which services are running under that particular svchost.exe process.

1 more replies
Relevance 56.17%

When we use chrome on our HP laptop we get multiple instances which seem to be using up excessive memory.

I am attaching a screenshot of our task manage. Anyone know how to resolve this?

bob
 

Answer:Multiple instances of Chrome

12 more replies
Relevance 56.17%

Hello, responsible web-browser here. Not sure how I got infected with this RAM-sucker.
 

More replies
Relevance 56.17%

hi,
 
Your post is a few days old. If you still need help simply reply back.

Answer:Multiple instances of iexplore.exe using up CPU

Hi,
my log is just actual.
 
I look that in task manager during start-up of Win7 I've a "tmpXXX.exe" process... .strange!!!.
Please look some screenshot at link belove if you can help me!!
 
https://dl.dropboxusercontent.com/u/53514665/malware.rar
 
Thanks.

13 more replies
Relevance 56.17%

One of my users is getting multiple instances of iexplore.exe opening when she opens her browser (using the regular desktop shortcut) and it prevents IE from working when it is opened again. The multiples are listed in the Processes list in the Task Manager, and you have to manually End each one and then things work.

I googled this and found that I could run the 'a-squared' malware tool and that they said it was a trojan is named something as: "Trojan-Downloader.Win32.Small.acp" or "Trojan-Dropper.Win32.Small.nz". But I ran that scan and found nothing. I have Symantec Anti-Virus with live updates running on our network and Exchange server and it also found nothing when I ran a scan.

What is making this happen and how can I fix?

Thanks!
 

Answer:multiple instances of iexplore.exe

sorry trying to answer another thread and didn't know how to delete my post:cry
 

1 more replies
Relevance 56.17%

Howdy,Have been working on removal of something that has jacked my system. I believe that I have one too many instances of svchost.exe running (7) and have been unable to find the cause. My system has done some strange things and I have disinfected it using the Bitdefender Online Scanner as the Zone Alarm firewall wasn't finding some of the items. Online scanner picked up some Trojans and a Backdoor. Disabled System Restore, and just installed AVG Free. So, here with out further ado is the log. Any help would be greatly appreciated.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:18:33 PM, on 1/22/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\AVG\AVG8\avgwdsvc.exeC:\WINDOWS\system32\f23hser.exeC:\WINDOWS\System32\GEARSec.exeC:\WINDOWS\system32\nvsvc32.exeC:\Program Files\SPAMfighter\sfus.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\SPAMfighter\SFAgent.exeC:\PROGRA~1\AVG\AVG8\avgtray.exeC:\P... Read more

Answer:HJT and svchost.exe multiple instances

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_ScanFollow the ... Read more

2 more replies
Relevance 56.17%

Hi there and thanks in advance for your help. My name is Kat.
 
I have multiple instances of Chrome running consistently making my computer as slow as molasses in January. I downloaded and ran the MalwareBytes file and it found nothing. I tried to download FRST.exe as instructed, but Norton catches it and removes it. Which is kind of ironic, seeing as it didn't catch whatever infected the machine in the first place. But I digress. What do I do next? If this is answered somewhere else, I apologize, I am brand new to the site.
 
Thanks again.

Answer:Multiple Chrome Instances

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
 
FRST is a safe program, so please temporarily disable norton real-time protection as described here and then download the latest version of Farbar Recovery Scan Tool and save it to your desktop. Don't kill any malicious processes at your own.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run ... Read more

17 more replies
Relevance 56.17%

Hello,

After installing sp2, task manager shows 4 loaded instances of EXPLORER.EXE. Any ideas?

TIA
 

Answer:Multiple instances of EXPLORER.EXE

yoav_by said:

Hello,

After installing sp2, task manager shows 4 loaded instances of EXPLORER.EXE. Any ideas?

TIAClick to expand...
welcome to the forums
are you having any problems? if so, you could download hijack this below, install it, scan with it, save it and then paste a copy here for someone to look at or post it on the security forum if you are having malware problems. hth...doc
 

3 more replies
Relevance 56.17%

So far my PC has downloaded about a dozen instances of the update KB835732. I have used auto update and then manual update. I downloaded it manually then restarted the machine, went back to the update website and it showed up as needing to be installed again! Is anyone else have this problem? It is a fairly fresh install of XP PRo (2 weeks ago). Ive updated it fully and this is the latest update i believe.Ta in advance.TeepeeXP Pro sp1640mb ddr 2100AMD XP2000Gigabyte GA 7VAX m/bsygate personal firewall pro 5.5AVG anti virus

Answer:XP is D/L'ing multiple instances of same update.

Try Diodorus Siculus' suggestion here: click here

3 more replies
Relevance 56.17%

Hi there! This is my first time here and I ran across BleepingComputer while I was trying to solve this problem. Recently, my computer started performing redirects and when it crashed once after, I got curious. Opened up my Task Manager and noticed there were numerous instances of "iexplore.exe" and "iexplore.exe *32" in there using up a lot of my CPU power despite myself using Firefox. I terminated them and rebooted in Safe Mode.
 
Since I first noticed the issues (March 22nd) I have been trying to run scans and such to remove any malware present. Any time I go back to Normal boot (without being connected to the Internet just in case) the processes immediately return upon booting and refuse to be terminated for more than a few minutes. I'm currently preforming all this from Safe Mode + Networking (Admin) as I have not encountered the issues with this rogue process while in any Safe Mode.
 
I'd really appreciate any help I can get. I was trying to solve it on my own, but after this long I'd much just rather have my main computer back so I can do homework on something other than my netbook. If you need any other background information, please feel free to ask. I'll try to get back to this topic post as quickly as possible. Thank you!
 
My logs are posted below:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 NETWORK
Internet Explorer: 11.0.9600.16428  BrowserJavaVersion: 10.9.2
Run by Admin at 3:03:50 on 2014-03-26
Microsoft Windows 7 Home Premium   6... Read more

Answer:Multiple instances of iexplore.exe using up CPU

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/528836 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

22 more replies
Relevance 56.17%

I'm moving computers. I want to have access to all the bookmarks from my old computer but dont necessarily want to import them into the firefox on my new computer. The way I was using it on the old computer it got all cluttered, while in the new one at the moment I only have a few important sites. Is there any way to have 2 different versions of FF so I can access my old bookmarks if need be without being overwhelmed with the 4+ years of bookmarks on the old computer?

Answer:multiple instances of firefox

Quote:





Originally Posted by bigdan


I'm moving computers. I want to have access to all the bookmarks from my old computer but dont necessarily want to import them into the firefox on my new computer. The way I was using it on the old computer it got all cluttered, while in the new one at the moment I only have a few important sites. Is there any way to have 2 different versions of FF so I can access my old bookmarks if need be without being overwhelmed with the 4+ years of bookmarks on the old computer?




Firefox has profiles for each user. It stores settings, bookmarks, etc. if you wanted to you can create a new profile and keep your old one to access your old bookmarks, this may help.
This can be done by first making sure your closed out of Firefox. Go to run and type in firefox.exe -p
This should give you the option of selecting, deleting and creating Firefox Profiles.

1 more replies
Relevance 56.17%

Hello,

Long story short:
I need to run 10-15 ish browser-windows of a webpage, at the same time, without the instances "knowing" about each other. They need to be as separated as if they where running on different machines/clients.
---

I want to believe this is possible, in that (for example) my old workplace had these computers in which the browsers where modified so that they where completely cut off the main system (no connection to the local system w.s.e (running on the network)).
---

My case:
In the browser-windows, on the server, there's a flash movie that's playing. It will stop if another is activated and played. I need to run multiple of these at the same time, but it's a bit tricky...


Any help on this subject is widely appreciated

Answer:How to run multiple separate instances of IE

Not sure if I fully understand what you are trying to do but I have just had two separate instances of You Tube open at the same time with both running the videos ee here:

2 more replies
Relevance 56.17%

Hey Guys, please take a moment and have a look see.
If you have any ideas please let me know.
Your help is very appreciated.
-Patrick Peterson

Also, Don't know if this will help. If I end the process using the second least (usually) memory consuming process of ddlhost.exe it will close all of the com surrogate processes.
 

Answer:ddlhost.exe multiple instances

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

1 more replies
Relevance 56.17%

Please help...i am an intermediate to pro pC user and have managed for years to get myself outta trouble when it comes to viruses...this one has me stumped.

James
Bay Area Wire Guy
 

Answer:DLLhost32 multiple instances

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

1 more replies
Relevance 56.17%

I have read the "how to post" guidelines, and I hope I am providing the proper information.

I am running Windows XP/SP3. Windows Firewall and Norton Antivirus are running with no problem. I had to disable Malwarebytes because it was freezing and apparently conflicts with Norton's product.

Three recent events have caused me to suspect that I am infected:

1) My mouse freezes for 3sec - 30sec multiple times per day. My machine also crashes at least once a day requiring a hard reboot. This is new bahavior.
2) Recently, my account was terminated at a commercial VPN site because they claimed I had shared my account information. They claim to have detected 95 other computers logging in with my account information. At no time have I (knowingly) shared my login details with anyone else. My password is of medium strength - composed of 7 alpha chars and one numeral.
3) Reading a description of Stuxnet, I noticed that one of its signatures was the existence of multiple instances of LSASS. Today when running "ClosetheDoor" from sysinternals I noticed that I had multiple instances of LSASS running. While I don't think I have Stuxnet, I see that this is a popular trojan pathway.

What I've done:

1) Regularly run Norton scans - both in the background and manually. I also booted into the "Norton Bootable Recovery Disk" and ran that scan with no problems. (It regularly flags "Active Ports" and some products from Nirsoft that I do not ... Read more

Answer:Multiple LSASS Instances

Hello,And welcome to BleepingComputer.com, before we can assist you with your question of: Am I infected? You will need to perform the following tasks and post the logs of each if you can.Malwarebytes Anti-MalwareNOTEMalwarebytes is now offering a free trial of their program, if you want to accept it you will need to enter some billing information, so that at the end of the trial you would be charged the cost of the product. Please decline this offer, if you are unable to provide billing information. If you want to try it out, then provide the billing information.Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program bef... Read more

7 more replies
Relevance 56.17%

Hi All,

For the last few days I have noticed that my pc would slow down.
When opening the taskmanager i saw that there were about 10 to 12 instances of IE running.
I rarely use it sinc I always use Chrome.
Superantispyware (free version) doesn't find anything when I scan my pc.

EDIT: this log was made after restarting my computer and it seems IE was not running at that time...
I'll wait untill it happens again and then post an update

This is the HJthis log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:39:52 PM, on 12/9/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 SP3 (8.00.6001.18702)
Boot mode: Normal

Running processes:
J:\WINDOWS\System32\smss.exe
J:\WINDOWS\system32\winlogon.exe
J:\WINDOWS\system32\services.exe
J:\WINDOWS\system32\lsass.exe
J:\WINDOWS\system32\svchost.exe
J:\Program Files\Microsoft Security Essentials\MsMpEng.exe
J:\WINDOWS\System32\svchost.exe
J:\WINDOWS\system32\spoolsv.exe
J:\Program Files\Soluto\soluto.exe
J:\WINDOWS\Explorer.EXE
J:\Program Files\Digidesign\Drivers\MMERefresh.exe
J:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
J:\Program Files\Soluto\SolutoService.exe
J:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
J:�... Read more

Answer:Multiple instances of IE.. I use Chrome

Hello and welcome to Bleeping Computer We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far. Upon completing the steps below another staff member will review your topic an do their best to resolve your issues. If you have already posted a DDS log, please do so again, as your situation may have changed. Use the 'Add Reply' and add the new log to this thread. Thanks and again sorry for the delay. We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scr DDS.pifDouble click on the DDS icon, allow it to run. A small box will open, with an explaination about the tool. No input is needed, the scan is running. Notepad will open with the results. Follow the instructions that... Read more

2 more replies
Relevance 56.17%

Hi all,
I'm trying to run multiple instances of a single (statistical) application on an Intel i7 machine so the instances can take advantages of all the processors. I have one wrinkle where I hope all the experts here would be able to help out. This application uses an MS Access db where all the data is stored. Ideally, it would be great if Vista and i7 would parallel process one instance of the app and the single db across all the processors. But after reading what multiple processors really means for today's apps, I realize that multiple processing/threading is an application issue. This is a statistical application that's not programmed for multi-processnig/threading.

So far, I was able to run two instances of the app against the single db. One instance as the admin user (I'm not sure if my terminology is correct) and another as admin. This is within the same user account. Both instances run different statistics against the same db on different processors. So i'm maximizing two processors.

Now can the experts out there tell me how I could launch two more instances of that app while still using the same db? I tried launching a third within the admin user accout but it said one instance already running. So I tried launching the third as admin but again said instance running. I also created another user account and ran it but it couldn't open the existing db. It need another db. I tried running as admin and still same. Any ideas?

Also, the i7 has 8 virtual proc... Read more

Answer:Multiple instances of app and one db across i7's processors

Interesting question.

First, I'd suggest being absolutely sure whether the app itself is multi-threaded. Perfmon can help with that. If you watch the "number of threads" counter for the app's process instance (under the PROCESS perfmon object), it will give you a simple count.

If it's anything more than one single thread, the next question is whether more than one thread does computational work when the app is under load. In other words, is more than one thread doing number crunching or is only a single thread chewing CPU while another 20 sit around and do not-very-much at the same time. That's a function of the app's design. The THREAD object in perfmon will allow you to zoom in on each individual thread's processor utilisation. Ideally, when under load, you'll see multiple threads consuming substantial amounts of processor time - 20% or above.

Otherwise, if it's a single-threaded app, or if it's limited to doing heavy computational work on one thread, then I think you're probably out of luck. Database locking and contention are the limiting factors. The app may or may not have been designed to have multiple DBMS processes working concurrently with the same database. If it's something on a relatively small scale, odds are it hasn't been designed to allow for the necessary locking and resource arbitration.

Large SQL servers and distributed enterprise apps are designed to scale with available hardware. That's part of their appeal ($$$). Custom apps for sm... Read more

12 more replies
Relevance 56.17%

I have multiple instances of many processes, such as Opera, Kaspersky, and Zune. I know at least two connections is okay, but seven or eight is incredibly suspicious. I'm very tight on my security, and have knoticed this, so any help would be of much use. Thanks!Having this many connections, and ports open is making me weary of the application itself. Is this normal?Windows Vista 64 BitSP 1IP V4 & V6 (I need both)

Answer:Multiple instances of the same process

I don't understand, you say you are very tight on security yet refuse to install SP2? Are you still using that easily hacked IE7 as well? What other MS updates have you failed to install? Try getting your OS and IE up to date and then see what happens...........

2 more replies
Relevance 56.17%

Using Process Explorer I see that there are multiple instances of svchost.exe running simultaneously on my computer. Should this be the case? All instances have different PID numbers. Not sure what PID is within this program.

Answer:Multiple Instances Of Svchost.exe

Yes. It is a generic process used by Windows for a variety of aps and seeing three, four or even five is not unusual.The following is a description by MS and though this page applies to W2k it is valid for XP as well:Description of Svchost.exe in Windows 2000http://support.microsoft.com/?kbid=250320

1 more replies
Relevance 56.17%

*note: I am using Windows 7 Home Premium x64 bit.

I've noticed something in my processes list via ProcessHacker. And my computer seems to make a large number of makecab.exe processes. I don't know where it is coming from but it could possibly have something to do with Windows update.

The problem started when there where some updates that would not actually complete, even though Windows said they did and they kept popping back up.



The updates are as follows:Security Update for Windows 7 for x64-based Systems (KB2676562)
Security Update for Windows 7 for x64-based Systems (KB2872339)
Update for Windows 7 for x64-based Systems (KB2882822)
Now, from what i discovered it is because a certain service is not activating properly but following many different forums i could not get it to become successful.

Now that you have the backstory back to the problem at hand. I get multiple instances of the makecab.exe process and when i terminate they go away and that's that. But the average size is maybe 302 kb and when i add all of them up, this time about 15 mb of those processes were created. I am attaching numerous screenshots of the information related to one of the processes. And pretty much everything about them is the same.

One thing that really worries me is that there is NO parent process attached to them. I've already checked my startup list and nothing suspicious or new.

View all of the images here:
http://imagebay.us/images/j3co93smukn7p05tfjy.png

Any help will b... Read more

More replies
Relevance 56.17%

Hi I am running XP home SP2 with all current updates applied. My system is 1ghz laptop with 256 mbytes of RAM. I just installed IE 7.

When I run IE, I get multiple iexplore.exe's running. I start out with two. Then it adds more and more iexplore.exe. Right now I have 16 iexplores running. Most consume only a meg of memory, but 4 of them are in the 16-20 mbytes. With only 256 RAM, the system gets really slow. Earlier today I had 20 iexplore's running. At that point all I could do was reboot and wait.

When I run opera it only starts 2 iexplore's. I can run opera all day and not have a problem. I would like to use IE because there are some sites that don't play nice with opera. Also opera doesn't have a spell checker that works well. IE works with ispell and that is an advantage.

I can kill the processes one at a time and get back to normal, but that is time consuming and I have to do it every hour or so. If any one has a fix for this, please let me know

Thanks

Answer:Multiple Instances Of Iexplore

hi, maxheadroom,this i believe is down to malware. try downloading, updating, and running a-squared - http://www.emsisoft.com/en/software/free/ - if this doesnt fix the prob, try posting a hi-jack this log,cheers

4 more replies
Relevance 56.17%

Hello heroes,

A coworkers PC has a virus. Please help.

I appreciate any time and help you can give me on this virus battle and will do my best to follow instructions faithfully and provide timely and relevant information to you.

Besides the multiple instances of mshta.exe running in task manager and the Just In Time debugger message that continues to pop up, the browser (IE) is constantly redirecting.

Here are my logs:
DDS (Ver_10-12-05.01) - NTFSx86
Run by markm at 17:22:47.33 on Wed 12/08/2010
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2002.1071 [GMT -8:00]

AV: Trend Micro OfficeScan Antivirus *On-access scanning enabled* (Updated) {4CA5B9AB-4295-4D4C-9664-0EBE85AE0525}
FW: Trend Micro Personal Firewall *enabled* {3E790E9E-6A5D-4303-A7F9-185EC20F3EB6}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Intel\AMT\atchksrv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Intel\AMT\LMS.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
C:\WINDOWS\Explorer.EXE
C:\Program File... Read more

Answer:multiple instances of mshta.exe

Hello and welcome to Bleeping Computer We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far. Upon completing the steps below another staff member will review your topic an do their best to resolve your issues. If you have already posted a DDS log, please do so again, as your situation may have changed. Use the 'Add Reply' and add the new log to this thread. Thanks and again sorry for the delay. We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scr DDS.pifDouble click on the DDS icon, allow it to run. A small box will open, with an explaination about the tool. No input is needed, the scan is running. Notepad will open with the results. Follow the instructions that... Read more

22 more replies
Relevance 56.17%

Thunderbird will only let you have one instance open at a time. On my Win7 setup, I have 2 user profiles (Windows, not Thunderbird) that I use for different purposes, and I switch back and forth between the two frequently. I would like to be able to have Thunderbird open at the same time in both users using the same Thunderbird profile.

I found a way to force Thunderbird to allow multiple instances using the -no-remote argument, but you have to be using different profiles. Does anyone know of a way to get it to do what I'm wanting?

Answer:Multiple instances of Thunderbird

If anyone cares, I found a solution. It's impossible to have two instances of the same profile open, but I figured out a workaround that satisfies me.

I just created two separate Thunderbird profiles, one for each Windows user. Then I set each profile up to access the same email accounts, using IMAP instead of POP so the messages stay on the server. This way, I can use the -no-remote switch because they're separate profiles, but I can still access the same email accounts and stay in sync. I put the -no-remote in my Thunderbird shortcut, so it just does that automatically now. So it ends up being pretty much what I wanted, just a different way of getting there.

1 more replies
Relevance 56.17%

Infection occurred within the last 2 months. Chrome crashing, CPU usage jumping up to 100%, initially multiple "Google Chrome" instances in processes under image nameRgeqkeojpv.exe. Uninstalled Chrome, now showing as multiple instances of dllhost 32*. Cannot end them before more regenerate.

Will follow instructions and run ADW ASW and FRST and post the logs when complete.

Regards
 

Answer:Multiple instances of dllhost 32 (100%CPU)

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

47 more replies
Relevance 56.17%

I often use two form sizes and styles for a dot matrix printer that we have for billing, payroll, and other things. It would be very convenient if I could set up two instances of the same printer, rename one of them, and then use different settings for each of them. I could then avoid changing the form and the paper size every time I wanted to print something different. The computer I am trying to set this up on is running xp pro. I have attempted to use the "add new printer" wizard but after stepping through it, I can not get it to add another instance of the same printer.

Thanks for your suggestions in advance.

More replies
Relevance 56.17%

Windows XP Home Edition (SP3)Computer became extremely slow as of late, I've checked the Task Manager and it looked like wuauclt.exe process was eating up the most memory (even though CPU was pretty low, computer was very slow to react). After checking couple of sites out there I?ve disabled Automatic Update via Control Panel and killed the wuauclt process (which was actually running after Auto Update was disabled).Things tried so far:- Turned Windows Auto Update off via C/panel.- Start>Search>wuauclt revealed several wuauclt related files. I?ve renamed wuauclt1 to wuauclt1_whatsthis and it instantly created 2 more files. Please see attached screenshot for file names and location.- Ran few different programs including ccleaner, eset, security task manager without any notable result. - Found these forums and went through steps 1-7 of the Preparation Guide. Getting stuck on step 8. GMER seems to put CPU at 100% causing me to manually reboot the system. CODEDDS (Ver_10-03-17.01) - NTFSx86  Run by Compaq_Owner at 11:00:08.34 on Tue 08/31/2010Internet Explorer: 8.0.6001.18702Microsoft Windows XP Home Edition  5.1.2600.3.1252.1.1033.18.446.69 [GMT -7:00]AV: ESET NOD32 Antivirus 4.2 *On-access scanning enabled* (Updated)   {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}============== Running Processes ===============C:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\... Read more

Answer:Multiple instances of wuauclt.exe

Hello splinn, My name is Syler and I will be helping you to solve your malware issues. Sorry for the delayin replying, we are very busy at the moment.Please note because we are very busy, if I don't hear from you within 5 days the topic will be closed, If youhave since resolved your issues I would appreciate if you would let me no so I can close this topic.Please download Malwarebytes' Anti-Malware from HereNote: If you already have Malwarebytes' Anti-Malware, just update then run it.Double Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Quick Scan", then click Scan (the scan may take some time to finish, so please be patient).When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy and Paste the entire report in your next reply .Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process,if asked to restart the... Read more

3 more replies
Relevance 56.17%

I'm having basically the same issues as shown in (SOLVED) - I need help with my computer I've tried multiple virus scans in safemode and such, but nothing has changed. If TwinHeadedEagle could help and provide a fixlist.txt as he did in the previous thread, that'd be wonderful.

FRST.txt and Addition.txt are attached.
 

Answer:Multiple instances of conhost.exe(among others)

There is a evidence of counterfeit operating system. I cannot offer you my help anymore.

Piracy Policy
 

1 more replies
Relevance 56.17%

I've noticed recently that mshta.exe has been showing up multiple times in Windows Task Manager. A new one seems to appear every 20 minutes or so, each one having about 9000 K of memory usage. There also seems to be an unusual amount of svchost.exe files, around 7 at any given time.

I've searched google and read about several similar cases of multiple mshta.exe files, but have yet to find a fix or known cause.

I followed all of the preparation instructions to a tee, however the GMER program has crashed my computer each time I've used it, so I have not been able to save a GMER report. The first time it showed a strange looking file named mbr.sys, but this did not show up the second time. The program runs for about 10 minutes, and then everything crashes and the computer needs to be restarted.

Thanks in advance for your time and help!

-Bill
DDS (Ver_10-11-27.01) - NTFSx86
Run by Bill and Larissa at 14:22:33.95 on Mon 11/29/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3061.2341 [GMT -5:00]

AV: AntiVir Desktop *On-access scanning disabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\W... Read more

Answer:mshta.exe multiple instances

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

18 more replies
Relevance 56.17%

Hi, starting today I've noticed that i have multiple instances of DWM.exe and winlogon.exe when i start my computer and I don't know why.  I've done a scan with Malwarbytes pro and it didn't find anything and i'm fairly certain there is only supposed to be one of each of those because i only have 1 user on my computer.  Any idea on what i should do?
 
Edit -  I cycled my computer by shutting it down and turning it on a couple of times trying to replicate the problem but now its just one of each so i'm not sure what the problem was but if anyone has an idea what was causing it please let me know.

Answer:Multiple instances of Dwm, Winlogon

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Update Malwarebytes' Ant... Read more

14 more replies
Relevance 56.17%

I have a Cannon printer connected to my network. Windows 8 found it and I'm printing wirelessly successfully.
But I often switch between printing 1 page for paper sheet, and 2 pages per paper sheet. Instead of updating the preferences for my printer each time I need to print,
I'd like to create a 2nd instance of my cannon printer. One instance I would name Cannon_1page the other Cannon_2page .
Then I would print to the appropriate printer (instance) depending on my different preferences.
Is this possible to set up?
I want to do something similar to this question, but in Windows 8.
Creating 2 instances of the same printer in Windows 7 - Windows 7 Help Forums

Answer:Multiple instances of the same printer

You can have a Network discovered and a printer that you install. But for what you are doing, just set up different preferences that you use, save them in the Printer Properties.

1 more replies
Relevance 56.17%

Has anyone encountered this issue?

I installed an HP Office Jet J4580 in Windows 8.1. It works fine.
However when I go to 'Devices and Printers' and right click on that printer (it is the only printer I installed), it shows a drop down box with three Office Jet J4500 Series. I can select any one of them and they all work, for instance when I print a test page.

Screenshot of the dropdown list:
View image: Printer properties

It bugs me that there are 3 listings of that one printer. Does anyone know how to resolve this?

Regards,
Mark

Answer:Multiple instances of one printer

Two ways to go. Unint=stall printers until there are none shown, then reinstall.

If it ain't broke don't fix it.

After the reinstall you may see multiple printers. You won;t know until you try it.

8 more replies
Relevance 56.17%

Hi

When I open explorer (the filesystem application not the webbrowser), and then try to open another instance of the same directory, the old instance of the program comes to the foreground but no new instance of the program is started.

I use multiple workspaces with dexpot, so this means that if I have a folder open on one workspace, I cant open it anywhere else.

Can this behaviour be turned off?

Answer:Allow multiple instances of explorer

hi scott9, and welcome to sevenforums,

i have no idea what dexpot is, but a handy tip is that you can open a new instance of a program by middle-clicking (with scroll wheel) the taskbar icon.

also, can you not right-click a folder in explorer and select 'open in new window'?

8 more replies
Relevance 56.17%

I cannot seem to nip this in the bud. Someone please help!
 

Answer:Multiple Instances of dllhost.exe *32

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable. ​
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
Right-click on icon and select Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
Press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

2 more replies
Relevance 56.17%

My computer become slow and unresponsive. When I tried to see Task manager, there were more instances of iexplorer.exe*32, chrome.exe*32 and jawas.exe*32. Ran malwarebytes, microsoft scanner none of them got any trojan.. How to remove *32 virus/malware?

Answer:Multiple instances of chrome.exe*32

Processes that end with *32 are 32-bit applications running under WOW on a 64-bit OS. WOW64 allows 32-bit Windows-based applications to run on 64-bit Windows.

Why are 32-bit programs still running on my 64-bit version of Windows?
Running 32-bit Applications
Microsoft created the folder named SysWOW64 for storing 32-bit .dll files. WOW64 equates to "Windows 32-bit on Windows 64-bit". This folder contains all the 32-bit .dll files required for compatibility which run on top of the 64-bit version of Windows. WOW64 is the x86 emulator that allows 32-bit Windows-based applications to run on 64-bit Windows but x86 applications are re-directed to the x86 \syswow64 when seeking the x64 \system32. The C:\Windows\System32 folder still exists in the 64-bit version of Windows but it is used as a repository for 64-bit .dll files.Chrome.exe (Chrome.exe *32) is a legitimate process related to the Google Chrome web browser. Multiple copies of chrome.exe, referred to as process-per-tab, listed in Task Manager is intentional by design as a crash control. Chrome creates three types of processes (browser, renderers, and plug-ins). Each Chrome tab is treated as it's own individual process for the life of tab meaning it is treated as a separate process so that multiple tabs can run with less problems. This feature increases responsiveness, and prevents the browser from locking up if a particular web app or plug-in stops responding. In the event of a browser crash or hang in one tab, it prevents t... Read more

5 more replies
Relevance 56.17%

I have notices that there are multiple instances of certain programs that are loaded but NOT running such as Internet Explorer and Chrome. I usually find them, via Task Manager, when I attempt to start the program and it doesn't start. After I end the non running tasks the program runs as normal. Any ideas what's causing this?

More replies
Relevance 56.17%

Any assistance would be appreciated... Thanks!
 

Answer:Multiple Instances of dllhost.exe *32

Follow up. After running both the FRST and AdwCleaner, the multiple instances of the dllhost.exe *32 seem to have closed, and are not appearing again.
 

24 more replies
Relevance 56.17%

Had no luck Googling the question, so here hoping that someone can help me here. Is there a tweak possible to cause a program that doesn't have the ability built-in, to open multiple instances of itself to do so?

I use Movie Collector for cataloging videos, and often when using it's scraper function, the options for a particular program's data download, is for each season of the program, which means that the program tree and thumbnail display fills rapidly, causing some orderly disorder.

I prefer to integrate the seasons that I have of a series into a single listing, but to do that requires not only a lot of copy/pasting, but is hindered by the fact that one must go back and forth, opening and closing windows a lot. It would be much, much easier, if one could place two windows of the program side-by-side.

Answer:Multiple Instances Tweak

I looked on the forum for the program. Seems there are several people asking for "multiple instances" feature.

But generally there are so many schemes to enforce single instance behavior that it's unlikely to be able to manipulate it from outside. Some programs create a Windows kernel object, like a named mutex. Some use a message only window. Some use a lock file etc.. there are dozens of schemes. Also it's dangerous because if the program assumes only one instance of itself will be messing with files and you force more than one instance, the data files could get scrambled very easily.

I would suggest adding your input to the multiple instance request. If only one or two people ask for it they will probably be ignored.

Here's one thread I found. I did see a couple more, but I lost them while searching.

Collectorz.com Forum &bull; View topic - Access to multiple databases or multiple instances of MCE?

6 more replies
Relevance 56.17%

I added the updated drivers to manage the TrackPoint on this vintage T22 but now see multiple instances of the TpKmapMn.exe running (three in fact).  The operating system is WIn XP Pro SP3.  Does anyone know how to control this to just one instance? I enjoy the utility as it adds the WIndows key funcitonality I use so much.

More replies
Relevance 56.17%

Hello. I was referred here from this topic: http://www.bleepingcomputer.com/forums/topic331838.htmlHere are the files needed.I could not get GMER to not crash the computer with a blue screen of death.

Answer:Multiple Instances of iexplore.exe

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

2 more replies
Relevance 56.17%

I have notices that there are multiple instances of certain programs that are loaded but NOT running such as Internet Explorer and Chrome. I usually find them, via Task Manager, when I attempt to start the program and it doesn't start. After I end the non running tasks the program runs as normal. Any ideas what's causing this?

More replies
Relevance 55.35%

I have multiple instances of this running on my computer and hogging up resources. They seem to be trying to launch IE browser sites. I have attached FRST.txt and addition.txt
 

Answer:COM Surrogate - dllhost.exe *32 -- Multiple instances

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

20 more replies
Relevance 55.35%

To start out, I am running Windows 7 Home Edition.  Recently my computer will become extremely sluggish, I check the Task Manager and there are anywhere from 10-50 instances of dllhost.exe running.  The only way I can currently resolve it is to restart the computer.  I ran Malwarebytes after installing the updates and found nothing.  I ran Spybot Search & Destroy and only found a few cookies that I quarantine.  I also just ran Ccleaner and used the registry fix tool in there.  This problem is sporadic, it ranges from once to multiple times per week.  Here is my DDS Log:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.17496  BrowserJavaVersion: 10.60.2
Run by Jason at 20:48:06 on 2015-01-07
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.12279.8166 [GMT -7:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
SP: Microsoft Security Essentials *Enabled/Updated* {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
SP: Spybot - Search and Destroy *Enabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\nvwmi64.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Window... Read more

Answer:Multiple dllhost.exe instances using up all of my CPU power.

Hi there,my name is Marius and I will assist you with your malware related problems.Before we move on, please read the following points carefully.First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while following my instructions, Stop there and tell me the exact nature of your problem.Do not run any other scans without instruction or add/remove software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Important: To help me reviewing your logs, please post them in code boxes. You can create them by clicking on the <>-symbol on top of the reply window.    HijackThis is not the preferred initial scanning tool in this forum. With today's malware, a more comprehensive set of logs i... Read more

17 more replies