Over 1 million tech questions and answers.

SearchFilterHost.exe Process running CPU at 100%

Q: SearchFilterHost.exe Process running CPU at 100%

Dual booting a 32bit 2Ghz, 2GB RAM laptop with Vista Business and Windows 7 RC1, No issues under Vista (hard to believe I know) but under 7 the SearchFilterHost.exe consistently churns my CPU at 100%, I can only temporarily suspend the service but can't stop it or remove it, any idea to stop the churning of my CPU?

Preferred Solution: SearchFilterHost.exe Process running CPU at 100%

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: SearchFilterHost.exe Process running CPU at 100%

Try disabling the Windows Search service. SearchFilterHost.exe is the process for Windows Search. It is involved in indexing, caching, etc. Or try to change the priority to below normal or lower.

Read other 30 answers

The resulting heat means my laptop sounds like it is trying to take off. I have tried removing .xml files from indexing as has been suggested on my multiple searches. Didn't help at all. Somehow turning off the process if possible is also not a solution in my opinion.

Looking in Event Viewer, I noticed a great many of the following 'Warnings' from the 'Search' source "The protocol host process 8472 did not respond and is being forcibly terminated {filter host process 10000}." The numbers involved change frequently.

Any ideas as to how I can fix this? It's driving me mad. I have attached a screenshot from the process tree area of Process Monitor, it is perhaps relevant.

Read other answers

The searchprotocalhost.exe, searchindex.exe, and the searchfilterhost.exe are running up to 50% of cpu capacity when I look in the taskmanager process tap. My computer is locking up because of this. It just started the other day.



A:searchprotocalhost & searchfilterhost Running

Windows Search is a useless service, often clogging system resources.
Disable it: http://windows-7-help.blogspot.com/2010/02/disable-searchprotocolhostexe-high-cpu.html

Read other 3 answers

I have a serious problem that freezes my computer.

The earchfilterhost.exe, searchprotocal.exe, and searchindexer.exe programs are running upto 50% of cpu capacity and freezing my computer up. I have to restart my computer.

I need help as this is my work computer. Do I have a virus?


Read other answers

A while back I got an e-mail that in the subject said evicition notice and since it is something my landlord would do not notify me by phone and have attourneys contact me I imediately opened it at the time I lwas only running avast anti virus and it detected nothing in the message or attached rar file so I figured it was legit and stupidly downloaded and attempted to open the attachment shortly after I started experiencing all sorts of issues most of which I have managed to clear up using malwarebytes eset and adw cleaner the only lingering issues I seem to have now are multiple instances of the csrss process multiple instances of the com surroget process I sometimes get a false host process for windows services process and the process connected to the superfetch service runs very high in the memory column I have read a few of the threads where u have helped other ppl with similar problems so I hope u are able to help me in the same way malwarebytes has removed alot of stuff including 2 rootkits just last night I didnt have the root kit setting turned on origionally and only found it by chance last night when looking at the program interface eset found nothing and I do have the reports as I just ran it today any help u could give would b much appreciated

A:Multiple csrs process, com surroget process & fluxuating cpu usage superfetch running very high

I also have multiple host precess for windows services that are not connected to any service and do not appear in the process list where they should and when I end them it opens multple com surroget processes on top of the 2 that I already have so I wind up with 3 sometimes 4 com surroget processes and one that appears then goes away periodically eset detectsdetects nothing malwarebytes on the other hand detects 2 rootki

threat type location

Cidox.J.vbr phyical sector master boot sector on volume #0

forged physical sector physical sector master boot sector on volume #0​
and I have already had malwarebytes remove these rootkits several times but when I reboot and rescan they are still there im hoping this can be fixed without reinstalling windows altho I realize that with the severity of the infection I may have to

Read other 77 answers

We religiously track Windows Application fault events in our environment.

Recently we have noticed that when, Word 2013 x86 version (15.0.4823.1000, 15.0.4805.1001) running on Windows 8.1 x64,  crashes due to corrupted heap, we find suspended winword process that have no running threads.  the ccorrupt heap crashes are of
the type  exception c0000374 in Ntdll.dll at offset 0x000e6054.  We have two different situations in which we can trigger a crash that will produce the corrupted heap.

The problem is after the App crash the Windows Error Reporting service, attaches the WerFault.exe to the crashed process and saves the WER Dump file.  The problem is after this process is finished we are left with Winword.exe process that are in suspended
state.  They are not visible in the TaskManager but they show-up in Procexp,  these process have no running threads and the End task or end task tree have no impact.  The only way to exit the suspended process is to log off the user session. 

The suspended Winword.exe process cause problems when we re-launch a clean word, we have an add-in that detect's the suspended Winword and will not run.

On a test machine we disabled the WER service and of course we no longer see suspended threads, this is not an option for use because stopping the WER service stops logging of all Application Fault event ID 1000 and Application hang 1001 entries from the Application

We also tried to ex... Read more

Read other answers

I jsut reformated an old PC, and have installed XP with SP2. I have wintasks 5 pro trial version running while I attempt to track down this problem

I have 2 processes in taskmanager running on my pc


These files do not exist.

I have logged on with the admin account, set explorer to show all system and hidden files, checked thru a dos prompt with the attrib command to list in case it was hidden there.

There are .pf files of these in the C:\Windows\prefach directory, which I have removed but retain a copy on a different hard drive.

Winstasks will take care of IXJWGDTBRAJHTYSVDSSSU.EXE-26E575D5.EXE if I run it and remove it from the startup. With UCEHGO, I try and nothing happens in the program and the process stays put.

I have checked thru the registry to see if there are any entries relating to these 2 processes, and cannot find any.

I have also tried to do a search on the web for those 2 files but do not get any results.

Does anyone know what these files are or how I might be able to remove UCEHGO.exe from starting on bootup?


A:Processes running in Taskmanager, but no file that process says its running from

Those look like trojan files. If they are running processes..then they ARE in the system and the registry. Download hijackthis and post your log in the SECURITY section..not here. Someone will go through it for you.

Read other 1 answers

My firewall keep asking me permission to allow this progem internet access.


Is this safe to do so??


It appears to be safe.

Read other 3 answers

I have encountered some strange behavior today while moving a large folder from one hard drive to another - in the middle of the process the moving stopped to a grinding halt and the CPU got basically maxed out by the process SearchFilterHost.exe. It was "working" like that for a long time, about 10 minutes, then the move continued.

While this is the only time I've experienced that, it's rather annoying that such a thing is possible. After all moving files is as basic as OS functions get. This occurrence tells me that somehow the file moving is not optimized on my machine. Any suggestions?


I'd suggest a disk defrag.

Read other 3 answers

How can I disable this feature, and if I do, will it cause any problems?

At times, my work computer slows, and the task manager shows Searchfilterhost.exe and a few other related applications using a lot of CPU. I can hear the H.D. chattering big time and task manager shows CPU use at 77%.


For information on Searchfilterhost.exe see this link: http://www.processlibrary.com/directory/fi...earchfilterhostIt is not a critical component, so you can probably disable it. In task manager, select the process and click 'End Process' or right click and select 'End Process'.

Read other 17 answers

Hi,Every 10 to 15 min, I have this an error searchfilterhost.exe with this message:The statement "0x0...622a" in referenced memory "0x00000014. The memory can not carry out the "read" process. Klick "OK" to end the program.The first "code" changes every time but it always ends with 622a. I got these (then I stopped writing it down):0x0314622a0x04a5622a0x0517622a0x045f622a0x044f622a0x0329622a0X0476622a0x059d622a0x033d622a0x0303622a0x04d6622a0x04b1622a0x0518622a0x0344622a0x0339622a0x046a622a0x0303622a0x0467622aCan some help me resolve this? It's very annoying!Here is the log of HijackThis i ran earlier:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 15:17:05, on 06/07/2011Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\windows\System32\smss.exeC:\windows\system32\winlogon.exeC:\windows\system32\services.exeC:\windows\system32\lsass.exeC:\windows\system32\svchost.exeC:\windows\System32\svchost.exeC:\Program Files\Alwil Software\Avast5\AvastSvc.exeC:\windows\system32\spoolsv.exeC:\windows\System32\svchost.exeC:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\PROGRA~1\FICHIE~1... Read more

A:Erreur Searchfilterhost.exe

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

Read other 26 answers

This just started popping up and occurs every few minutes. Please help

A:[SOLVED] searchfilterhost.exe

We need a little more information than that. Do you mean it's using too much CPU/Memory?
If that is the case, try the following:

click Start, Run, type services.msc and click OK, changing the Windows Search service startup type from Automatic to Manual and then clicking Stop the service.

It's not a fix, per say, but a workaround if you find yourself having problems with that process. Also be sure to perform a malware scan.

Read other 9 answers

Hi Everbody,

I hope someone can help me with this problem.

A "SearchFilterHost.exe - Application Error" Box keep appearing. It states: "The instruction at (different values) referenced memory at "0x00000014". The memory could not be "read". Click on OK to terminate the program".

It seems to have appeared after I cleaned up a virus and used a registry cleaner afterwards. Windows restore, registry repairs, different virus scanners etc. have not been able to change the popups. They are infrequent and do not seem to have any links with certain programs running.

I would be grateful for any help


A:Searchfilterhost.exe - application error


If you have Windows Search 4.0 installed...I would uninstall it.


Read other 5 answers

I know there are many questions around on the indexing processes, searchfilterhost, searchindexer, searchprotocolhost. I had disabled xml files from indexing, the processes seemed to be dormant for a while.

How often are they supposed to run? What actually triggers them?

Right now I'm watching SearchFilterHost take 10-35% of CPU for about 45 minutes(!). I fail to see the usefulness of indexing, which is meant to speed up searches, when they bog down my computer for so long.

Setting Windows Search to Manual (in services.msc) makes any difference? Should I disable Windows Search altogether in start up?


A:What's your solution for the pesky SearchFilterHost and the rest?

Since you asked my preference is to disable windows search indexing and use third party software for searching files and file contents.

It's not as straightforward as simply disabling the Windows Search Service though.

Briefly - the Windows Search Service has been deleted from my machine. Drive indexing has also been disabled on all drives. (Right click drive > General Tab > Uncheck - Allow files on this drive to have contents indexed...

Most users seem to like Windows Search. I'd suggest trying alternatives before messing about with disabling or removing it! (make a system image backup too).

Read other 3 answers

I had the b.exe malware on my computer and it also added a bunch of virus to my computer. I successfuly removed all of them and got rid of b.exe from a system restore. Everything seems to be running fine but on my norton 360 security history it will say once in a while that C:\WINDOWS\system32\SearchFilterHost.exe has accessed the internet. Is this bad? What does C:\WINDOWS\system32\SearchFilterHost.exe do? I think its nothing but I am just kind of worried after all the virus\malware that was on my computer yesterday.


A:[SOLVED] What is the purpose of C:\WINDOWS\system32\SearchFilterHost.exe

his service looks after the Internet look up for Help topics , and Desktop search on the Vista platform. Its also tied into the search indexer in Vista.

It's a trustworthy service and can be allowed access, or you can turn off the option to Search the Internet for Help Topics by opening a Windows Help window, click Options, settings, then uncheck the "Include Windows Online Help & Support when you Search For Help" box. and the "Join the Help Experience Improvement Program" because if you signed up to help make Windows better, it needs to send this info to MS and that's another part of this service.

Read other 2 answers

I have 45 processes running when i do control-alt-delete.

Can i get rid of some? If so how? And which should i not touch?

A:Process running too many?

Read other 9 answers

Does anyone no what this running process is....


A:Running Process

Most of the files are common to both the serial and USB drivers. Those files that are associated with only one of the serial or USB drivers are identified as such.

I think its just a USB driver.

Take a look at this link

Read other 2 answers

these are a list of my running process,s what i want to know is do i need all these running and why are there two entries for ati2evxx.exe and also svchost.exe.
aswell as that i want too know why winlogon is there as i dont use a login procedure on my pc at all.
also plz tell me if there not needed how i disable them from running in future.
thanks dan

1 winlogon.exe Running Safe Medium Memory Usa... Process Scan For Errors
2 xcommsvr.exe Softwin BitDef... Running Safe Low Memory Usage Service Scan For Errors
3 bdss.exe Running Safe Low Memory Usage Service Scan For Errors
4 svchost.exe Running Safe Medium Memory Usa... Internet Service Scan For Errors
5 wmiprvse.exe Running Safe Low Memory Usage Process Scan For Errors
6 processscanne... ProcessScanner Running Safe Low Memory Usage Process Scan For Errors
7 bdmcon.exe BitDefender 10 Not Running Safe Not Available Autostart Scan For Errors
8 vsserv.exe BitDefender 10 Running Safe Low Memory Usage Internet Service Scan For Errors
9 spysweeper.ex... Spy Sweeper SD... Running Safe Low Memory Usage Service Scan For Errors
10 explorer.exe Running Safe Low Memory Usage Process Scan For Errors
11 alg.exe Running Safe Medium Memory Usa... Service Scan For Errors
12 ati2evxx.exe Running Safe Low Memory Usage Service Scan For Errors
13 ati2evxx.exe Running Safe Low Memory Usage Service Scan For Errors
14 ctfmon.exe Running Safe Medium Memory ... Read more

A:Running Process,s Someone Take A Look Plz

You can use the Startup List, available from the tab at the top of this page, to decide if you need the programs to run at startup, or not.If it's not on the list, Google should supply additional information on the program.

Read other 4 answers

I have a HP dv6103nr laptop. 2gb of ram Recently i have started to experience an extreme slowdown and constanst fan running. i have run AdAware and Sybot.. Listed below is the HiJack this report just run. The only change of recent is that my Ipaq rx1955 dies so I don't need activesync and the wcescomm.exe that loads. i have also noticed several other items running that I have no idea of. I look forward to your assistance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:35:56 PM, on 7/21/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Media Center Diagnostic Kit\Tests\Bin\ehMonitor.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\... Read more

A:CPU Process always 100% and fan always running

Read other 16 answers

i have many diffrent things running in task manager that i am sure i dont need to be there for example
i dont use or need any kind of networking whatsoever i also dont need anything to do with a printer as i dont use one
i dont use internet explorer ever i only use firefox,,theres loads of things that i know are being started up when i dont need them as i dont use them.
is there anywhere i can go to find out what i do need and what i dont safetly as to me its just a waste of resources.
and besides i can always undo these when and if i need too.
and one final thing i am on aol at the moment (yes i know i must be mad lol) but i dont connect using there software but it is installed i was wondering if i can completely remove it from my pc and continue connecting via my own configured connection i set up usiong windows itself.
ie by just providing a user name and password which saves me having to use there terrible software there homepage alone is enough to make you guive up and not bother going online.
but i found a way past that and surfing has become a hell of a lot better.
so basically do i need any of aol,s software on my pc to connect using the method i desrcribed above (hope not) and if not whats the best way to completely remove every trace of aol,s software.
i know i kept rambleing on but i think its understandable questions.
thanks for even reading lol

Read other answers

can someone tell me what process should be running,and what ones,shouldnt?also how can i stop the ones not needed?thanks len

A:process running

it is hard to say which ones you need as it depends on what is installed on your system and what is needed to run for the software you have. If you know you do not need one running, end the process. If you are not sure of a process, google the name of it and you should come up with links telling you what that prosecc belongs to

Read other 1 answers

Every AM about 4is my computer goes into mush mode. Im sure something is scanning or updating. I try task amanger and it only shows the web page I have up but the CPU is maxed out. The graph has it spiking to 100%. Ive checked all my programs and they dont appear to be the culprit.

I have a gateway AMD athelon 64 2.4 meg
1g ram(I know Im underpowered for vista)
Vista home premium.
and SBC broadband
the freeware I have loaded is
Spybot SD
hijacl this
Ive even opened up all the programs and none of them were running
Heres the Hijack this log- Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:04:45 AM, on 5/16/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16764)
Boot mode: Normal

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:43:52 AM, on 5/22/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16764)
Boot mode: Normal

Running processes:
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Spare Backup\SpareBackup.exe
C:\Program Files\Napster\napster.exe
C:\Program Files\BigFix\bigfix.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\Canon\MyPrinter\BJM... Read more

A:Running process?

Read other 16 answers

are the suppose to be multiple services of the same program running at the same time. enclosed is a picture of my task manager, as u can see i have svchost.exe running, is that right?

A:process running on xp?

those look to be ok..

Read other 2 answers

I have Win NT 4.0 workstation and I wonder if I can run a process in the background (application)and log off without stopping it. Do I have to install that application on the Server.


Read other answers

Hello all ... here's my log.Logfile of HijackThis v1.99.1Scan saved at 6:52:20 PM, on 7/24/2006Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\New Boundary\PrismXL\ChannelDeploy.sysC:\Program Files\Cisco Systems\VPN Client\cvpnd.exeC:\Program Files\Symantec AntiVirus\DefWatch.exeC:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYSC:\Program Files\Symantec AntiVirus\SavRoam.exeC:\Program Files\Symantec AntiVirus\Rtvscan.exeC:\WINDOWS\System32\wuauclt.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Microsoft AntiSpyware\gcasServ.exeC:\Program Files\Prism Deploy\Client\PTClient.exeC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\PROGRA~1\SYMANT~1\VPTray.exeC:\Program Files\Microsoft AntiSpywar... Read more

A:Poups And Process Running.

Hello Pinto Khan, and welcome to Bleeping Computer. My name is Charles and I will be helping you to clean up your computer.Please give me some time to look over your log and I will get back to you as soon as possible.Thanks,Charles

Read other 2 answers

Hello -

I've spent some time googling and trying to utilize fixes other people have suggested, but it will simply not go away.

I rarely use IE unless required to. Yet, every day there is history in my browser, and at any given time, iexplore.exe *32 is running in my processes. Every once in a while, the audio from something that sounds like an ad will run, and I cannot stop it as it doesn't seem to be associated with anything I can stop.

I've run MalwareBytes, and it cleans things, but this is persistent. Generally use Symantec, but have also scanned with Microsoft Essentials, and installed SpyBot...I've lost track of things I've tried.

I recently also removed the Department of Justice virus, which I'm guessing is separate from this situation. Somewhere along the way, I've noticed that my System Restore was disabled, and when I tried to re-enable it, it throws a syntax error which I cannot copy/paste, but reads:

The filename, directory name, or volume label syntax is incorrect.

It now SAYS that restore is running, but I'm not sure. I did manage to create a manual restore point yesterday however.

The computer is only a few months old. Windows 7, 64 bit. Lenovo ThinkPad.

Thank you in advance for any help you can provide.

Attaching text files:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:20:51 PM, on 12/31/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal... Read more

Read other answers

My daughters portable PC from school has a trojan on it called iexplore.exe that runs the CPU to 99-100% all the time. Spybot Search & Destroy did not cure this and I think it may be the same problem as found here:

I am in the process of downloading SDFix & ComboFix, so will post these reports along with a HijackThis report in this thread too in the hopes that someone can help me out on this.

It should be noted that iexplore.exe is a process that is running from Start-Up and is running in the background. The process doesn't seem to be able to be stopped using the CTRL+ALT+DELETE method, as it seems to re-appear instantly somewhere else in the process list as the same process.

It should also be noted that this minature PC is a Samsung Q1 which is supplied from the school and is supposed to be protected, but it obviously isn't. Luckily, no banking has been done on this PC, but I want to fix this nontheless.

Thanks in advance,


A:iexplore.exe process running CPU at 99-100%

SDFix Report


[B]SDFix: Version 1.240 [/B]
Run by user on 16/12/2008 at 17:51
Microsoft Windows XP [Version 5.1.2600]
Running From: C:\SDFix
[B]Checking Services [/B]:

Restoring Default Security Values
Restoring Default Hosts File

[B]Checking Files [/B]:
No Trojan Files Found

Removing Temp Files
[B]ADS Check [/B]:

[B]Final Check [/B]:
catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [URL]http://www.gmer.net[/URL]
Rootkit scan 2008-12-16 18:28:58
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden services & system hive ...
scanning hidden registry entries ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

[B]Remaining Services [/B]:

Authorized Application Key Export:
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domai... Read more

Read other 2 answers

Damn, it's not running now.
It was ahegjpmd.exe. Google search turned-up nothing.
Another one alg.exe is running. Haven't Googled it yet.
Also, I keep getting a small (basic gray, no frills window) pop-up saying:
"click yes for instant access". It pops-up on my desktop.

I've also recently been battling Crystalis (spyware?). Think I'm winning for now.

This all leads to my biggest headache:
I subscribe to Rhapsody and over the last 2 weeks it's been very slow. Songs start slowly.
Buffering is slow at beginning and starts again 50 seconds in to song.

HTJ log.... damn crystalis is back.
Logfile of HijackThis v1.99.1
Scan saved at 9:39:57 PM, on 1/10/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
... Read more

A:unknown process running

Read other 16 answers

What is this executable file:
And why is it running on one of my machines?

A:Background Process Running

I cannot find it on any database [not a good sign]
I would delete it and do some virus scans

Read other 1 answers


This problem has only started happening recently. Computer is getting really slow, and seems to slow down periodically to a crawl. The mouse pointer becomes jerky, and it feels like some process is using up all resources. I have closed down all running programs, and it still happens, usually when i have just closed a program down. I really don't want to re install windows, as this is a relatively fresh install anyway (about 3 weeks). I am running XP 64 with 1 gig ram, athlon 64 3700+. nvidia gefroce 8600 gts. How can I find out whats doing it. It surely can't be a hardware issue can it? I know this isn't the fastest setup, but its running slower than my old athlon 2500+ setup. Windows takes a long time to load too.
Help please.

A:Please help. Interfering running process.

Read other 10 answers

The past few days I have noticed a process running on my computer and I cannot figure out what it is for. The process is i02x4uB8.exe and it is causing my internet not to work. In the morning there are 3 running and if I close them out, the internet will start working. I have no idea what this process is related to and I was wondering if anyone had any idea??? I've tried googleing it and have found no results. Any help is much appreciated!!

Read other answers

In the Task Manager the explorer.exe is running the entire time. It is using my RAM is it OK to kill the process or it it an essential part and it has to run all the time. If I kill it will this harm Windoes XP and will it start to run again when I start the laptop the next time I turn it on?
Please help. Many thanks from the top.

A:Task Process Running

Explorer.exe is Windows Explorer (not Internet Explorer). It is a vital process that Windows must have in order to function.

In XP, if you turn off explorer.exe by accident and haven't closed Task Manager, you can restart it on the Applications tab by clicking the New Task button, entering explorer.exe, clicking OK.

Stopping and restarting explorer.exe can often fix glitches. It's not quite the same as rebooting Windows entirely but it's close.

Read other 1 answers

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:37:24 AM, on 12/14/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16945)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\ActivIdentity\ActivClient\accoca.exeC:\Program Files\Altiris\Dagent\aclient.exeC:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\applemobiledeviceservice.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\LogMeIn Hamachi\hamachi-2.exeC:\Program Files\Google\Update\GoogleUpdate.exeC:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Intel\AMT\LMS.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exeC:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exeC:\Program Files\PDF Complete\pdfsvc.exeC:\Program... Read more

A:system process running at 50%

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. If you have not already downloaded Random's System Information Tool (RSIT), please download Random's System Information Tool (RSIT) by random/random which includes a HijackThis log and save it to your desktop. If you have RSIT already on your computer, please run it again. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. Please post the contents of log.txt. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until ... Read more

Read other 2 answers

Hi there,

I was going thru my task manager and noticed that there was a process that didn't seem to belong there usnsvc.exe. I did some research and came up with the conclusion that it might not be good. There is no problems with my computer operation-wise but I would like someone to take a look at my HJTlog and make sure that I don't have any nasties in my system. Thanks!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:54:23 AM, on 02/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18241)
Boot mode: Normal

Running processes:
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Q-Type Pro\Versato.exe
C:\Program Files\Q-Type Pro\OSD.EXE
C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
C:\Program Files\Opera\opera.exe
C:\Program Files\Al... Read more

A:Unrecognizable process running


Any takers?

Read other 1 answers

I have searched all over for an answer to this issue but cannot find anything anywhere. It is really stumping me. The problem is that on my computer the 'System' process is running at >50% with no applications running. I have ran McAfee & Spybot scans and cleared all viruses and spywares found. When I boot into safe mode this problem does not appear. However, when I boot in diagnostic mode the 'System' process still runs >50%. When I analyse the 'System' process with procexp I do not get any module info on the thread which is causing the system process to use >50% of the CPU. Lastly if I suspend the thread (as it cannot be killed) I note that the heatsink fan speed in the computer drops. I have attached some procexp info as follows:

Process PID CPU Description Company Name
System 4 51.47
System Idle Process 0 44.85
SERVICES.EXE 852 2.21 Services and Controller app Microsoft Corporation
procexp.exe 1380 1.47 Sysinternals Process Explorer Sysinternals
WSCNTFY.EXE 1744 Windows Security Center Notification App Microsoft Corporation
wmpnetwk.exe 1320 Windows Media Player Network Sharing Service Microsoft Corporation
WINLOGON.EXE 808 Windows NT Logon Application Microsoft Corporation
VsTskMgr.exe 1348 Task Manager : scheduling and OAS alerting service Network Associates, Inc.
UpdaterUI.exe 1628 Common User Interface Network Associates, Inc.
TomTomHOME.exe 3688 TomTom HOME TomTom
tfswctrl.exe 2232 Drive Letter Access Component Sonic Solu... Read more

A:'System' Process Running at >50%

I think MS updated the file as part of a security patch in March. Some info suggests might have issues.

This can also be an unwanted file change and depending on the file location it is running from might be a virus.

Suggest posting a HiJackThis to the security forum to have them assess.

Read other 2 answers

Hi, I have WinCTF running all the time in my applications/process list. I have tried to search for it but no results. Only 1 site found which states its a virus (alias for paradox.exe)

Can anyone tell me what it is and why its running all the time?
Or if its something unwanted how can I remove it?

A:running application or process

Read other 13 answers

I've got a process that runs in the background perfectly 99% of the time. But once in a while, for no apparent reason (at least I haven't been able to associate it with anything) the ETLISRV.EXE process will take over my processor and all of it's resources.

I'm running W2K sp4 build 2195 on an optiplex 150. ETLISRV.exe is the Entrust Login Interface Service by Entrust Technologies and I've got it running on automatic.

Thanks very much for the help.

A:Process running wild!

Create a folder on your hard drive for Hijackthis, like My Documents\HJT
Click on this link and save the file into the folder you have created.
Unzip the file to the folder.
Scan your machine, then click on Save Log.

Post a copy back here and someone will be happy to review it.

Don't make any changes until instructed to do so.

Read other 1 answers


Just got a new computer and after installing programs, I show "WinFax MOD" as a running application and/or process. Is this slowing down my system? Can I/should I remove it? If so how?
Thanks for any assist...

A:WinFax Mod (Running Process)

winfax is a component of outlook express, you can probably disable it from there, though i doubt it will slow down your system much, have a look in task manager to see how much memory and CPU its taking up

Read other 2 answers



Microsoft Windows XP Professional SP2

Well heres my problem...

When I open my computer, my documents & close them I get this error [explorer.exe Application Error]
The instruction at "0x032513d2" referenced memory at "0x032513d2". The memory could not be "read"

I performed system restore hoping that my system would go back to it's no error state but still no effect...
So I restart to safe mode & perform system restore again auto shutdown then when I start it says system cannot be restored something like that... So I though my computer might be infected with something so run AVG it doesn't seem to detect any threat but still the explorer.exe error is there...
So I looked at my windows task manager & I saw a lot of svchost.exe running there so I googled it and some say it's a threat some say windows need it... Please help!

A:Unwanted Process Running?

Hello and WelcomeFirst thing to do is not to worry, The svchost.exe basically means service host it is a way for other applications to gain access to the internet. while this is perfectly normal, sometimes a infected file can use svchost.exe to do a number of potentially unwanted things. To make sure that the system is clean, here are a couple of online anti virus scans...http://housecall.trendmicro.com/http://www.pandasoftware.com/products/ActiveScan.htm Follow the instructions and they will scan for viruses and other malware. After they have finished, I would recommend downloading advanced windows care, http://www.iobit.com/AdvancedWindowsCarePe...al/download.htm this will find most windows problems and repair them.Hope this helps, Let us know how you get on

Read other 2 answers

I ran dds com scan and found a running process that I cannot get any further information on. Can anyone help me determine if it is malware and how I can get rid of it?
============== Running Processes ===============

A:unknown running process

Hello raices2,The DDS logs were truncated. Please try again. and make sure you COPY all lines & then Paste into main of reply box.Download DDS and save it to your desktop from http://download.bleepingcomputer.com/sUBs/dds.com here or http://download.bleepingcomputer.com/sUBs/dds.scr or http://www.infospyware.net/sUBs/ddsDisable any script blocker if your antivirus/antimalware has it.Then double click dds.scr to run the tool.DDS will run in a command prompt window and will take 3 to 4 minutes or so.When done, DDS will open two (2) logs: DDS.txt Attach.txtSave both reports to your desktop.Please Copy & Paste contents of the following logs in your next reply:DDS.txtAttach.txtDownload Security Check by screen317 from here.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad document should open automatically called checkup.txt; please post the contents of that document.

Read other 3 answers

I had lots of malware including Java infection I used Kapersky Rescue disk to find and remove it.I do not know what to do next. Can someone help me.
I have download DDS to desktop, when I click on it it runs for a few seconds and disappears without leaving the logs.

A:30 or more dllhost.exe*32 process's running cannot run dds.txt

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Sn].txt (n is a number). Please downloadJunkware Removal Tool to your Desktop.Please close your security software to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.The tool will open and start scanning your system.Please be patient as this can take a while to complete, depending on your system's specifica... Read more

Read other 2 answers

I have found this process running twice ... bvqmpkgtssd.exe .. I cant find a thing about it .. anyone know ??
my flat panel has also been flashing at times like it may be going bad..

Read other answers


the last time i posted i had 53 running processes. a little excessive dont ya think? anyway my post went unanswered. i saw the lack of HJT log and tried to amend the post.

prior to that i was working with someone ref my desktop and they musta gave up becuase never heard from them again ( 3 mos ago)

anyway here is my current HJT log

A:56 running process and counting- help

Logfile of HijackThis v1.99.1
Scan saved at 8:51:41 PM, on 3/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Pure Networks\Network Magic\nmsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe
C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\Program ... Read more

Read other 4 answers

I have a process unknown to me haas anyone else seen BHSV.EXE running?

HJT log below:

Logfile of HijackThis v1.99.1
Scan saved at 1:13:22 PM, on 11/4/2005
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP3 (5.00.2920.0000)

Running processes:
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\geor... Read more

A:Curious Process Running

Hi and welcome! You are currently using HijackThis from a temporary directory, this can cause problems. Please go to My Computer, open your C:\ drive, Select: New >> Folder and name the folder HJT. Download HijackThis to the new folder: Double Click on 'HijackThis.zip' to extract and install HijackThis.exe to the new folder. Close ALL windows except HJT SCAN with HJT and SAVE LOG. (a notepad window will open with the log in it when you click Save Log) (Ctrl-A to'select all', Ctrl-C to 'copy') Post the log in this thread using 'Add Reply' (Ctrl-V to 'paste')David

Read other 5 answers

Is there any way i can stop this from taking up so much of my CPU? its never done this before, and it is a needed process for me to access the internet so i cant end the process.

The internet is being exceptionally slow aswell... which is strange seeing as im on a 2mb connection

God Damn AOL

A:AOLACSD.EXE process running at 98% CPU

Read other 7 answers

Hi there, I was wondering if I could get some help with getting rid of the DMW.exe (not to be confused with dwm) process that's suddenly shown up on my computer. I've looked around the forums here already and realized that it is indeed Malware, though I haven't had any success trying to get rid of it, it seems to be hidden in a folder that I cannot find. I've run a virus scan with AVG and it hasn't picked up anything-- I don't use firefox very often anymore as a browser, mostly just chrome.
I believe it happened when I downloaded the K-lite codec pack, just as well.
I'm using Windows 7 and a Lenovo laptop.
Thank you so much for any help-- I'd really love to be rid of this thing.

A:DMW.exe Process Running on my Computer

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware to your desktop.NOTE. If you already have MBAM 2.0 installed scroll down.Double-click mbam-setup- and follow the prompts to install the program.
At the end, be sure a checkma... Read more

Read other 12 answers