Computer Support Forum

FF54 Multiple processes

Question: FF54 Multiple processes

FF 54's "big change" is full-implementation of up-to-4 multiple FF processes ("electrolysis", or "e10s"), to make FF run faster, use less memory, and be less crash-prone.
However, it turns out that certain FF extensions, such as WOT, are not compatible with electrolysis, and must be disabled if you wish to take advantage of electrolysis.
To find out whether or not you ARE using electrolysis, and if not, which add-ons are the culprit(s), there's a FF extension called "Add-on Compatibility Reporter" https://addons.mozilla.org/en-US/firefox/addon/add-on-compatibility-reporter/ . When installed, go to Tools/Add-ons/Extensions. Toward the upper right, it will advise you as to whether or not FF's Multiprocess is enabled. It will also clearly show, next to each extension, an informational note that it's compatible with multiprocess, or a yellow triangular warning that it's not compatible with multiprocess. If you decide you can live without the incompatible add-ons, then you can disable them, and restart FF to see if multiprocessing is now running. For example, in task manager, I now see 3 FF processes running (after disabling WOT).
Reference: http://www.zdnet.com/article/why-your-firefox-is-not-using-multiple-processes/

More replies
Relevance 100%
Preferred Solution: FF54 Multiple processes

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Relevance 58.22%

Please help. I have attached the two files generated by FRST.
 

Answer:multiple dllhost.exe *32 processes, which run a number of other processes

Helllo,

Before we begin, please note the following:

I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.


Download Malwarebytes Anti-Rootkit to your desktop.

Double-click the icon to start the tool.
It will ask you where to extract it, then it will start.
Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
Click in the introduction screen "next" to continue.
Click in the following screen "Update" to obtain the latest malware definitions.
Once the update is complete select "Next" and click "Scan".
When the scan is finished and no malware has been found select "Exit".
If malware was detected, make sure to check all the... Read more

7 more replies
Relevance 58.22%

Hello, I saw similar threads for this problem and was hoping that someone might be able to guide my through the various scans and text logs. Thank you in advance for your help.
 

Answer:Multiple dllhost.exe *32 processes, explorer.exe processes

Sorry, I just read the preparation guide. I'll start running scans and report back.
 

4 more replies
Relevance 56.58%

"Deckard's System Scanner v20071014.68
Run by Owner on 2007-12-22 04:41:55
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 2 Restore Point(s) --
2: 2007-12-22 09:41:59 UTC - RP2 - Deckard's System Scanner Restore Point
1: 2007-12-22 09:40:33 UTC - RP1 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Owner.exe) -----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:44:57 AM, on 12/22/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Digital Media Reader\shwicon2k.exe
C... Read more

Answer:Popups, Multiple unknown processes, Multiple viruses and malware found...

TeaTimer is an excellent tool for the prevention of spyware but it can sometimes prevent HijackThis from fixing certain things. Please disable TeaTimer for now until you are clean. TeaTimer can be re-activated once your HijackThis log is clean.Open Spybot Search & Destroy.
In the Mode menu click "Advanced mode" if not already selected.
Choose Yes at the Warning prompt.
Expand the Tools menu.
Click Resident.
Uncheck the Resident "TeaTimer" (Protection of overall system settings) active. box.
In the File menu click Exit to exit Spybot Search & Destroy.

Download http://www.techsupportforum.com/sect...etTeaTimer.zip
Double click ResetTeaTimer.bat to remove all entries set by TeaTimer.


----------------


Do a HijackThis scan & place a check next to these items and select "Fix checked":

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [Curb tool help dart] C:\Documents and Settings\All Users\Application Data\Move Bore Curb Tool\That This.exe
O4 - HKCU\..\Run: [CreativeWeb] C:\DOCUME~1\Owner\APPLIC~1\LITEPL~1\Defy bias plus.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

Ignore any prompts for a reboot


---------------


www.bleepingcomputer.com
www.forospyware.com
www.geekstogo.com

1. Please choose from any of the above links. Download the file & Save it to Desktop.

2. Double click on ComboFix.exe & follow the prompts.

3... Read more

6 more replies
Relevance 56.58%

Hi,
 
I have run malwarebytes, hitman Pro, ADWcleaner and multiple dllhost.exe *32 Com Surrogate processes keep popping up in task manager.
Computer/internet is very slow.
 
Here is the Scan result of Farbar Recovery Scan Tool
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-11-2014
Ran by Pattie (administrator) on MININT-Q9CGG1P on 05-11-2014 15:57:31
Running from C:\Users\Pattie\Downloads
Loaded Profile: Pattie (Available profiles: Pattie)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
() C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
(Nikon Corporation) C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched... Read more

Answer:Malwarebytes found multiple trojans, multiple dllhost.exe *32 processes computer

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/554909 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 55.76%

My computer is slow and locking up. I noticed yesterday I have duplicate processes and new processes running with .exe *32. Chrome is duplicated this way too. Then, when I opened Internet Explorer, IE was duplicated and Bing and Bing Bar was duplicated. I followed all the instructions and am uploading the files requested below.

Here are some examples of the files that are showing in my Task Manger:
armsvc.exe *32
BBsvc.EXE *32
Evernote.exe*32
EvernoteClipper.exe *32
afcdpsrv.exe *32
chrome.exe *32
chrome.exe *32
chrome.exe *32
chrome.exe *32
chrome.exe *32
chrome.exe *32
GoolgeCrashHandler.exe *32
Evernote.exe*32
EvernoteClipper.exe*32
EvernoteTray.exe*32
jhi_service.exe*32
LMS.exe*32
mbamscheduler.exe*32
mbamservice.exe*32
mbam.exe*32
ONENOTEM.exe*32
WINWORD.exe*32
SkypeC2CPNRSvc.exe*32
SkypeC2CAutoUpdateSvc.exe*32
UNS.exe*32
 

Answer:Multiple Processes With .exe *32 Extensions. Multiple Chrome Instances Too.

I am not seeing any malware in those logs at all.

If you are not having any other malware problems, it is time to do our final steps:
We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
After doing the above, you should work thru the below link:
How to Protect yourself from malware!
 

7 more replies
Relevance 54.53%

Hi,

I have noticed that on my PC IE seems to run GREATLY faster than Opera and Mozilla Firefox when many windows are open, but it lacks the features and add-in support I need. I have found that the reason it is so much faster is because it opens a seperate process for each window that is open while mozilla and opera only use one process for everything. Is it at all possible to somehow use Opera or Mozilla and have one process per window or tab like IE has?

I really need to know if this is possible because more than one person uses this computer and lots of windows and tabs are eventually open, but when I have over 10 tabs or windows open running from the same process on this computer, it eventually gets so slow that it is almost unusable (most windows become almost unresponsive and get blank for a few seconds when you click)

Any help with this would be greatly appreciated.

More replies
Relevance 50.43%

I was on Facebook last night when all of a sudden things slowed down. A window popped up saying that there was not enough virtual memory. I had 3 photo pages open, and was running the D&D app when this happened.

It wasn't like that earlier in the day, so it made me wonder. Although earlier in the day, I did download a file converter (I needed to change an m4a into an MP3, but I ended up getting rid of the program because it only converted a sample of the song), and I read through the reviews to be sure no one had said "OMGZ TERRBILE PROGRAM IT HAZ A TROJAN!!1!1!".

My brother was really concerned about this - he checked the user resources and found three IE processes running. I think he mentioned something about them either opening or closing at the same time? (He's not here to ask right now.) He re-started the computer, and things seemed okay. He ran Super Anti-Spyware (he found some tracking cookies), and he ran BitDefender (which didn't find anything).

He's talking about using the bookmarking system to go back a week, or just reformatting the computer altogether. I thought that I should check in here before any of that happened.

We don't actually have a proper anti-virus scanner - we DID have AVG 8, but my brother dumped it because it was eating up resources awhile ago.

We are operating on Windows XP with IE 7.

Any ideas?

Thanks in advance!!

[EDIT] - I got Task Manager open, and there are 2 (formerly 3) IE... Read more

Answer:Multiple IE processes?

explorer.exe is the Desktopiexplorer.exe is the browserThe process of cleaning your computer may require you to temporarily disable some security programs. If you are using SpyBot Search and Destroy, please refer to Note 2 at the bottom of this page.Please download Malwarebytes Anti-Malware and save it to your desktop.NOTE: Before saving MBAM please rename it to zztoy.exe....now save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be pat... Read more

14 more replies
Relevance 50.43%

Hi, I'm new here.
I've recently upgraded my PC (first time) and put in a new power supply and a video card.
Now for the first few days it was working completely fine, but now it's starting to act up.
I'm not sure what the cause is, but there are multiple problems that I have.

First is, when I look at the processes for Task Manager, there are two instances of exact same process. Like I would have steam.exe and another steam.exe, or even more.

Second is, the games that worked smoothly before is being choppy, slow to load, and generally unplayable even when I lowered the video settings. (TF2, Oblivion, COD4, and some more).

I'm not sure whether damage to the video card, hdd, or any other component could have caused this, because I tried to move cables inside the case when the computer was on (but I didn't graze or touch the video card at all). Does anyone have a clue why my PC is going crazy?

Could it be malware/spyware/adware or trojan? I ran S&D and Adaware (free). I also did a system restore to a point where I wasn't having any problems and I installed the latest driver.

Thanks for reading this long post.
 

More replies
Relevance 50.43%

Multiple IE Processes launched by "User = NT AUTHORITY\SYSTEM" all while IE is not an open application, when IE is opened by me "User = BLACKBOX\Chris". The processes always run under the svchost.exe running the "DCOM" and "Terminal Services" Services and result in slow performance, pop ups & volume of sound card randomly set to zero (0). I have seen similar posts and have worked ahead with the following Bootkit Remover, DDS and GMER Rootkit Scanner actions executed and results supplied as requested. I will sit tight on any ComboFix.exe actions until I get direction..

BOOTKIT REMOVER Results -

Bootkit Remover version 1.0.0.1
(c) 2009 eSage Lab
www.esagelab.com

\\.\C: -> \\.\PhysicalDrive0
MD5: 454f8f8f464d74f8b4b6306cbff41597
\\.\K: -> \\.\PhysicalDrive2
MD5: 454f8f8f464d74f8b4b6306cbff41597
\\.\M: -> \\.\PhysicalDrive3
MD5: 454f8f8f464d74f8b4b6306cbff41597

Size Device Name MBR Status
--------------------------------------------
93 GB \\.\PhysicalDrive0 Unknown boot code
465 GB \\.\PhysicalDrive2 Unknown boot code
465 GB \\.\PhysicalDrive3 Unknown boot code

Unknown boot code has been found on some of your physical disks.
To inspect the boot code manually, dump the master boot sector:
remover.exe dump <device_name> [output_file]
To disinfect the master boot sector, use the following command:
remover.exe fix <device_name>

---------------------------------------------------------------------------------------... Read more

Answer:Multiple IE Processes

8 more replies
Relevance 50.43%

I've been looking at some of the different processes currently running on my computer, and I recognize most of them. For those that I don't recognize, I usually Google them. Everything is fine, but I was just wondering if its normal to have multiple of the same process? For example, there are currently 5 SVCHOST.EXE's running, two in SYSTEM, two in NETWORK SERVICE, and one in LOCAL SERVICE.

Oh yeah, this is XP Pro. Thanks for any info!
 

Answer:Multiple Processes?

6 more replies
Relevance 50.43%

At any given time, until I get rid of them I find 2-3 cmd.exe processes open each taking up around 33% of my processing power. This is a very new issue I'm having and I don't know what I could have done to make it occur. I'm posting a hijackthis log to see if any of the professionals here might see a bad process that might be spawning these cmd.exe processes.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:53:18 AM, on 8/22/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.21073)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\WINDOWS\system32\Ati2evxx.exeC:\Program Files\asus\ASUS Data Security Manager\ADSMSrv.exeC:\Program Files\ATKGFNEX\GFNEXSrv.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\taskswitch.exeC:\Program Files\ATK Hotkey\Hcontrol.exeC:\Program Files\... Read more

Answer:cmd.exe multiple processes

Hello and welcome to Bleeping Computer.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.My name is Syler, I will be helping you to solve your Malware issues. Whilst I am helping you, I wouldbe grateful if you would note the following: Please do not run other tools or scans unless I ask you to and follow all the steps I give you, in order.
Copy and paste all logs requested in you reply, Do not attach them unless asked too.
If you don't know or understand something, please don't hesitate to say or ask before you proceed with my instructions.
Please continue to work with me, until I tell you your machine appears to be clean. Absence of symptoms does not mean that everything is clear.
If I do not hear back from you within 5 days of my last post, then this topic will be closed.Please download Malwarebytes' Anti-Malware from HereNote: If you already have Malwarebytes' Anti-Malware, just update then run it.Double Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest ve... Read more

8 more replies
Relevance 49.61%

I know svchost.exe is a vital system process but do I need so many of them running at the same time. I have 5 files by that name running in the Task Manager but they all have different Memory Usage ranging from 44K to 17,872K. Can any one tell me what they all are for.

Answer:multiple svchost.exe processes

procexp from www.sysinternals.com

6 more replies
Relevance 49.61%

It appears that we have been hacked and files have been deposited that do NOT get detected as malware.I'm running Trend Micro OfficeScan and everything comes up clean. I also scanned w/ Kaspersky and Symantec Endpoint Protection with "No Virus Found".A process NTVDM (virtual DOS machine) keeps taking over the CPU. I can kill the process, but it always returns. If I leave the system for more than a few hours, there are multiple instances of NTVDM running that have to be killed.The problem is on more than one system, one (1) running Windows Server 2003, sp2 and the others running Windows Server 2000, sp4. There is a process XXXXX.exe that I can only kill from Safe Mode, but it always comes back, with a new name. I found the file in the C:\WINNT\Temp folder. (see below HiJackThis log: G:\WINNT\Temp\QE7DD1.EXE, where G: is the system partition)I've also found a suspicious "2.exe" file in C:\WINNT folder that I can delete, but it also returns before long.I've searched and been unable to find any helpful info on this hack.Running HiJackThis on the W2k3 server gives this result:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:02:55 PM, on 3/10/2009Platform: Windows 2003 SP2 (WinNT 5.02.3790)MSIE: Internet Explorer v7.00 (7.00.6000.16791)Boot mode: NormalRunning processes:G:\WINDOWS\System32\smss.exeG:\WINDOWS\system32\winlogon.exeG:\WINDOWS\system32\services.exeG:\WINDOW... Read more

Answer:multiple NTVDM processes take CPU to 100%

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructio... Read more

2 more replies
Relevance 49.61%

Was doing a cursory look at a friends PC and their machine had 3 iexplore.exe processes running. They use IE8 (I use Firefox so am not that familiar with IE8). Is this 'standard' procedure?They claim they have checked for viruses, etc and the PC is fine .... but it seems slow to them.They have many entries in their startup and this may affect boot time and maybe overall response - although the task manager/performance shows a constant 17% - 25% CPU usage .... they run MagicJack for telephone ... could that be 'bogging' the system down?

Answer:Multiple iexplore Processes

In IE...there is one process running at all times. For every window/tab a user opens...another process begins.

If I have 3 processes under Iexplore.exe, I should have two tabs/windows open.

If either of those reads iexplorer, rather than iexplore...I probably have malware.

I can't answer anything about MJ...but any program running is going to use up system resources. A look at Task Manager should give an indication if such use is excessive.

Louis

2 more replies
Relevance 49.61%

I am having an issue where the dllhost.exe *32 and explorer.exe are multiplying and continue to. MacAfee inti-virus doesnt detect it. Malwarebytes finds it and removes it but it just comes back again anyways. The memory steadily grows in size as well to the point where it crashes my computer. I need help! The pic is before it gets too bad. explorer gets to be like 4 gb of memory sometimes

More replies
Relevance 49.61%

I just noticed this problem last week. I'll try to explain...

I leave my computer on all day and so when I want to use it to check news or email I can do it quickly. I stay logged in but close all openned windows when I am not at my desk. I use Firefox 1.0.7 on XP Pro, and I noticed last week that as the day wore on my computer became increasingly sluggish.

I ctrl+alt del'd and to my astonishment there 7 instances of firefix listed in the Processes tab. Each Firefox was using between 30,000k and 70,000k of my memory. I closed End Tasked them all and the computer runs normal again. This problem reccurs a few times each day.

Does anyone know what is going on?
 

More replies
Relevance 49.61%

hi -

i started having this problem with my computer this morning. when i boot up, the cmd.exe process is running with the system, and generating multiple iexplorer.exe processes. i've done virus scans and cc registry cleaner - nothing seems to help.

below is my hijackthis log. any help will be greatly appreciated. thanks in advance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:28:08 PM, on 4/21/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PR... Read more

Answer:cmd.exe and multiple IE explorer processes

i think i fixed it, using ComboFix. not sure if it worked - but check that out if you're having a similar problem.
 

1 more replies
Relevance 49.61%

When the explorer.exe process is running it is causing multiple iexplore.exe processes to keep popping up eating up cpu time and memory space and slowing my computer down to a crawl. If I end the explorer.exe process iexplore.exe processes stop popping up. I am running Windows XP withe latest updates available before the support stopped and am concerned about the system crashing while trying to fix this since I cannot reload.
 

Answer:Multiple iexplore processes

Welcome aboard
Please, complete all steps listed here: http://www.techspot.com/vb/topic58138.html
Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
Attached logs won't be reviewed.
Please, observe following rules:

Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
If you're stuck, or you're not sure about certain step, always ask before doing anything else.
Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
Never run more than one scan at a time.
Keep updating me regarding your computer behavior, good, or bad.
The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

 

31 more replies
Relevance 49.61%

I have used Google Chrome for almost 2 years without a problem. Now, in the last 2 months, Chrome has gotten woefully slow loading all web pages and crashes frequently. I have tried to uninstall/reinstall multiple times without improving anything. I have tried creating a new user profile multiple times without any improvement. The only clue I have found is multiple "Chrome.exe" processes running per Task Manager > Processes (Windows 7). I tried deleting all that seemed inactive, but, again no help. Help would be appreciated.

Answer:Multiple Chrome.exe processes

Having multiple Chrome processes is normal.

Do you have a website where Chrome repeatedly crashes? If so, then try a clean boot, then test that website.

9 more replies
Relevance 49.61%

Hi, couple of times during start ups and during my use of the internet I multiple processes of wmpnscfg.exe(I barely use windows media player) pop up which at times slows down my computer and many times cut off of wifi access. Sometimes I also have multiple processes of dllhost.exe , iexplore.exe(I don't even use internet explorer). Sometimes when my computer would slow down I would see on my taskbar avg tune-up active active (you have to click on the software to start, its not automatic) and it will disappear within a second. I scanned my computer many times w/avg and Malwarebytes, they would never find anything. Then I used avg rescue avg cd, again no results. I'm all out of hope, if someone would be kind enough to help me I would be so thankful. I am 80% sure my computer is infected and I don't want this to get any worse. 

Answer:Multiple processes of wmpnscfg.exe?

Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer. 1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.2. The fixes are specific to your problem and should only be used for this issue on this machine.3. If you don't know or understand something, please don't hesitate to ask.4. Please DO NOT run any other tools or scans while I am helping you.5. It is important that you reply to this thread. Do not start a new topic.6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.7. Absence of symptoms does not mean that everything is clear.If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line. *************************************************************************Please download AdwCleaner by Xplode onto your Desktop.Before starting AdwCleaner, close all open programs and internet b... Read more

14 more replies
Relevance 49.61%

Dear Experts,

When I open IE, most of the times it gives error: "Your last browsing session closed unexpectedly. Would you like to restore your last session, or go to your home page?". I know I close IE normally, it is not closed unexpectedly. When I choose to restore the last session, it opens my home page. When I open IE, it opens 2 IExplore.exe processes in the task manager. When I open additional IE windows, the 1 extra process always remains extra. There is always 1 extra IE process when IE is open. When I close IE, the all IExplore.exe processes are closed. I checked my computer with F-Secure Online Scanner, and found that I have IE Trojan ( I could not record how teh scanner named it), did not show exactly what was teh filename. F-Secure Online Scanner reported that it cleaned the infection. Now I scanned my computer with SUPERAntiSpyware, it found Trojan.IEXPLORER in C:\WINDOWS\INSTALLER\... folders. Normally I use Firefox for browsing, I use IE when I have to. I think in the past I installed a toolbar of FreeCause.com to IE, and it did not have a proper unistall. I suspect it can be the source of the trojan, but I cant be 100% sure bec it was months ago, and I found out the multiple process problem recently.

When I run RootRepeal, file scan, I get error: Could not read the boot sector. Try adjusting the Disk Access Level in the Options dialog. Although I adjust level to "high level- Support All devices, support dynamic disks" I still receive... Read more

Answer:IE Trojan, Multiple IE processes

More logs
 

9 more replies
Relevance 49.61%

With the arrival of Firefox 54 last week, finally the drawn out process of releasing its multiprocess Electrolysis was finished.

In its latest release, Firefox will use up to four processes, with the benefits to users being better memory usage and performance.

But long-time users of Mozilla's browser may be disappointed to see that their browser is clinging to a single process -- and the guilty party are those add-ons you've probably been using for years.

To check if Firefox 54 is stuck on one process, you can check your nearest operating system process monitor, or check if the value attached to dom.ipc.processCount value in Firefox's about:config is set to 1.








Firefox provides little feedback on this front, but if you install the Add-on Compatibility Reporter extension, a wealth of information appears in Firefox's Extensions panel.



Why your Firefox is not using multiple processes | ZDNet

More replies
Relevance 49.61%

multiple issues of the process "realupgrade.exe*32" are running and task manager will not close them. what are they and what should I do about it.

Answer:multiple realupgrade.exe*32 processes

As far as I know , it's a malware. Search on for removal tool.

3 more replies
Relevance 49.61%

Same thing happened about two weeks ago and you were able to fix it and help me out.
 

Answer:Multiple .exe *32 Processes Using Up All Resources

Helllo,

Before we begin, please note the following:

I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
You need to exit MalwareBytes in your tray area. Right click and select Exit.
Download Malwarebytes Anti-Rootkit to your desktop.

Double-click the icon to start the tool.
It will ask you where to extract it, then it will start.
Warning! Malwarebytes Anti-Rootkit needs to be run from an account with administrator rights.
Click in the introduction screen "next" to continue.
Click in the following screen "Update" to obtain the latest malware definitions.
Once the update is complete select "Next" and click "Scan".
When the scan is finished and no malware has been fou... Read more

9 more replies
Relevance 49.61%

I have an issue where multiple "iexplore.exe" processes appear in Task Manager when cause my screen to freeze. I will be able to click on running processes on the task bar, but when I try minimize them they will stay on the back and overlap with other programs I have opened.

The only way I can stop this from happening is by opening Task Manager, navigating to the "Processes" tab and right-clicking on "iexplore.exe" (there is several duplicates of it running) and clicking on "End Process Tree."

This will occur even when Internet Explorer 8 is not running.

I have the logs you will be looking for as well, to speed things up.

Thanks for any replies.
 

Answer:Multiple iexplore.exe processes

Here is the final log.
 

6 more replies
Relevance 49.61%

Hello everyone.

I am here in a last desperate effort. Every time I run Iexplorer it creates several duplicate processes even if it shows only one window. It start with 1 but it begins to create more till it eat up all my resources

I looked at all the other threads about the subject but didn't found the items mentioned there. Maybe someone could help me out? I attached a HijackThis log.

?Jessie
 

Answer:Help! Multiple IEXPLORER.EXE processes

Welcome to Major Geeks!




JessicaE said:





I am here in a last desperate effort. Every time I run Iexplorer it creates several duplicate processes even if it shows only one window. It start with 1 but it begins to create more till it eat up all my resources Click to expand...

It's not malware. It is just IE8 and it is normal. All tabbed browsers do this.
 

3 more replies
Relevance 49.61%

I noticed the other day that there are multiple IEXPLORE.EXE processes running, i know that IEXPLORE.EXE is internet explorer, but even when that is closed the processes remain, and i only use firefox. i have tried to end task on all the iexplore processes, but the come back as soon as i close them, could this be something malicious? and how can i fix this?

Answer:multiple IEXPLORE.EXE processes

have a look here,hope it helps.click here

2 more replies
Relevance 49.61%

Having the same problem. I understand the IE8 will have 2 processes running when 1 instance is open however I have no instances of IE open and 20 processes of IE running in backround. I have ran Browser Hijack Retaliator but does nothing. At a loss.EDIT: Moved to Am I Infected from XP ~ Hamluis.

More replies
Relevance 49.61%

Hi
I have a question. Is it possible to limit to limit how many times a certain process can run at a time?

I work tech support for a company that uses Groupwise for email. If the clients have more than 1 process of IEXPLORE.EXE running(in the background)at the time they check their web based email then the computer freezes and they have to call us to kill the IE processes. If anyone knows how to do this(if it can be done) or direct me in the appropriate direction I would greatly appreciate it.
Thanks in advance
 

More replies
Relevance 49.61%

Was advised to post my log here after:- uninstalling and reinstalling .net didn't work- microsoft install clean up didn't work- scanned with safety.live.com and housecall.trendmicro.com didn't work- scanned the registry with uniblue registry booster didn't help- process scanner didn't work.I use firefoxI run these programs:-Avast-Zonealarm-spybot-spyware guard-Spyware blaster-processguard-win patrol-Adaware2007-ewido-AVG anti rootkit-windows defender-Webroot Window washer after nothing worked I was told that posting my log might help so here it is and I appreciate any help you can give.Logfile of HijackThis v1.99.1Scan saved at 11:32:27 PM, on 03/08/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZONELABS\vsmon.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\spoolsv.exeE:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\Program Files\Common Files ... Read more

Answer:Mscsorsvw.exe Multiple Processes

Welcome to the BleepingComputer HijackThis Logs and Analysis forum trickydick My name is Richie and i'll be helping you to fix your problems.Please download Combofix and save to your desktop:Note: It is important that it is saved directly to your desktop Close any open browsers. Double click on combofix.exe and follow the prompts. When it's finished it will produce a log. Post the entire contents of C:\ComboFix.txt into your next reply. Note: Do not mouseclick combofix's window while it's running. That may cause the program to freeze/hang. Do NOT post the ComboFix-quarantined-files.txt unless I ask.Also post a new Hijackthis log.

3 more replies
Relevance 49.61%

There are times when I open the task manager and I see six or eight, sometimes twelve or more instances of explorer.exe running and eating up resources. This can be when I have an explorer window open, or even if I'm just sitting at an empty desktop or doing nothing at all. There's always a "master" one that is eating up anywhere from 10 to 50MB of RAM or more (depending on if I have an explorer window open, whether or not I'm moving files around, etc.), then there are as many as a dozen or more little ones eating up anywhere from 1.5MB to 10MB or more (depending on I don't know what...)

Why is explorer launching multiple instances? Or, why are explorer processes not being killed off the way they should? How can I get this under control?

Answer:Multiple explorer processes.

Have you changed any Explorer shortcuts to open in certain places besides the default location?

9 more replies
Relevance 49.61%

seems to have happened just today. I have at least 7-10 ofgxztvl.exe *32 processes running. I obviously tried to delete the processes and run some virus/maleware programs as listed above. but they keep coming back unless I boot in safe mode. I have included the farbar logs. any help would be much appreciated.

Thanks
jeff
 

Answer:multiple chrome processes

Run FRST in normal mode
 

9 more replies
Relevance 49.61%

I have a new Vaio laptop, there should be no malware or anything as I have not installed any programs and I have virus software and firewall on.
I have only one user account which is also the administrator. I have UAC enabled.

Now, I start the task manager, and click "show processes from all users", and there are about 80 of them. But what is alarming is that most of the processes run at least twice or three times. I'm not talking about svchost.exe, I know that there are supposed to be many of those. But all other processes, there seems to be one running under three different user names, like this:

process1.exe..........LOCAL
process1.exe..........Felixmagician
process1.exe..........SYSTEM
process2.exe..........LOCAL
process2.exe..........Felixmagician
process2.exe..........SYSTEM

and so on.


This is consuming the resources as my CPU (C2d P8600) is running at apprx. 50% idle.

I have Vista in my old laptop as well and it has no such problem.
 

Answer:Multiple processes under different users :S

Welcome to MajorGeeks! I am new to Vista myself, so am interested in how this turns out.
 

7 more replies
Relevance 49.61%

I got multiple processes of svchost.exe running and chrome.exe running... This is taking up a lot of memory and I believe I can get my computer to go faster. I took these screenshots in Process Explorer.

Heres screenshots: svchost.exe: http://i679.photobucket.com/albums/vv159/ConnorSev/explorerzz2.jpg
chrome.exe http://i679.photobucket.com/albums/vv159/ConnorSev/explorerzz2.jpg

Any help is apprecited. I have Windows XP... Dell Computer that cost like $900 I got plenty of free space and ram etc.
 

Answer:Multiple Processes Running?

Having multiple svchost.exe processes in the Windows Task Manager is normal.

I don't use Google Chrome, so I don't know if multiple chrome.exe processes is normal. It would be if you have multiple tabs or webpages open at the same time.

--------------------------------------------------------------
 

1 more replies
Relevance 49.61%

this is from my previous post. avg pops up and says it's win32/pepatch.ao. tried to remove it using malwarebytes and avg, but to no avail. here's the dds.


DDS (Ver_09-12-01.01) - NTFSx86
Run by Vincent Lim at 5:20:23.44 on Fri 12/04/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.502.121 [GMT 8:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
svchost.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
svchost.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Hotspot Shield\bin\openvpnas.exe
C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\Hide My IP 2009\HideMyIpSrv.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\msiexec.exe
C:\WINDOWS\system3... Read more

Answer:multiple processes, programs won't run

now my system files are infected with win32/pepatch.ao

need help ASAP!!

2 more replies
Relevance 49.61%

I have a computer with Vista that was recently given to me by a friend. I do not use Internet Explorer whatsoever, but for some reason there are always 2 to 4 iexplore.exe processes running when I look at the task manager. All but one of these processes are always running under SYSTEM. When I try to open the folder containing the file on some of the process, nothing will happen whereas for others, the Program Files\Internet Explorer folder will be opened.

Now, here are the things I have already tried:

1. Full system scan with Ad-Aware
2. Full system scan with Avast
3. Ran ComboFix
4. Scanned with HJT, I can see nothing out of the ordinary in the log, which I will post soon.
5. Searched my computer for fake versions of iexplore.exe, I found nothing.

Answer:Multiple iexplore.exe processes

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:17:34 AM, on 7/14/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\ZoneLabs\vsmon.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Howard\Downloads\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [ZoneAlarm C... Read more

1 more replies
Relevance 49.61%

I have used Chrome for almost 2 years without a problem. Now, in the last 2 months, Chrome has gotten woefully slow loading all web pages and crashes frequently. I have tried to uninstall/reinstall multiple times without improving anything. I have tried creating a new user profile multiple times without any improvement. The only clue I have found is multiple "Chrome.exe" processes running per Task Manager > Processes (Windows 7). I tried deleting all that seemed inactive, but, again no help. Help would be appreciated.

Answer:Multiple Chrome.exe processes

Multiple instances of chrome.exe running is not unusual. In fact there have been several articles that the Chrome browser team is addressing that well known annoyance. How soon that will happen is the great unknown right now.Every tab you have open and every browser add-on or extension gets it's own instance of chrome.exe. Even closed tabs will still stay active as .exe's because they are listed in the recent closed tabs list.Have you tried uninstalling chrome completely and reinstalling it?

7 more replies
Relevance 49.61%

i have a new dell pc with win7 64bit and am having very annoying problems with IE8. I have seen over 20 iexplore.exe processes running and it locks my pc up using all the memory. they dont close even after i close all tabs I have to go in task mgr and manually close the processes to get the pc going again. my pc has 64bit and 32bit IE8, do i need to get rid of one? use an older explorer? HELP!

Answer:Multiple iexplore.exe processes

Try running your virus scanner and malwarebytes Malwarebytes.org and do a full system scan with both.
It could be associated with a virus or trojan but take a look at this thread to see if it sounds similar to your problem.

http://www.sevenforums.com/network-s...lp-please.html

9 more replies
Relevance 49.61%

Need help. Most of my programs won't run. Multiple processes appear in my task manager. I tried to clean it with SUPERAntiSpyware but to no avail. It found 70+ spywares but the problem persists. SOS! thanks!

Answer:Multiple processes, programs won't run

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Relevance 49.61%

I recently reformatted my hard drive and now I'm having a problem with multiple iexplorer processes. Sometimes as many as 10 or more. I have read that it is a malware problem, but I don't know how to resolve it. Can you help?

Answer:Multiple iexplorer processes

Sounds a lot like browerhijacking, malware, etc. I have had similar problems. I can only suggest running Spy-bot Search and Destroy, Ad-Aware SE, and maybe a few other similar programs. You might also try going over to the security center on the forum, if those things don't work. You might want to get a hijack this log ready too, they may ask for one.

CMA

2 more replies
Relevance 49.61%

Hi,

I was just workin on my pc when suddenly it started going really slow, after checking task manger I saw there where 82 processes running, some where in there more then once ( scvhost.exe),

On the forums is showed that this is normal, and scvhost always has more then one process running.

There's definitely something wrong because my Process usage is Either running round 85% and staying there, OR dropping from 17 - 20 to 60 - 70, really weird

I restarted my PC in safe mode, and scanned which found 2 trojans, i deleted those succesfully but the problem is still there,

Here's a screen shot of my Taskmanager View photo | DumpYourPhoto - A free and easy photo hosting service

Ill post a Hijack log to i dont know if this would be usefull, but the more info the better look you guys can get i think ( dont know al that much about pc's), been looking around for 2 days, only found this problem solution for Windows XP,

Hijack:

Code:

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 10:05:06, on 29/05/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Users\Felix\AppData\Local\ATI Drivers\ATI_MainBoard.exe
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
C:\Program Files (x86)\AVG\AVG9\avgtray.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\... Read more

Answer:Very slow pc, multiple processes

boot in safemode and run Malwarebytes or Spybot

9 more replies
Relevance 49.61%

Hello,I have a coworker that uses excel pretty much exclusively all day because he is one of the accountants. He recently got a new computer and at first put Office 2007 Standard on it but was not used to it so he put Office 2003 Standard on it. He said when he has different excel workbooks open that when you click window up at the top that it is supposed to show all of the open excel files/workbooks. He noticed that its not doing that (ie. he can have a few different workbooks open and they dont all show up when you click on window in the top menu. I have noticed that on my computer, even if I have multiple instances of excel open that in task manager there is only one excel process; but on his computer if he has a few different workbooks open there are a few different excel.exe processes open. I uninstalled both versions for him and reinstalled 2003, but he said the problem persists. Can anyone offer any advice that might steer me in the right direction to help him?My name is JRComp, and I approve this message.

Answer:Multiple Excel Processes

Not sure this will help, using Excel 2000, on XP.If I open the first instance of Excel I will have only one process running, now if I open a second workbook from within this first Excel workbook, I will still have only one process running. Regardless of how many workbooks I open from within the first instance, I get only one process.The only way I can get another Excel process to run, is if I then go to the START > Programs > Microsoft Office > Excel and explicitly start another instance.Having both 2003 & 2007 running at the same time, would probably cause two separate process to run.Someplace along the line I would guess that a registry entry got flummoxed.Try running a Detect & Repair, and see if that help. MIKEhttp://www.skeptic.com/

4 more replies
Relevance 49.61%

I have 3 sometimes even 4 of the same processes running such as svchost.exe, iexplore.exe, ccsvchst.exe. They are eating up my memory and my computer is slow and crashes! I think its a virus or spyware.

I run windows xp, sp3. I have Norton 360 and no viruses are found.

The HJT file is attached.

Please help!!

Answer:Multiple Processes Running

Hi,Multiple instances of svchost.exe and iexplore.exe are totally normal. If you would only have 1 instance of svchost.exe running (for example), you would have a lot of problems as svchost manages many services which are required to run Windows properly.As for iexplore.exe, this is also normal. This was introduced since IE7. This is because of the IE Tabs feature and crash recovery.ccsvchst.exe is a part of your Norton. There's no malware present here, nothing strange/suspicious in your log. The "being slow" and crashes may be because of Norton, because Norton is known to cause this behavior on some systems. To troubleshoo, temporary uninstall Norton, then reboot and see if your Windows behaves better. You can always reinstall Norton again if that didn't solve the problem. If your Windows is behaving faster with Norton uninstalled, it's maybe time for another Antivirus alternative.Also see here for slow computers: Help! My computer is slow!

2 more replies
Relevance 49.61%

Hello there

I'm currently having a problem in that multiple iexplore.exe keep running in the background without me loading them and a suspicious file called 0w1367q0.exe seems to be the problem. Please find my dds logs below:

DDS (Ver_10-12-12.02) - NTFSx86
Run by Richard at 14:27:37.53 on 21/01/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3327.1998 [GMT 0:00]
============== Running Processes ===============

C:\WINXP\system32\nvsvc32.exe
C:\WINXP\system32\svchost -k DcomLaunch
svchost.exe
C:\WINXP\System32\svchost.exe -k netsvcs
C:\WINXP\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINXP\system32\spoolsv.exe
C:\Program Files\Creative\Shared Files\CTAudSvc.exe
svchost.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINXP\System32\svchost.exe -k HTTPFilter
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Sony\PMB\PMBDeviceInfoProvi... Read more

Answer:Multiple iexplore.exe processes

HiPlease run the following:Scan With RootKitUnHookerPlease Download Rootkit Unhooker and save it to your desktop.Now double-click on RKUnhookerLE.exe to run it.Click the Report tab, then click Scan.Check (Tick) Drivers and StealthUncheck the rest. then click OKWhen prompted to Select Disks for Scan, make sure C:\ is checked and click OKWait till the scanner has finished and then click File > Save Report.Save the report somewhere where you can find it. Click Close.Copy the entire contents of the report and paste it in your next reply.Note** you may get the following warning, just click OK and continue."Rootkit Unhooker has detected a parasite inside itself!It is recommended to remove parasite, okay?"

25 more replies
Relevance 49.61%

I just downloaded Chrome to test it out again. I had it when it first came out, but I didn't like it much then. Anyway, I just checked my task manager to see what the difference was between firefox (120k w/ a bunch of tabs) and chrome. What I found was interesting... Multiple chrome processes all between 10 and 30k.

My Question: Is this normal?



In total, with three tabs open Chrome had: ~119k in processes, thats not much of an improvement over Firefox :/

Answer:Chrome - Multiple Processes

Yep each tab has its own process and in newer dev builds even each addon has its own process. The idea is that if a tab or an addon crashes, it wont bring down the whole browser. I regularly have about 20 processes open from chrome and therefore dont much like the idea. Ive been looking for a way to disable it.

9 more replies
Relevance 49.61%

I have come across a number of examples of this on a couple of machines but I can't work out the problem as its intermitent.

The problem manifests itself as multiple processes open for number of the application open. When I look on the task manager there are usually about 140 - 200 processes running (most of the multiples). And I can't kill the processes as they continue to multiple.

Can anyone shed some light on what could be causing this?

Thanks
 

Answer:Multiple Processes Crashes XP sp2

10 more replies
Relevance 49.61%

I am having problems with my computer for the past few months, it has been running a few extra FireFox processes, I uninstalled it and then it went on to use IE processes, all as soon as i turn on the computer.I got HijackThis and installed it here is the log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:08:16 PM, on 3/13/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16981)Boot mode: NormalRunning processes:K:\WINDOWS\System32\smss.exeK:\WINDOWS\system32\winlogon.exeK:\WINDOWS\system32\services.exeK:\WINDOWS\system32\lsass.exeK:\WINDOWS\system32\svchost.exeK:\WINDOWS\System32\svchost.exeK:\WINDOWS\system32\ZoneLabs\vsmon.exeK:\Program Files\AVG\AVG9\avgchsvx.exeK:\Program Files\AVG\AVG9\avgrsx.exeK:\Program Files\AVG\AVG9\avgcsrvx.exeK:\Program Files\CheckPoint\ZAForceField\IswSvc.exeK:\WINDOWS\system32\spoolsv.exeK:\Program Files\CheckPoint\ZAForceField\ForceField.exeK:\Program Files\AVG\AVG9\avgwdsvc.exeK:\Program Files\Java\jre6\bin\jqs.exeK:\Program Files\LogMeIn\x86\RaMaint.exeK:\Program Files\LogMeIn\x86\LogMeIn.exeK:\Program Files\AVG\AVG9\avgam.exeK:\Program Files\AVG\AVG9\... Read more

Answer:Multiple Firefox.exe processes

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions... Read more

2 more replies
Relevance 49.61%

Hello Malwaretips Staff,

I have encountered the dllhost.exe*32 issue. I did have a ransom:win32/crowti issue and possibly may still have it. Microsoft essentials runs and warns me as well. It is the same issue i believe that all others have with the dllhost.exe*32 (COM Surrogate).

Please help, I deeply appreciate your time and support in this matter. I will check daily and reply as soon as I can. I would really like this issue to be resolved as i cannot do anything on my laptop. Please let me know if there is anything you need me to upload or run.

I have uploaded the Farbar Recovery Scan Tool results.

Thank you very much.
 

Answer:Hello. Please help. RE: dllhost.exe *32 multiple processes

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Code:

Start
CustomCLSID: HKU\S-1-5-21-2842711328-3727693777-432756069-1000_Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\localserver32 -> rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mbohvbhf>ktds (the data entry has 247 more characters). <==== Poweliks?
Task: {E5A28F36-C64C-43F9-9CA5-FF05331AD3C1} - \AutoKMS No Task File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
HKU\S-1-5-21-2842711328-3727693777-432756069-1000\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-2842711328-3727693777-432756069-1000\...\MountPoints2: {3263cfbc-8142-11e1-9226-c0f8dac6c39d} - "F:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-2842711328-3727693777-432756069-1000\...\MountPoints2: {8fc3ecda-d319-11e0-9c1c-806e6f6e6963} - H:\Autorun.exe
HKU\S-1-5-21-2842711328-3727693777-432756069-1000\...\MountPoints2: {cf6ee64e-1489-11e1-b0d5-c0f8dac6c39d} - F:\LaunchU3.exe -a
HKU\S-1-5-21-2842711328-3727693777-432756069-1000\...A8F59079A8D5}\localserver32: rundll32.exe javascript:"\..\mshtml,RunHTMLApplication ";eval("epdvnfou/xsjuf)(=tdsjqu!mb... Read more

13 more replies
Relevance 49.61%

I have an issue where multiple "iexplore.exe" processes appear in Task Manager when cause my screen to freeze. I will be able to click on running processes on the task bar, but when I try minimize them they will stay on the back and overlap with other programs I have opened.

The only way I can stop this from happening is by opening Task Manager, navigating to the "Processes" tab and right-clicking on "iexplore.exe" (there is several duplicates of it running) and clicking on "End Process Tree."

It also occurs when I use Google Chrome (because I downloaded it to check) but it does not do it for Mozilla Firefox.

This will occur even when Internet Explorer 8 is not running.

I did primarily post this in the Malware section, but they could not solve the problem (though they were very helpful):
http://forums.majorgeeks.com/showthread.php?t=214885

Thanks.
 

Answer:Multiple iexplore.exe processes

With one I.E. window open, I have two iexplore.exe's running. This is typical. You may wish to try uninstalling IE and after running CCLeaner, re-install it and see if that helps.
 

8 more replies
Relevance 49.61%

The problem is that every minute or so, another IEXPLORE.exe opens up using another 10k mem.

I know that its some kind of malware and i've searched the web for help. A few have said that there are certain .dll files that have to be deleted (I didn't have them) and another said that I should rename something or other.

Could someone please just give me a simple guide on how to stop the multiple IEXPLORE.exe's?

Thank you in advance.

Answer:Multiple IEXPLORE.exe Processes.

Post us a log so we can see. Hijack this!

6 more replies
Relevance 49.61%

My computer is hanging extensively when any browser is opened. In the Windows task manager, there are eight different svchost.exe processes showing up. I have run updated Malwarebytes and nothing shows up as a threat. Also, when using Outlook, it repeatedly asks for the password even though that password is already stored. I don't know if this is related to a possible infection trying to lift passwords or keystrokes. Any insight is welcome.

More replies
Relevance 49.61%

I am running IE 8 and when I open IE, after a few minutes there are anywhere betweeen 7-15 iexplore.exe running in the processes. Even if I close everything most of them still remain. They even show up if I dont open explorer. I have noticed it also has cause many svchost.exe to run as well. Ran MalwareBytes and nothing. Help!!!
 

Answer:Multiple iexplore.exe processes

Moved to the software forum.
 

9 more replies
Relevance 49.61%

So I opened task manager the other day and noticed that there was an ever-changing list of processes labeled: Flzvnbcuzs.exe *32 labeled as by Google Chrome. I figured the process name in and of itself was pretty suspicious so I checked the file location and it led to: C:\Users\Matthew\AppData\LocalLow\pybcbjl\hyfppxuol\Flzvnbcuzs.exe
and I looked around in these folders and all of them had random gibberish names. I troobleshooted for a bit around first by uninstalling google chrome and google drive and anything related to Google but the processes were still there. And someone said uninstalling uTorrent would do something, so I did, and the processes were no longer in task manager, so I proceeded to delete the file location of the processes (which it previously wouldn't have allowed me to do because the file was open and running). Upon doing so the processes immediately reappeared in task manager and the new file location became: C:\Users\Matthew\AppData\LocalLow\SKS\pybcbjl\hyfppxuol
So basically it just remanifested itself in another folder. I'm looking to get rid of this because it's been eating up my processor and slowing down my browser.
*I've run through all of my virus protection, Malwarebytes, Microsoft Security Essentials, and even CCleaner, nothing detected

Answer:Chrome.exe *32 Multiple Processes

Hi & to Bleeping Computer Forums!My name is Jürgen and I will be assisting you with your Malware related problems.Before we move on, please read the following points carefully: My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.If I don't reply within 24 hours please PM me!Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.Step 1Please run a FRST scan. This will help us diagnose your problem.Please download Farbar Recovery Scan Tool and save it to your Desktop.(If you are not sure which version (32-/64-bit) applies to your system, d... Read more

13 more replies
Relevance 49.2%

Hello,

I am having trouble getting rid of these multiple (precisely 3) internet explorer processes that startup in the background periodically. Only one of the 3 processes is actually taking up all the CPU. In the application view on task manager I can see the internet explorer program, even when I do not have it open. I can also see the application at random websites (changing between them).
 

More replies
Relevance 49.2%

I'm having a big problem with multiple IE processes loading up for no reason and its killing my computer, and this morning I had audio ads pop up in the background.....I need to get this resolved asap!

Answer:IE Multiple Processes Running - Virus?

Hello and swelcome. Please run these and post the logs and we'll see if it is improved.Please download MiniToolBox, save it to your desktop and run it. Checkmark the following checkboxes: Flush DNS Report IE Proxy Settings Reset IE Proxy Settings Report FF Proxy Settings Reset FF Proxy Settings List content of Hosts List IP configuration List Winsock Entries List last 10 Event Viewer log List Installed Programs List Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and save it to your desktop.Important!! When you save the mbam-setup file, rename it to something random (such as 123abc.exe) before beginning the download.Malwarebytes may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet and double-click on the renamed file to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.Malwarebytes will automatically start and you will be asked to update the program before performing a scan... Read more

5 more replies
Relevance 49.2%

Hi, I hope you can help me

I share a computer with my friend and we 'switch user' quite often. When he logs in his session runs very, very slowly with the hour glass on screen at all times. His process list in task mgr has 50+ iexplore.exe and ctfmon_fn.exe programs running. When I log in I have approx 4-5 instances of the same programs. Kaspersky tells me I have a 'worm.win32.generic' detected in a _restore(xxx...) folder in various files like A0014567.exe.

Can it be eliminated??

Thanks

Sorry forgot the attachments
Here is the dds.txt

I attached the attach.txt as an rar file (I DONT USE WINZIP)
also GMER.EXE quit (tried it twice) without the option to save the log file HELP!


DDS (Ver_09-12-01.01) - NTFSx86
Run by edsdev at 22:47:47.70 on Sat 12/19/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1110 [GMT -8:00]


============== Running Processes ===============

C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\mmm.exe
svchost.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\Quebecor World\VPN Client\cvpnd.exe
C:\Program Files\DU Meter\DUMeterSvc.exe
C:\Program Fi... Read more

Answer:Multiple iexplore.exe in task Mgr Processes #2

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

I need to see a gmer log in order to help you.

Delete your existing copy of gmer. Please run this special version of gmer:

Download GMER Rootkit Scanner from here and Save it to your Desktop. Double-click gmer.exe to run it. If asked to allow gmer.sys driver to load, please consent.
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.



Click the image to enlarge it


In the right panel, you will see several boxes that have been checked. Uncheck the following ...Sections
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and attach it to your next reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any... Read more

19 more replies
Relevance 49.2%

This appears to be related to http://www.bleepingcomputer.com/forums/t/544970/yikes-possible-gnarly-rootkit-on-my-system-need-some-help/ and http://www.bleepingcomputer.com/forums/t/545162/browserexe-rogue-process-taking-up-memory/  .  
 
 I have been wrestling with this problem all day.  I didn't think it was really a problem with Chrome, but I uninstalled it anyway.  I also deleted from Recycle Bin.  I then deleted the Google folders.
 
I right clicked on one of the many browser.exe*32 process, and clicked 'Open File Location".  Pathway is Username\AppData\LocalLow\NavigatorWireless\SupporterHumble\browser.exe      I renamed the browser.exe and even renamed and deleted the apparent bad file folders in it's pathway.  That lasted about 15 minutes.  I've tried renaming with .old extension and with a garbage name.  When I reconnected to the internet and went online with IE 11, it restarted.  The original rouge names of files and folders re-appeared.  I've run Malwarebytes, Superantimalware, Symantec Endpointe Protection, and ADWcleaner.  Initially, nothing was finding anything wrong.  At least now MalwareBytes is blocking some of the websites.  Help!

Answer:Rogue browser and multiple processes

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware to your desktop.NOTE. If you already have MBAM 2.0 installed scroll down.Double-click mbam-setup-2.0.0.1000.exe and follow the prompts to install the program.
At the end, be sure a checkma... Read more

5 more replies
Relevance 49.2%

Over time I notice that processes like scvhost are duplicated several times, is that to be expected or do some people mask viruses by running them as common names? what is the best way to distinguish a viral process or are most viruses these day hidden inside other processes as DLLs or what have you?
 

More replies
Relevance 49.2%

Any help would be greatly appreciated! My computer has turned into a snail. It is an HP pavilion dv7 in case that info is needed.

Thanks!
 

Answer:Multiple dllhost.exe*32 COM Surrogate processes

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyon... Read more

10 more replies
Relevance 49.2%

Hi, I hope you can help me

I share a computer with my friend and we 'switch user' quite often. When he logs in his session runs very, very slowly with the hour glass on screen at all times. His process list in task mgr has 50+ iexplore.exe and ctfmon_fn.exe programs running. When I log in I have approx 4-5 instances of the same programs. Kaspersky tells me I have a 'worm.win32.generic' detected in a _restore(xxx...) folder in various files like A0014567.exe.

Can it be eliminated??

Thanks

Answer:Multiple iexplore.exe in task mgr processes

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Relevance 49.2%

Hi, I have a customers computer that I've been struggling with for the last 2 days.  The computer was pretty much unusable when it came in, now it works pretty well but there are 2 to 4 "iexplore.exe *32" running in the process section.  TDSS Killer removes some sort of unknown item, but it keeps respawning.  I've run Malwarebytes, adwcleaner, Avast, and more.
 
Here's the problem.  I read in the sticky that it'll take on the average of 5 days for help in this forum.  My customer is a business customer and needs it back asap - I don't have 5 days (especially since I already have had it for 2 days).
 
What is the current time for help - by chance is the forum caught up so I can get help today?  If not I understand, but if I can't resolve this quickly I'll have to recommend to the customer to wipe out the hard drive and reload - he already expressed he didn't want to do that though.
 
Really hope i can get this resolved quickly for him...
 
Accessory
 
Ran Farbar and attached the FRST.txt and Addition.txt
 
Here is the reports
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by User (administrator) on USER-PC on 19-03-2015 00:24:26
Running from C:\Users\User\Desktop\AC Tools
Loaded Profiles: User (Available profiles: User)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 9 (Default browser: IE)
Boot Mode: Normal
... Read more

Answer:Multiple iexplore.exe *32 processes running

Hey,Step 1: AdwarecleanerPlease download AdwCleaner (by Xplode) from the link below and save it to your Desktop:Download Mirror #1Right-click on AdwCleaner.exe and select Run as administrator. (If you have Windows XP the just run it)Click Scan and let the scan run.When it finishes, click Clean, following the on screen promptsAfter your computer reboots, a log will open. Please Copy (Ctrl+C) and Paste (Ctrl+V) this into your next post.Note: The log can also be found in here: C:\AdwCleaner\Step 2: MalwarebytesPlease download Malwarebytes Anti-Malware to your desktop Install the progamme and select updateOnce it has updated select Settings > Detection and ProtectionTick Scan for rootkitsGo back to the Dashboard and select Scan NowIf threats are detected, click the Apply Actions button, MBAM will ask for a reboot.On completion of the scan (or after the reboot) select View Detailed LogSelect Export > Select text file and save to the desktopAttach/Post that logStep 3: Junkware Removal Tool  Please download Junkware Removal Tool to your desktop.Shut down your protection software now to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".The tool will open and start scanning your system.Please be patient as this can take a while to complete depending on your system's specifications.On completion, a log (JRT.txt) is saved to your desktop... Read more

2 more replies
Relevance 49.2%

AMD Athlon(tm) 64x2 Dual Core Processor 3600+
1.9 GHz,896 MB RAM Physical Address Extension

MIcrosoft Windows XP Professional
Service Pack 2

Hey guys, new to the forum. I can google all day long and not find the answer to this headache... so I figured I would try the site that I DL nice and neat lil progs from to get some help.

I have this .exe named IEXPLORE (note: the r is missing so it worries me a bit. Thinking something has renamed my IEXPLORER. Furthermore, when I try to end process tree via Task manager, it disappears between 5 to 10 seconds and pops up again while the other one still remains running. With NO Browser open. I completely unistalled yahoo messenger thinking it might me a toolbar or something with yahoo. Still no luck. Ran the A squared anti malware in safe mode nothing detected that would fix the IE prob. This is depleting my recources and memory something fierce, I get low pings on games and crappy browsing because of it. Help me please!, and thank you for your knowledge and any light you can shed on this pain in my AMD.
-Brad-
 

Answer:Multiple IEXPLORE.exe processes running.

Welcome to Major Geeks!

iexplore.exe is the correct name for Internet Explorer. It does not have an ending "r" like Windows Explorer which is named explorer.exe.

Based on your HJT log it appears that you are using an illegal version of Windows XP. I see a tool being used to bypass Windows Activation. You should get a legal copy of Windows XP which will be much easier to support and keep updated and that could help you avoid possible malware issues.

Are you saying that when you obtained your HijackThis log that you did not have any browser windows open??? Are you sure?
If you boot in safe mode and do not open any browsers yourself, do you still see iexplore.exe processes running?

Please follow the instructions in the below link and attach all of the requested logs when you finish:

Read & RUN ME FIRST Before Asking for Support
 

15 more replies
Relevance 49.2%

Hi guys,

I'm on my dad's laptop and want to watch videos on Youtube, play games such as WoW, Etc. Only thing that's stopping me are like 100 processes of Iexplore.exe that are running.

I am new to this forum and after looking around it seems like a great place to be active, I appreciate any help.

Also I do understand that 'specified for situation' sort of assistance is probably needed, I don't have IE running, this case pops up automatically from the start-up of my computer till the shutdown.

Thanks guys and hello
 

Answer:Multiple Iexplore.exe processes running

I remember just pressing tech support and all of a sudden I'm in the blue screen of death section, would appreciate a section change if possible, if not I wish to copy and paste this to appropriate section, sorry.
 

8 more replies
Relevance 49.2%

Alright, so when I open a task (Ex. Firefox) multiple processes shows with firefox.exe name in the 'Task Manager'.
firefox.exe


svchost.exe
 

Answer:Solved: Multiple processes for the same task

You can ignore svchosts as this is normal. It is a windows file that runs the exe several times using different switches which invokes different things.

lots of programs run multiple times, there is nothing to worry about. Do you have several browsers of firefox open? Or is it an old version?
 

1 more replies
Relevance 49.2%

Hello everyone, recently I have caught a bit of a bug on the ol' computer. Here's the short story.

I got the "Think Point" malware virus about a week ago. Took a lot of work to get just that off of my computer. After checking registries and using removal tools I felt happy about vanquishing this foe. Sadly the next day I noticed several instances of "mshta.exe" running in my task manager. I can't really tell what all the processes are doing, but I have noticed that I get redirected when using search engines. I feel that this is some for of spy ware / malware. I've searched everywhere I can think of and my tools can't seem to narrow down the issue.

So in hopes to resolve this I have turned to you all for help and I am grateful that a site like this exists.

Thanks for the time and future efforts.

More replies
Relevance 49.2%

Just switched to high speed cable and four days in I've already got a problem.  It is triggered when I open a folder or start IE.  I can see conhost.exe flash in Task Manager followed by multiple processes of dllhost.exe-COM Surrogate, it will open several, eating up processor but more concerning I can see it eating bandwidth as well.  Also any open folder shows a green progress bar at the top like it is indexing or something.  I can END all the dllhost.exe-COM Surrogates in Task Manager but they return when I open a folder or start IE again, also IE keeps resetting the 'File Download' in security to 'Disable'.  I can change it and get files downloaded but the next time I open IE it's set back to disable. 
 
I have managed to download and run rkill, TDSSKiller and RogueKiller.  I was able to make several passes with Spybot and Malwarebyts (finding Trojan.Sirede.C and Backdoor.OAccess among other things) until they no longer find any more.  I thought I had it fixed but the COM Surrogate came right back.
 
Just now for the first time I got a message saying 'COM Surrogate has stopped working, end program?'
 
I could use some help rooting this the rest of the way out.
 
Thanks

Answer:Multiple processes of dllhost.exe-COM Surrogate

Hello, 
 
Based on the detections by Malwarebytes Anti-Malware, the following warnings must be issued. 
The issue involving dllhost.exe is most likely due to the presence of Poweliks; a rootkit which also opens a backdoor on the compromised machine. 
 

BACKDOOR WARNING
------------------------------
One or more of the identified infections is known to use a backdoor, that allows attackers to remotely control your computer, download/execute files and steal critical system, financial and personal information.Please disconnect your computer from the internet immediately. If your computer was used for online banking, has credit card information or other sensitive data, using a non-infected computer/device you should immediately change all account information (including those used for banking, email, eBay, paypal, online forums, etc). Consider these accounts already compromised.Banking and credit card institutions should be notified of the possible security breach immediately. Please read the following for more information: How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?
Whilst the identified infection(s) can be removed, there is no way to guarantee that your computer will be trustworthy again. This is due to the nature of the infection, which allows the attacker complete control over the computer. Many experts in the security community believe that once infected with this type of malware, the best cours... Read more

1 more replies
Relevance 49.2%

Computer slows, Task manager shows approx. 20 instances of dllhost.exe*32 COM Surrogate. Resets IE security to block file downloads. Previously was trying to upload to web sites Appsrumors.com and Searchnet.Blinkxcore.com. Have run SuperAntispyware, MicrosoftSecurity Essentials, Malwarebytes, AdwCleaner, and others, they've slowed down the culprit but it comes back again and again. System is running Windows 7. Any suggestions?

Answer:Multiple dllhost.exe*32 COM Surrogate processes.

I haven't applied this to a laptop I have at home but here is a link to fixing this "Poweliks Virus." Please post on if it works or not :-)Mod Edit by quietman7: link to non-Bleeping Computer malware removal guide removed.

14 more replies
Relevance 49.2%

I need help. I have noticed that I have iexplorer.exe running in the background and I use firefox. During startup my Symnatec Antivirus gives some warnings about perlx.exe or something. Can someone help me please. What do I need to do? I run Superantispyware and it doesn't find anything.Thanksedit: Added a bunch of logscans.....I don't know what I needed so Ihere we go:DDS (Ver_09-12-01.01) - NTFSx86 Run by Tokeisch at 23:46:17.40 on Sun 01/10/2010Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_17Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1278.585 [GMT -5:00]AV: Symantec Endpoint Protection *On-access scanning enabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}FW: Symantec Endpoint Protection *enabled* {BE898FE3-CD0B-4014-85A9-03DB9923DDB6}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupC:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exesvchost.exesvchost.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\Program Files\ActivIdentity\ActivClient\accoca.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exeC:\WINDOWS\system32\IoctlSvc.exeC:\WINDOWS&#... Read more

Answer:Multiple iexplorer processes and perlx.exe

What to do now...

12 more replies
Relevance 49.2%

My computer has multiple cmd.exe *32 under the task manager which take up all of the CPU processes. I don't know how to get them off. I have seen similar threads for windows 32 bit. Is there a special way to diagnose the problem for 64 bit operating systems? Help would be much appreciated.
 

More replies
Relevance 49.2%

Hello all,

I believe this may be an issue with Firefox 4.01 and the newest Firefox 5.0, but I wanted to check with you all before uninstalling Firefox 5.0 again. On startup, I see roughly 50-60 rundll32.exe processes branched under taskeng.exe. I terminate these processes and there are no issues. Throughout the day, I steadily get more rogue rundll32.exe processes (about 1-2 per hour), all branched under taskmgr.exe. This happened a few months ago and the fix was to uninstall Firefox 4.01. I was hoping Firefox 5.0 wouldn't have these issues, but apparently so.

Please find pasted below my HJT log. Let me know if you have any more questions!
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:09:47 AM, on 7/13/2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\ProtectionUtilSurrogate.exe
C:\Program Files (x86)\Zend\ZendServer\bin\zendcontroller.exe
C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe
C:\Program Files (x86)\adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
C:\Program Files (x86)\Zend\ZendServer\bin\php-cgi.exe
C:\Program Files (x86)\Pidgin\pidgin.exe
C:\Users\nberanek.IFMGOFFICE\Desktop\Process Explorer\procexp.exe
C:\Program... Read more

Answer:Multiple rundll32.exe processes on startup

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:***************************************************First, I need to know if you still need help! To tell me this, please click on http://www.bleepingcomputer.com/logreply/409308 and follow the instructions there. If you do not still need help, this is all you need to do. If you do need help please continue below.***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.A new DDS and GMER log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
Please do this even if you have p... Read more

2 more replies
Relevance 49.2%

Quite often when I click on the IE icon, no window opens but there will be an IEXPLORE.EXE process in the Task Manager. This may happen as many as 5 times before an IE window will actually open. Other times an IE window will open the 1st try. This has been going on for about 2 months.

I have used Cleanup, Eusing Registry Cleaner, Ad-Aware, Spybot, SpywareBlaster, HouseCall, and AVG. The problem seems to clear up for a day or two, but it always comes back.

When this happens it slows down other software, especially MS Pub and any IE windows that I'm trying to use to edit web pages with an online editor.

Thanks in advance for any help. I may not be able to check back until this weekend.

Here's the HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:26:04 AM, on 1/18/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\CFusionMX7\runtime\bin\jrunsvc.exe
C:\CFusionMX7\db\slserver54\bin\swagent.exe
C:\CFusionMX7\db\slserver54\bin\swstrtr.exe
C:\CFusionMX7\runtime\bin\jrun.exe
C:\... Read more

Answer:Multiple IEXPLORE.EXE processes - HJT log attached

6 more replies
Relevance 49.2%

I am running a Windows 7 machine primarily using Google Chrome. I regularly use antivirus software and a firewall and run a weekly scan. However my system runs very slowly and I have been trying to find the source of what I assume is a virus or malware.  I have tried different online scans and new antivirus programs and nothing seems to work.  I was investigating all the processes that are running and noticed multiple instances of chrome.exe *32.  I had noticed them in the past but assumed they were related to Google Chrome.  When I searched that process, I found multiple postings on your site dealing with the same problem.  It seems you have a particular order to work through the issue so I am reaching out to see if you can help me.  You seem to have been very successful in the past with other folks.  Your reply and help is greatly appreciated. 

Answer:multiple chrome.exe *32 processes running

Chrome.exe (Chrome.exe *32) is a legitimate process related to the Google Chrome web browser. Multiple copies of chrome.exe, referred to as process-per-tab, listed in Task Manager is intentional by design as a crash control. Chrome creates three types of processes (browser, renderers, and plug-ins). Each Chrome tab is treated as it's own individual process for the life of tab meaning it is treated as a separate process so that multiple tabs can run with less problems. This feature increases responsiveness, and prevents the browser from locking up if a particular web app or plug-in stops responding. In the event of a browser crash or hang in one tab, it prevents the entire browser from closing down. Chrome has its own built-in Task Manager which is accessed by right-clicking on the browser's title bar. You can see what which process does by going to Menu > Tools > Task Manager. The Chrome Task Manager lets you track resource usage for each individual tab and lets you kill any tabs that have stopped responding without having to restart the entire browser.For more specific information, please refer to:Chrome's Process Model ExplainedMulti-process ArchitectureUnderstanding Chrome & ProcessesWhy Does Chrome Have So Many Open Processes?There are numerous comments about this at the Chrome Help forum. See Multiple chrome.exe in Task Manager.Tools & Tips to Optimize & Troubleshoot Memory/CPU Usage in Firefox and Chrome:Tools to optimize the Memory Usage of Firefox an... Read more

16 more replies
Relevance 49.2%

Hey folks, I solve one problem and have another one creeping up behind me.

All right, so earlier tonight, I was cruising around the web and went to check a forum or something and my computer starts acting really odd, so I go and I look in the task manager, and I see so many taskeng.exe processes that I couldn't view them all, and my computer started going really odd so I rebooted and kept an eye on it. I've ran a virus scan and everything else to try and figure out what is going on.

I downloaded Process Explorer to look, and i'm watching as they continually crop up once more.

As I'm typing this more have shown up.

I have a hijack this log, and the screenshot of this happening as well, this is just insane, I've never seen this before.

I heard that there could possibly be an issue with User_Feed_Synchronization

as I read on http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=3057095&SiteID=17

when I went and searched Microsofts site - however, I do not know where to fnd the User Feed Syncrhonization as I looked where they had specified it would be, and I didn't see it.

This all started happening after I updated to SP1.

I could really use some help here before I go batty.

I"ve attached a screenshot of the timestamps of the taskengs and the like, I'm entirely unsure of what this is doing, and I need some help, please.

Thank you.
 

Answer:Solved: Multiple Taskeng.exe processes

10 more replies
Relevance 49.2%

I recently noticed getting high latency in video games so I started up task manager and went to performance>resource monitor and found that there were up to five different svchost processes sending and/or receiving information over the internet (out of 15 total svchost processes). Days later and I'm still having this problem. I have Background Intelligent Transfer Service disabled and any automatic updates. I think i may have a virus but neither malwarebytes nor Webroot spysweeper found anything in safe mode. Thank you for taking the time to read this post.

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_30
Run by OWner at 23:51:38 on 2012-05-09
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.6126.4273 [GMT -5:00]
.
AV: Webroot SecureAnywhere *Enabled/Updated* {9C0666FC-6C7D-3E97-3C40-0C6B33FC7401}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Webroot SecureAnywhere *Enabled/Updated* {27678718-4A47-3119-06F0-3719487B3EBC}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files\Webroot\WRSA.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k L... Read more

More replies
Relevance 49.2%

Hello,
I have a problem,
I have multiple instances of same program(exe file) in the processes, even though there's supposed to be only one or none.
This never happened to me before and yeah, its not too good for my cpu, since it's usage is increased.
here's some pictures from task manager[note: none of these programs are opened in so many instances, for ex, Winrar is closed]:






Can I fix it without reinstalling windows?

Answer:Multiple instances of same program in processes

Glary Utilities

This is a free software and if my memory serves me, you can remove duplicate files.
Make sure you back up your system first.

9 more replies
Relevance 49.2%

Hi,

I am in the latter stages of clearing up an infection, which hit at about 23:30 on 12/05, and have run out of ideas about how to go about killing the remaining stuff. Avast caught a couple of things trying to come in, and missed some stuff. MBAM found and destroyed Trojan.ZbotR.Gen, but there still looks like there's something left. At this point both Avast and MBAM give the computer a clean bill of health.

At startup, two copies of firefox.exe are running, and trying to access the Internet, using only about 5600KB of RAM, so way below a standard Firefox instance. It sounds a lot like what this guy had: http://www.bleepingcomputer.com/forums/topic302454.html. I think that most of the infection has been got rid of, but obviously something isn't right. I give as good candidates the last two files in the GMER log, something like c:\program files\AXnCRRKN‘??ytkyipmv.exe

Here are the DDS and GMER logs.

Best wishes,

David

------------

DDS (Ver_10-12-05.01) - NTFSx86
Run by David at 15:23:46.14 on 06/12/2010
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_17
Microsoft Windows XP Professional 5.1.2600.3.1252.44.1033.18.895.446 [GMT 0:00]

AV: avast! Antivirus *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: ZoneAlarm Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}

============== Running Processes ===============

C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system3... Read more

Answer:Multiple Firefox processes at startup

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

13 more replies
Relevance 49.2%

Hello
 
My computer starts up and runs up to 9 Chrome.exe *32 processes upon start up and when running.  I've read up on this and it appears to be malware.  I've tried some of the removal tools but to no avail.  Problems include a very long start up time, machine running very slowly in general and a lot of pop ups.
 
I have followed the instructions for posting a new thread.  Following is the FRST log and the Addition log is attached.  Thank you much in advance for your help!  - Kevin
 
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2015
Ran by User (administrator) on DTNI-PC02 on 02-02-2015 14:55:48
Running from C:\Users\User\Desktop
Loaded Profiles: UpdatusUser & User (Available profiles: UpdatusUser & avecadmin & User & LogMeInRemoteUser)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IBM Corp.) C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
(NVIDIA Corporation) C:\Program Files\NVI... Read more

Answer:Multiple Chrome.exe *32 processes on start up

Hey, Step 1: AdwarecleanerPlease download AdwCleaner (by Xplode) from the link below and save it to your Desktop:Download Mirror #1Right-click on AdwCleaner.exe and select Run as administrator. (If you have Windows XP the just run it)Click Scan and let the scan run.When it finishes, click Clean, following the on screen promptsAfter your computer reboots, a log will open. Please Copy (Ctrl+C) and Paste (Ctrl+V) this into your next post.Note: The log can also be found in here: C:\AdwCleaner\Step 2: MalwarebytesPlease download Malwarebytes Anti-Malware to your desktop Install the progamme and select updateOnce it has updated select Settings > Detection and ProtectionTick Scan for rootkitsGo back to the Dashboard and select Scan NowIf threats are detected, click the Apply Actions button, MBAM will ask for a reboot.On completion of the scan (or after the reboot) select View Detailed LogSelect Export > Select text file and save to the desktopPost that logStep 3: Junkware Removal Tool  Please download Junkware Removal Tool to your desktop.Shut down your protection software now to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".The tool will open and start scanning your system.Please be patient as this can take a while to complete depending on your system's specifications.On completion, a log (JRT.txt) is saved to your desktop and w... Read more

12 more replies
Relevance 49.2%

Hello, I am new to the forums so I don't know how to put this plainly, but I have numerous numbers of iexplorer.exe and rundll32.exe processes that run on startup. I have discovered that it's downloaded over 1200 files on my System32 and SysWOW64 and it's disguised as Internet Explorer in the Program Files (x86) (I have Windows 7). I have deleted the folder "Internet Explorer" in Program Files (x86) because that is what the virus created. It was protected by TrustedInstaller, so I changed permissions to delete the folder, but the folder has returned the next few days.

These processes have took up a lot of memory, so it interrupts me while I am playing games. I have read other posts on this forum such as this one:
http://www.bleepingcomputer.com/forums/topic455768.html

I don't know if it will work the same if I did it.

Also, I have discovered that these .MUI files are extensions made by the virus. Can you help me get rid of iexplorer.exe and rundll32.exe, as well as every trace of it? :D

Thanks!!

Answer:multiple processes of iexplorer.exe and rundll32.exe, need help!

Can anyone respond quickly? I'd really want to get rid of this virus; I'm afraid it might take over my laptop and lock it.

22 more replies
Relevance 49.2%

Every hour another mshta.exe process starts. Looks like it is trying to connect to 85.234.191.60/88.php. I've seen a few other people having the same issue. Also, when I start my computer, svchost.exe is taking 100% of the CPU causing it to take extremely long to load. I have to kill the svchost.exe process before it can finish. I have run DDS and GMER. Below are the dds.txt, attach.txt and GMER logs. Thanks for your help.
DDS (Ver_10-12-05.01) - NTFSx86
Run by dknerr at 9:30:20.66 on Thu 12/09/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_22
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.469 [GMT -5:00]

AV: Symantec Endpoint Protection *On-access scanning enabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}
FW: Symantec Endpoint Protection *disabled* {BE898FE3-CD0B-4014-85A9-03DB9923DDB6}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:�... Read more

Answer:mshta.exe multiple processes running

Hello and welcome to Bleeping Computer We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far. Upon completing the steps below another staff member will review your topic an do their best to resolve your issues. If you have already posted a DDS log, please do so again, as your situation may have changed. Use the 'Add Reply' and add the new log to this thread. Thanks and again sorry for the delay. We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scr DDS.pifDouble click on the DDS icon, allow it to run. A small box will open, with an explaination about the tool. No input is needed, the scan is running. Notepad will open with the results. Follow the instructions that... Read more

2 more replies
Relevance 49.2%

Hello,

I am having trouble with atleast two programs not opening up all of the way in W2K (all current updates have been installed). I first noticed this with the CD burning program Nero. The smart-start nero program pops up fine, but when I click on "burn a music CD" nothing happens. For every time that I click "burn a music cd" a new process of nero.exe opens up in Task Mgr. By the way, NONE of these processes can be ended in Task Mgr either. It gives the error msg "This program cannot be closed, if it is being debugged please resume it or close the debugger first."

I have un-installed and re-installed Nero serveral times with the same results. I have also seen a similar problem with a bit-torrent program I use called BitComet. When clicking a torrent link to download, it freezes as well. It actually opens the BitComet program up, but nothing happens beyond there. The same error message comes up if I try to terminate the process in Task Mgr. I have also run multiple virus and spyware scans just to be safe.

A few other details from Event Viewer....

Windows cannot unload your registry file. If you have a roaming profile, your settings are not replicated. Contact your administrator.

DETAIL - Access is denied. , Build number ((2195)).

The driver detected a controller error on \Device\Harddisk1\DR2. (I HAVE A TON OF THESE).


Any help is appreciated!

Thanks,

dazed
 

More replies
Relevance 49.2%

Hi,
 
Back again after 2 trouble free years. I was able to find and remove malware using the usual tools but still am still getting multiple dllhost.exe with Com Surrogate in the description processes spawning. I end them and they still come back. Not sure if related, but:
 
IE keeps changing security settings to disable file downloads whether I set the Internet zone to default or Custom.
Getting blue screen DRIVER IRQL for netw5v64.sys but downloading latest intel driver seems to have fixed it
 
Thanks for the help,
Larry

Answer:Multiple dllhost processes & malware

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
 
If the system has been used after topic creation time we need to take a look at fresh logs.
Please download the latest version of Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Sca... Read more

2 more replies
Relevance 49.2%

Hi Guys,

This is my first post on this forum and I would really appreciate any advice anyone has to offer.

My problem is that when I open IE or Firefox, I end up with multiple iexplore.exe or firefox.exe processes running. Usually there will be one or 2 extra processes running in addition to the one that I am actually using. These processes really use up a lot of my CPU resources and slow everything down. I am able to kill the processes and everything will work fine (it seems). But, when I close the browser, the processes start up again and start hogging resources.

I think I may have got the malware from the svpod.com website where I was trying to watch some streaming sport events. I stupidly downloaded their svpod player and then the problems started with the extra browser processes running and slowing everything down.

I have done scans with AVAST! and spybot and superantispyware and malbytes malware and although 1 or 2 problems were picked up and repaired, it didn't fix my problem.

I have read a couple of the other related threads but most of them said that the problem was with processes which could not be killed, whereas mine can so I figure it is a different issue.

Another problem that has occured as a result is that my itunes shortcut on the desktop started trying to run some kind of installer which was very strange. I stopped the installer and deleted the shortcut.

I also noticed some strange new folders in my folder where my documents, music etc are stored.... Read more

More replies
Relevance 49.2%

Hello all,
I've been browsing the forum for a few days now and trying multiple different fixes to cure my issue but nothing seems to be working.  A few days ago my computer started slowing down and becoming almost impossible to even use.   I found that the DLLHost.exe was using up copious ammounts of CPU.  I immediately ran Avast, Spybot and MalwareBytes and found a few things to delete/quarantine but the issue was still not resolved.
 
Next, I downloaded the Process Explorer program and ended the DLLHost.exe process tree.  This resolved the issue for about 5-10 minutes then it all started happening again.  I ran CCleaner to remove all temp files and clean my registry, re-ran Avast, CCleaner and MalwareBytes, uninstalled anything I could think of that I'd installed in the past week but to no avail.  I'm not really sure where to start but would really appreciate anyone that is willing to take some time and help me out.
 
Also, I don't have any available restore points on my computer and am on Windows 7 64bit. 
 
Thanks for reading!

Answer:DLLHost.exe - Multiple Processes eating up CPU

You could try giving the Poweliks remover a try: http://download.eset.com/special/ESETPoweliksCleaner.exe

7 more replies
Relevance 49.2%

Windows 7 Professional Operating System with Kapersky (so-called) "security protection". I have recently discovered multiple Chrome.exe processes running.  I followed the processes to the "file location" and noticed that the folder/files were created on 10/23/14.  I immediately ran Malwarebytes with no results.  The I deleted the folder from the "ProgramData/Microsoft/PlayReady" (like most of the people in your threads) only to have the virus create a folder in "AppData/LocalLow/Apple Computer/xipddvyf/...".  I have read through several of your threads and seen a range from successful results to contacting financial institutes.  Please help!  Thank you in advance for your time.Edit: Moved topic from Windows 7 to the more appropriate forum.~ Animal

Answer:Chrome.exe multiple processes virus...

Thank you Animal.  I realize my amateur mistake of posting in wrong forum and duplicated into the Virus....Removal section.  Thanks for cleaning up my mess!

11 more replies
Relevance 49.2%

Hey there, obviously you can see that I'm new here and here for a specific reason and this being my reason.

So I just noticed that I had 5 explorer.exe processes running before with no windows/browsers open.

I could tell my main one apart because it used more memory and the others all had *32 at the end (I'm using an x64 version of Win 7 Home)
I ended them and nothing happened, but then I also checked msconfig under the start-up tab and saw....

803explorer.exe
883explorer.exe
867explorer.exe
719explorer.exe

They are all located under C:\Users\[username]\AppData\Roaming
and in the registry "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"

Now should I be worried about this? Is it a potential virus?
I'm skeptic as to whether it is because I just reformatted my Hard Drives yesterday

I'll run a Malwarebytes scan over night for now and disable the processes from start-up too.

Any help/advice is appreciated a lot
 

Answer:Solved: Multiple explorer.exe processes

7 more replies
Relevance 49.2%

Hi all,

Lately, IE has been crashing at random. I also noticed instances of multiple iexplore.exe processes, despite no browser windows being open. Each time I end the processes, they just keep coming back. It's not unlike what I've seen happen a couple of years ago to some users.

As soon as I boot up in normal mode, there is at least one iexplore.exe already running when I check Task Manager and when I try to browse through folders (eg. My Documents), my computer starts to lag as the number of iexplore.exe processes start to multiply.

At this point, I'm a bit stumped as to what to do. Repair methods that worked for people with similar cases in the past don't seem to be doing the trick. I've run Ad-Aware, Spybot S&D, Malwarebyte's Anti-Malware, a-squared, found and got rid of other stuff while scanning in safe mode. Unfortunately, the fix for this one problem escapes me, so your help would be much appreciated!

Here's my HiJackThis log.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:02:15 PM, on 4/1/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.... Read more

Answer:IE crashing, multiple iexplore.exe processes

6 more replies
Relevance 49.2%

First off, I've posted to a number of other forums and recieved no response, so I am hoping I might recieve some help here. Either I get help from this forum about this problem, or I'm taking my harddrive in to the local computer shop.1: I have multiple versions of IEXPLORE.EXE running off and on in my processes, no browser windows opening, but it does give the cursor the hourglass and minimizes whatever is in the foreground. I also hear that popup noise that comes from when your XP needs an update and so on. It also wont allow me to run SpyBotS&D. In fact, the .exe for the program is gone, and when installing, I watched it and many other parts of the program be deleted automatically. Very suspicious.2: In response to this problem I have tried TrojanHunter(Which hangs up and freezes half way through scans. When it finishes it finds nothing to do with IEXPLORE.EXE), I tried RegistryBooster just now, found 250 errors, but the IEXPLORE.EXE is still furiously popping around on my processes. Along with RB came SpeedUpMyPC which is inactive from the start, and also refusing to uninstall, giving the error "PSysProbe::update,section6,section6.1, Invalid argument to date encode"I tried scans with AVG Anti Virus, and Security Task Manager, and Windows Defender, and nothing has resolved the IEXPLORE.EXE problem. I think it might be a trojan or a worm or something. I am sure theres more than just those problems I'm dealing with that I can't locate. Here is the HijackThisLog... Read more

Answer:A Doozy. Iexplore.exe Multiple Processes

Hi and welcome to Bleeping Computer! My name is Sam and I will be helping you. Let's see what we can turn up for you.Please download ComboFix and save it to your desktop.Double click combofix.exe and follow the prompts.When it's done running it will produce a log for you. Please post that log in your next reply.Important Note - Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

24 more replies
Relevance 49.2%

I may have gotten this "virus" or weird executable program from Limewire (curses to limewire!!) by accepting a strange connection.

I have an extra explorer file located within C:\windows\system32 and I believe this is the source of my woes (at least according to Bazooka). However, it appears that I cannot permanently delete this file as it restores itself on every boot up.

To further add to my woes, sometimes I cannot start up normally and need to go into safe mode. Some explorer.exe error pops up and my computer freezes.

So please, please, please help me! I really wouldn't want to go through the trouble of reformatting my hard drive.

Logfile of HijackThis v1.99.1
Scan saved at 1:03:19 AM, on 2/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS... Read more

Answer:Multiple IEXPlORE.exe and svchost.exe in processes

Oh yeah,

I forgot to say that I've already tried a lot of different programs to try to get rid of it. Adaware, Spybot, AVG, Symantec, Panda, Avast, and Trend Micro. The program's still there harassing me.

Zorrorrorro

7 more replies
Relevance 49.2%

hello there, i'm glad i found this forum and i'd like to mention i'm a newbie here , but here it goes; i've been getting BSOD's on a daily basis while playing , browsing , or just booting up my windows, i've tried everything and then i found the WinDBG tool, but it doesen't help me as much as the next guy since i'm let's say on a begginer level

i've only attached one dump file since i deleted the rest by accident

Computer specs : Intel QuadCore Q6660 @2.40ghz, 2.4gb RAM, 32-bit Windows 7 OS nVidia GeForce 9400 GT , maxtor ide 80gb HDD, asus p5w64 WS pro motherboard, Realtek RTL8139/810x Family Fast Ethernet NIC, onboard soundcard

Answer:Daily BSOD, on multiple processes

I've gotten a new BSOD since the last time i posted, i`ll upload the dump

7 more replies
Relevance 49.2%

Good Afternoon,
 
I have multiple SVC Host instances open in the process tab under task manager.  This is causing the machine to run slow and I fear their is malware/virus/rootkit controlling this.  How do I provide logs needed for analysis?

Answer:Multiple SVC Host instances in processes

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Download Malwarebytes' Anti-Malware from HereDouble-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).The scan may take some time to finish,so please be patient.If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Log... Read more

2 more replies