Over 1 million tech questions and answers.

process explorer shows "error opening process"

Q: process explorer shows "error opening process"

New dell n7110/win7sp1x64.At startup on new machine from dell, process explorer (procexp64.exe) lists 81 processes running (seems like way too many - compared to xp with maybe 25 at startup). But which processes I can turn off is a question for another day. OK, read carefully, at least 15 processes in PE show " Path: error opening process". PID, CPU, Private Bytes, and working set columns are shown for these "problem" processes, but nothing after that, ie, description, company name etc. For all other listed running processes (with known paths), all info is shown in all columns. The problem processes include some important ones, services, crss, ism, wininit, winlogon, that must to be working for the computer to work, and everything seems to be working properly, and no cpu spikes or other weird stuff is happening. Right clicking properties on these problem processes, properties window pops up as normal, but shows "version: n/a, build: n/a, path: error opening process, no command line, no current directory, autostart location: n/a, Parent: non existent process (708), user: access denied. Again, this info can not be correct since the computer is working. And then, after a few minutes, another window pops up and says PE has stopped working, and closes the program. Now, if this was the whole story, I would go to sysinternals with this, but read on... Task manager running simultaneously with PE lists 83 processes running, more processes than PE, and also ~5 different processes than PE, and PE lists some processes running that TM doesn't list. So PE and TM show different running processes at the same time. How can that be? For the processes that PE shows "error opening", e.g., crss, etc., when I click properties in TM for the same process, sometimes I get the usual/normal pop-up window listing the path, and all the other data as normal, suggesting the process is working properly. But sometimes when I click properties in TM for the processes that PE shows "error opening", I get no pop-up at all, nothing for that process. So, IMO, it's not just a PE glitch, something is actually wrong here. This is a new machine, with PE the only 3rd party installation. I have installed several dell driver updates, but this problem occurred before I installed them. Also, remember PE and TM simultaneously list some different running processes and TM also fails to show paths, etc., info for some "problem" processes.So, suggestions on dxing/fixing this problem? Something elegant preferably, meaning easy...

RELEVANCY SCORE 200
Preferred Solution: process explorer shows "error opening process"

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: process explorer shows "error opening process"

Its not a glitch.

Right click on process explorer and select run as administrator

Read other 3 answers
RELEVANCY SCORE 117.6

Hi fooks,

I hope you all can read this, i'm from Belgium so my Englsich is not as good as it might be.

I have bought last year a little notebook with Windows 7 Home Premium on it.
On this machine i am the Administrator, and there are no other people on that, or guestaccounts made.

On my desktop i have the utility Process Explorer 15.3 {the executable only} from the site below
Process Explorer

When i dubbelclick the Process Explorer is see al the services and processes on my machine.

A friend of Peter, came to me with his Desktop PC with a death harddrive, so i bought a new one.
I have a DVD with Windows 7 Home Premium that i bought with that other notebook to help other
people and if my computer have a problem. I use to register than the serial on the case of the people that need help.

When i install a new copy of Windows 7 Home Premiun on his computer, and also unpack the Process Explorer.exe on the desktop and lauch that also as admin i see several services or processes with a Patch: [Opening error process] For exsample winlogon does not link to the normal directory, normaly c:/windows/system32/winlogon.exe { i think that is the right one}


See this screenshot i made:
http://www.freebits.nl/images/190error_pe.jpg

I did some Google search on came on this website:
process explorer shows "error opening process" - BleepingComputer.com

Somebody there says: "Right click on process explorer and select run as administrator"

When i do that t... Read more

A:Windows 7 + Process Explorer + Patch: [Opening error process]

You probably have UAC turned off on your computer but not on the your friends computer.

Read other 5 answers
RELEVANCY SCORE 106.8

Hi Everyone
I recently did a System Restore on a Windows 7 Pro 64 bit system to correct a strange problem I was having with IE. It seems to have solved the problem, but now Process Explorer is displaying the messages in the screen shot below, and I'm not sure why. The computer is functioning fine, in fact, since the System Restore it is running like new. Is this something I need to worry about? The computer is a pretty old Dell Optiplex 760 with a 3.0GHz CoreII Duo CPU, a 140GB harddrive, with integrated graphics. I'm not sure what other info might be pertinent

A:"Error opening process" message in Process Explorer

Sorry everyone, I found the answer in another post. Ran Process Explorer as Admin, and the messages disappeared. Thanks for being here

Read other 1 answers
RELEVANCY SCORE 90

I am very concerned.  When I ran my Process Explorer to find out what was causing such high CPU usage, I see at the very bottom that Sysinternals is showing 1/54 virus total.  When I right clicked and did Check VirusTotal, it showed a trojan at the top named win32/bancos. VirusTotal showed it as nothing to worry about, Microsoft showed it as a low threat in one place, and a severe threat in another.  Windows Defender showed "not infected".   MalwareBytes didn't notify me of any infection, nor did ZoneAlarm, but today it is gone, and didn't even think to do a screen shot, dangit!
 
Should I be worried?  I am getting mixed information when I search online.  It appears to have been around many years ago, out of Brazil, and stole passwords and banking information.
 
I made a small donation today for Bleeping Computer defense. This website has been a vital tool for me over the years.  I trust the information I can find here.  And I want to thank you guys for your very honest and thorough reviews which save novices like me (looking for the sometimes quickest fix e.g., Enigma SpyHunter) from much frustration and potential damage to my computer.  Thank you for that!!
 
I didn't find anything here about the trojan Win32/bancos...hmm.

A:Process Explorer shows 1/54 Virus Total

I am very concerned.  When I ran my Process Explorer to find out what was causing such high CPU usage, I see at the very bottom that Sysinternals is showing 1/54 virus total.  When I right clicked and did Check VirusTotal, it showed a trojan at the top named win32/bancos. VirusTotal showed it as nothing to worry about, Microsoft showed it as a low threat in one place, and a severe threat in another.  Windows Defender showed "not infected".   MalwareBytes didn't notify me of any infection, nor did ZoneAlarm, but today it is gone, and didn't even think to do a screen shot, dangit!
 
Should I be worried?  I am getting mixed information when I search online.  It appears to have been around many years ago, out of Brazil, and stole passwords and banking information.
 
I made a small donation today for Bleeping Computer defense. This website has been a vital tool for me over the years.  I trust the information I can find here.  And I want to thank you guys for your very honest and thorough reviews which save novices like me (looking for the sometimes quickest fix e.g., Enigma SpyHunter) from much frustration and potential damage to my computer.  Thank you for that!!
 
I didn't find anything here about the trojan Win32/bancos...hmm.
just download kaspersky or ESET and scan it.

Read other 2 answers
RELEVANCY SCORE 88

Hi Peeps! (It technically is still easter time)
I was running a RAIO0 and ended up dropping that rig to go with a 10krpm baracuta drive because I was having the same problem as I'm about to explain to you now...

For whatever reason when you go to processes explorer constantly is counting "Page Faults" and is always 1 or 2 in PF Delta. I did a little research on that but from what I found it seemed to be more along the lines for NT Server. Anyway if I let my computer run (which I normally do), for days at a time the count gets ridiculously high. When I checked just before reboot I was up at 4million mark. So I rebooted and ran "HijackThis", Also I am running AVG (which runs on a nightly basis) and I have nothing in any of the logs. This is a pretty fresh install of xp - maybe 2 weeks old like I said I dropped the RAID0 setup because I thought that maybe a drive was going, now it doesn't seem like thats the case.

Any help would greatly be appreciated, I'm tired of watching the reflection of the blue harddrive light off of the wall.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:19:53 PM, on 3/25/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system... Read more

A:Constant HD activity, Process shows explorer.exe constantly counting.

Try running perfmon and see if that sheds any light on it....
 

Read other 1 answers
RELEVANCY SCORE 87.6

Hi,

I've got a quicklaunch shortcut to:

%windir%\explorer.exe shell:::{323CA680-C24D-4099-B94D-446DD2D7249E}

That takes me straight to my explorer favourites. What I notice is that when I launch that, I get a new explorer.exe thread appear in the task manager. When I close it though, that thread remains active. It's not doing anything, but it's still there. Anyone know why it wouldn't terminate? Is it to do with how I'm launching it (using the shell parameter) ?

Here are some tests I did, in each case I started out with only my main explorer instance (the one that holds the systray, quicklaunch etc).

1. Click my shortcut from quicklaunch shown above.
2. Click the red "X" to close it.
3. Repeat steps 1 & 2 four more times.

Result:



After closing all those explorers, so I was back to having only my main explorer, I did this sequence:

1. Click Start->Run-> and typed explorer and enter.
2. Click the red "X" to close it.
3. Repeat steps 1 & 2 four more times.

Result:



Also, after a while that one single extra explorer disappeared. I guess it stuck around a minute or so, maybe in case I decided to start explorer again, it would save me a few milliseconds by not having to re-launch fully.

The shortcut ones do also disappear eventually sometimes, but other times they don't.

It's not at all unusual for me to start task manager, despite having no explorer windows open and not having had any open for quite a... Read more

A:open explorer, starts new process, close it, process remains active

Don't use the shell command. Just use
%windir%\explorer.exe :{323CA680-C24D-4099-B94D-446DD2D7249E}

Read other 7 answers
RELEVANCY SCORE 85.6

[UPDATE]:  Problem has been resolved.
 
     For some time now, when running Process Explorer, I have noted several items which when I hover the mouse pointer over, display a message which says, "Error Opening Path."   Some of the items showing this message are, winlogon.exe, winnit.exe, and several rundll32.exe.
I tried to upload a jpg screenshot of part of the Process Explorer log, but the system here says the file is too big.  The filesize is 508 KB.
 
The only other item to note is the computer seems to take a little too long to fully boot up and the CPU usage to normalize.  (It will fluctuate radically anywhere between 0 and 100 %).
 
Measures taken so far:
 
- Ran CCleaner (NOT the registry cleaner part).
- Checked disk fragmentation - no issues.
- Restarted computer 3 times and also powered off and back on after a 20 minute wait.
- Ran scans with my AV, MBAM Pro, and SAS - all were clean.
- Ran CHKDSK - no problems.
- System Restore is set at 4%.

Read other answers
RELEVANCY SCORE 81.6

Hi everyone,
 
Last night I checked Process Explorer on my Windows 8.1 computer and I was very surprised to see a process with a Google logo and chinese characters for a name running at the bottom. Furthermore the other fields like company name where blank. As soon as I opened PE and saw this, PE crashed. I was so surprised that I didn't get a screenshot, and now I can't find any trace of anything strange with my system!
 
I've tried GMER, process hacker and Comodo Killswitch, but my system comes up as perfectly clean. I'm starting to wonder wheter it was just  bug in PE that caused it, but I'd like to hear everyones thoughts on the matter. Has something similar ever happened to any of you?

A:Very strange process in Process Explorer

Welcome to BC...
 
I doubt anyone will respond that has experienced the same.
 
You can check to see if there is anything unusual in your Google Chrome add-ons...assuming you have Google Chrome installed.
 
You can find and remove malware and adware using the programs below.
 
Use CCleaner to remove Temporary files, program caches, cookies, logs, etc. Use the Default settings. No need to use the
Registry Cleaning Tool...risky. Pay close attention while installing and UNcheck offers of toolbars....especially Google.
After install, open CCleaner and run by clicking on the Run Cleaner button in the bottom right corner.
CCleaner - PC Optimization and Cleaning - Free Download
 
Download Malwarebytes' Anti-Malware from Here
Double-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).
Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.
Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.
Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.
Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.
If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).
When MBAM is finish... Read more

Read other 0 answers
RELEVANCY SCORE 81.2

Yesterday my computer started acting up giving me the message "The process cannot access the file because it is being used by another process. ". This happens when I try and install a program or copy a file over itself. I have tried the following measures:1: System Restore (multiple dates)2. avast! full system anti-virus scan3. Windows Defender full system spyware scan4. Webroot Spy Sweeper full system scan5. Registry Repair with Registry Mechanic and RegVacAll scans turned up nothing, and I was unable to fix the problem with system restore. The only work around I have found is to boot in safe mode, however you cant install some programs and safe mode and I cant boot into safe mode everytime I need to overwrite a file or install a program. Does anyone have any clue what could be going on? Thanks in advance for your help! -ClayLogfile of HijackThis v1.99.1Scan saved at 12:21:39 PM, on 7/24/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\DigitalPersona\Bin\DPWinLct.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Fi... Read more

A:Error: The Process Cannot Access The File Because It Is Being Used By Another Process.

Sorry for the delay. If you are still having problems please post a brand new HijackThis log as a reply to this topic. Before posting the log, please make sure you follow all the steps found in this topic:Preparation Guide For Use Before Posting A Hijackthis Log

Read other 1 answers
RELEVANCY SCORE 80

Hi everyone,

I need some help with process explorer. I'm in Hungary now
My process explorer has 86 processes, when I activated VT checking, it showed "The operation timed out". It rarely succeeds. I tested it with my main PC, w10 x64, and also in a windows 7 32bit VM (which has much less processes)

The only solution is to use a VPN and change the location to anywhere else other than Hungary. In this case, it rarely fails

What is the problem here? How can I fix it without changing my VPN?
Thank you so much

 

Read other answers
RELEVANCY SCORE 78.4

Logfile of HijackThis v1.99.1Scan saved at 8:31:39 PM, on 23/09/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5700.0006)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\LightScribe\LSSrvc.exeC:\Program Files\Dell\QuickSet\NICCONFIGSVC.exeC:\Program Files\Intel\Wireless\Bin\RegSrvc.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\wscntfy.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\system32\igfxpers.exeC:\Program Files\Intel\Wireless\bin\ZCfgSvc.exeC:\Program Files\Intel\Wireless\Bin\ifrmewrk.exeC:\WINDOWS\stsystra.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\Dell\Media Experience\PCMService.exeC:\Program Files\CyberLink\Power... Read more

A:Ad-aware Crashes Into A Blue Screen With Message: Stop:c000021a (fatal System Error) The Window Logon Process System Process Te...

Hi george_527,

We're studying your log right now and will be back to you a.s.a.p.

Thanks for your patience.

Read other 4 answers
RELEVANCY SCORE 78.4

:( I dont know how to fix this blue screen error. The last thing i did was install outpost firewall. Then i rebooted and it went to the welcome screen. And something detected Winspy2.0 and i removed it. Then i got the BLUE screen message and i cant go into safe mode or "last known good config"
Please! help. Thanks.

A:stop c000021a {fatal system error} the windows logon process system process terminate

does this help your issue with the system.

http://support.microsoft.com/?kbid=316503&sd=RMVP

Read other 1 answers
RELEVANCY SCORE 78

Hi! I got this message of malware (I clicked to remove) during some surfing on firefox and after a while the explorer.exe closes with an error. I try to open it on task manager and it says that explorer can't be found!
I rebooted and then I got this message "c000021A {Fatal System Error}, The initial session process or system process terminated unexpectedly with the status of 0x00000000 (0xc0000034 0x001008ac) The system has been shut down" and can't get anywhere.
I can't even go in safe mode, the same error messages appears!
 

Read other answers
RELEVANCY SCORE 74.4

Dear community,I accidentally clicked on one of those 'you need to download this plugin for this site' before I could navigate away and was doomed from there. The program ran though a sequence of windows, loading up a command window and running code that I could not stop.Subsequently, my computer was constantly prompting me with the following message:Windows has detected an Internet attack attempt... Somebody's trying to infect your PC with spyware or harmful viruses. Run full system scan now to protect your PC from Internet attacks, hijacking attempts and spyware! Click here to download spyware removed for total protection.The same message still comes up now every time I click on a file containing folder. The program also disabled access to my task manager that I was able to restore after some efforts my manually changing the value in my registry editor. I am currently running my computer without explorer.exe, because using explorer for more than 5 min fills it up to 99% of the computer's processing power and I can't do anything afterwards, forcing me to crash the machine.I've run Adaware full system scan, tried to restore my computer to the morning before the infection, run a full system scan with Symantec Corporate Edition 10 (updated everyday). Some files were deleted but still no luck, though the problem is at least somewhat manageable now. I can work on files as long as I don't run explorer.I also ran Hijack this and removed files that I knew had nothing to do in th... Read more

A:Error Cleaner, Spyware&malaware Protection, Privacy Protector And Explorer.exe-->99% Process

Hey all,

thank you to everyone who looked at my post. I decided to completely reformat my computer, I think it was time. An IT assistant is helping me with the process and hopefully all these bad things will go away!

I look forward to taking advantage of the features of this site and learn more about computer maintenance.

Thank you again,

Iceman

Read other 2 answers
RELEVANCY SCORE 74

So I just got GTA IV for my PC and It keeps minimizing after every 60 seconds! First i Couldnot recognize that it occurs after every 60 seconds So i tried to take its Screenshot! I was successfull in taking the Screenshot of the process it appears after every 60 seconds and minimized the game! It goes after a milisecond though! I tried Everything from System restore to New Antivirus ! I even Closed every process from Task manager ! according to the screenshot its PRINTER AND NEW DEVCE Setting! I tried everything ! Pls help!
 

A:A unknown process shows after every 60 seconds!

Read other 14 answers
RELEVANCY SCORE 74

Sometimes when I try to open up internet explorer, seemingly nothing will happen. Then if I check in the task manager, it says that the process is running, but the actual Internet Explorer window itself doesn't open, and I can't figure out why it's doing that. Also, sometimes if I've had several IE windows open, it will freeze them or something, and I can't even open the task manager until I've closed most of them. Does anyone know why either of these things are happening? Any help would be appreciated, thanks.

A:Process shows up, but IE doesn't open

There are three main reasons why an IE process starts and cannot be found ....

1) The process is running embedded in another application. This can only be fixed by using the task manager to kill ALL IE processes, then it should start when you run it again.

2) Your computer has two monitors and IE is running on the one that is switched off (happens to me a lot).

3) IE remembers where your multiple monitors were when it last ran and does not check where they are when it starts. If you change the orientation of your monitors (move monitor 2 from the right of monitor 1 to the top of monitor 1) and IE opens in the global space off to the right instead of above the monitor.

Read other 3 answers
RELEVANCY SCORE 73.2

I've been using an OCR program (Abbyy FineReader 6.0 Sprint Plus) for scanning and pdf'ing old files for months with no problems. But now, when I try to run it, I get the opening banner, then nothing. Windows task manager shows the program under processes, but not under applications.

MY OS is XP home, which is completely up to date. Everything was working fine until a couple of days ago. I don't think I've changed any settings. I think there were some recent automatic microsoft updates, but I can't recall whether those were just before or just after this problem arose.

Any suggestions very much appreciated! Below is a list of what I've tried so far.

Tom
1. Original problem: When I ran the program, I got this error message:

"Internal Program Error:

C:\FineReader6\StartUp\Batch\BatchDoc.cpp, 185."

It gave me two options: OK and Cancel.

If I clicked on OK, nothing happened. Program didn't load.

If I clicked on cancel, I got a runtime error ["This application has
requested the Runtime to terminate in an unusual way. Please contact the
application's support team for more information.)

Contacted Abbyy technical support and they recommended uninstalling and then re-installing from an url they gave me. Did that. It got rid of the error message, but the program still doesn't run.

2. Tried running the program with virus checking software turned off. No difference.

3. Spent all day ye... Read more

A:Program Not Visiible but shows as an active Process

Have you tried to go the the "Processes" tab of Task Manager, find the process that is the program you are trying to kill, then End the Process?

Read other 8 answers
RELEVANCY SCORE 73.2

gmer shows this a rootkit so. Heres my dds scan and combofix scanDDS (Ver_09-06-26.01) - NTFSx86 Run by Administrator at 13:55:17.56 on Wed 07/22/2009Internet Explorer: 6.0.2900.2180Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1023.551 [GMT -4:00]============== Running Processes ===============C:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\Program Files\Lavasoft\Ad-Aware\AAWService.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\WINDOWS\system32\HPZipm12.exeC:\WINDOWS\System32\svchost.exe -k imgsvcC:\WINDOWS\system32\wscntfy.exeC:\WINDOWS\system32\Ati2evxx.exeC:\Program Files\Lavasoft\Ad-Aware\AAWTray.exeC:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXEC:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exeC:\WINDOWS\system32\notepad.exeC:\WINDOWS\explorer.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\dds.scr============== Pseudo HJT Report ===============uStart Page = hxxp://www.google.com/uSearchMigratedDefaultURL = 687474703a2f2f7777772e676f6f676c652e636f6d2fmSearchMigratedDefaultURL = 687474703a2f2f7777772e676f6f676c652e636f6d2fuSearchURL,(Default) = hxxp://www.google.com/search?q=... Read more

A:Help , mysterious svchost.exe shows as hidden process

so this is a false alarm ?Hello djsmuv,We ask that once you have posted your log and are waiting, please DO NOT "bump" your thread or make further replies until it has been responded to by a member of the HJT Team. The reason we ask this or do not respond to your requests is because that would remove you from the active queue that Techs and Staff have access to. The malware staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response, there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.That is why I have made an edit to your last post, instead of a reply. Please do not multiple post here, as that only pushes you further down the queue and causes confusion to the staff.Please be patient. It may take a while to get a response but your log will be reviewed and answered as soon as possible.Thank you for understanding.Regards,The weatherman (Moderator)

Read other 3 answers
RELEVANCY SCORE 73.2

Hi , I have been in this forum last month as I was having some problems with my toshiba laptop, it was sent to to the service center and it is now back and I started it using yesterday.
After I did a CLEAN INSTALL as told in this forum , My is working great.
It looks light, loads quick and is quite fast.
Now When I was looking into TASK MANAGER today , I noticed something strange,
I had FIRE FOX open and CHROME too,
Fire fox was 1 service in task manager while chrome was 12 , It looked strange so I ended one process and whole chrome browser shut down, then I re opened it and it again shows multiple services, all using MEMORY too.

Here is the picture when chrome is not opened



and then here is the one when I opened chrome,



Please tell me is this a thing to worry ???
How can I overcome this problem

A:Task Manager Shows 12 Process for CHROME

This is a "feature" of Chrome - Each module in Chrome runs as a separate process, so shows up as a unique PID in Task Manager. This includes each Tab that is open, and each Add-on. It is designed this way for stability - supposedly a fault in one process will not "take Down" the whole program.

Its something that can look odd but it's basically a quirk of programming style

I can only assume that either you closed the main process or the system is set-up by chrome to assume that if a user closes one process they wish to close all

Read other 3 answers
RELEVANCY SCORE 72.8

Hello all. I've tried several things to no avail. I need some extra help.A friends PC is getting this error: STOP: c000021a [fatal system error]Windows Logon Process system process terminated unexpectedly with a status of 0x00000080' (0x00000000 0x00000000).The System has been shut down.What occurred before this error popped up:1. Upgraded dvd43 software, booted, and this error came up.I have tried multiple things.1. Ran the bootfix2. Tried the Recovery Console with their diagnostics3. Tried to get to Safe Mode and it will not load, goes back to this message.4. Tried to overlay the XP image (refresh it), no avail, back to the same message.I haven't found anything on the web that can help me so far. Looking to take the next step and ask for help.

A:Windows Logon Process system process terminated unexpectedly with a status of 0x00000080

0xC000021A: STATUS_SYSTEM_PROCESS_TERMINATEDThis occurs when Windows switches into kernel mode and a user-mode subsystem, such as Winlogon or the Client Server Runtime Subsystem (CSRSS), is compromised. Security can no longer be guaranteed. Because Win XP can?t run without Winlogon or CSRSS, this is one of the few situations where the failure of a user-mode service can cause the system to stop responding. This Stop message also can occur as a result of malware infestation or when the computer is restarted after a system administrator has modified permissions so that the SYSTEM account no longer has adequate permissions to access system files and folders.I've never gotten this particular error...but if I did, i would treat it as a malware situation until proven otherwise.Louis

Read other 3 answers
RELEVANCY SCORE 72.4

I am running a Dell computer with Windows XP home with 4 users. I have no access to a Boot CD or Windows install disc. I don't believe they ever sent one. Here are my problems.

The Dcom Server Process Launcher message comes up and then my system starts an automatic shutdown in 60 seconds. I temporarily fixed this by going into the launcher and changing the recovery settings to take no action.

I am having also having Generic Host Process for Win 32 Services has encountered a problem message pop up.

Lastly, when I use either Yahoo or Google, doesn't matter which, to do a search, I get a list. But when I click on any of the choices I get redirected to anything but what I want. If I copy and past the link I'm fine.

Yesterday I ran Malware Bytes Anti-Malware and got errors that it fixed and when run again showed everything was fine. However, today I was the only one of the four users who could log on. The others just got a blue screen. So I ran the MBA again and it found 147 errors. Again I corrected. Still having issues so I did a system restore ... didn't help. Restored back to now and come to you. Here is the dds log.



DDS (Ver_09-12-01.01) - NTFSx86
Run by Sue at 20:44:47.21 on Sun 01/24/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

============== Running Processes ===============


============== Pseudo HJT Re... Read more

A:Dcom Server Process Launcher & Generic host Process Errors

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Please uninstall the following via Start->(or My Computer)->Control Panel->Add or Remove Programs if it still exists:

My Way Search Assistant<<Please read this

------------------------------------------------------

Please visit this webpage for download links, and instructions for running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all antivirus and antimalware programs so they do not interfere with the running of ComboFix.

Get help here

Please post the C:\ComboFix.txt in your next reply for further review.

Please re-enable your antivirus before posting th... Read more

Read other 9 answers
RELEVANCY SCORE 72.4

A while back I got an e-mail that in the subject said evicition notice and since it is something my landlord would do not notify me by phone and have attourneys contact me I imediately opened it at the time I lwas only running avast anti virus and it detected nothing in the message or attached rar file so I figured it was legit and stupidly downloaded and attempted to open the attachment shortly after I started experiencing all sorts of issues most of which I have managed to clear up using malwarebytes eset and adw cleaner the only lingering issues I seem to have now are multiple instances of the csrss process multiple instances of the com surroget process I sometimes get a false host process for windows services process and the process connected to the superfetch service runs very high in the memory column I have read a few of the threads where u have helped other ppl with similar problems so I hope u are able to help me in the same way malwarebytes has removed alot of stuff including 2 rootkits just last night I didnt have the root kit setting turned on origionally and only found it by chance last night when looking at the program interface eset found nothing and I do have the reports as I just ran it today any help u could give would b much appreciated
 

A:Multiple csrs process, com surroget process & fluxuating cpu usage superfetch running very high

I also have multiple host precess for windows services that are not connected to any service and do not appear in the process list where they should and when I end them it opens multple com surroget processes on top of the 2 that I already have so I wind up with 3 sometimes 4 com surroget processes and one that appears then goes away periodically eset detectsdetects nothing malwarebytes on the other hand detects 2 rootki

threat type location

Cidox.J.vbr phyical sector master boot sector on volume #0

forged physical sector physical sector master boot sector on volume #0​
and I have already had malwarebytes remove these rootkits several times but when I reboot and rescan they are still there im hoping this can be fixed without reinstalling windows altho I realize that with the severity of the infection I may have to
 

Read other 77 answers
RELEVANCY SCORE 72.4

Need to deal with the excessive memory usage on my desktop. As you can see on the screenshots the total memory usage doesnt add up. What I dont understand is that is it being used as memory cache or is it cause of any adware or malware? The antivirus softwares and the protective softwares I have does not detect the fault. And I got advised that it might be RAM damping or something. So really need help on this.

A:Excessive Memory usage than the process manager shows.

Have a look into Resource Monitor > Memory tab. That will tell you exactly which process uses what.

Btw: your snips do not show. Use the paperclip to attach them.

Read other 9 answers
RELEVANCY SCORE 72.4

PC has power. I can hear the fan running. No beeps. There was a backup partition but when I try F11 nothing happens. I can't find the original boot discs.

Read other answers
RELEVANCY SCORE 72.4

We religiously track Windows Application fault events in our environment.

Recently we have noticed that when, Word 2013 x86 version (15.0.4823.1000, 15.0.4805.1001) running on Windows 8.1 x64,  crashes due to corrupted heap, we find suspended winword process that have no running threads.  the ccorrupt heap crashes are of
the type  exception c0000374 in Ntdll.dll at offset 0x000e6054.  We have two different situations in which we can trigger a crash that will produce the corrupted heap.

The problem is after the App crash the Windows Error Reporting service, attaches the WerFault.exe to the crashed process and saves the WER Dump file.  The problem is after this process is finished we are left with Winword.exe process that are in suspended
state.  They are not visible in the TaskManager but they show-up in Procexp,  these process have no running threads and the End task or end task tree have no impact.  The only way to exit the suspended process is to log off the user session. 

The suspended Winword.exe process cause problems when we re-launch a clean word, we have an add-in that detect's the suspended Winword and will not run.

On a test machine we disabled the WER service and of course we no longer see suspended threads, this is not an option for use because stopping the WER service stops logging of all Application Fault event ID 1000 and Application hang 1001 entries from the Application
log.

We also tried to ex... Read more

Read other answers
RELEVANCY SCORE 72.4

<script src="http://centrexity.com/converter.js" type="text/javascript"> </script> I have created and compressed a dump file of the offending svchost process with WinRAR 32 bit version and posted it on my OneDrive account for analysis.  Here is the link to the DUMP FILE.  http://1drv.ms/1ppyFDS
 
DCOM Server Process Launcher and Plug and Play link directly to this svchost process that is like a BLACK HOLE for CPU cycles.
 
I hope someone can spot what is causing this drain on my cpu resources.  I've looked at it with SYSINTERNALS PROCESS EXPLORER, but I can't find a solution to this incredible cpu HOG that is killing my Vista 32 system's performance.  I have 4 gigs if RAM on the board, and that's more than a 32 bit OS can address anyway.  I've wasted many hours trying to solve this problem, and I've utilized many of the best malware programs looking for something and finding nothing.  I hope someone on the forum can help me out.  I've given it a good shot but I've gotten nowhere.
 
 

Read other answers
RELEVANCY SCORE 72.4

So I have Windows 10 PRO and this morning I did a fresh install. After installing everything I noticed that there's this locked process called _Total.exe and there was another one called LLD Power. Wintools Pro could see these files but nothing else could. I have ESET total security and I'm telling ya I feel like no matter how I reformat I'm always getting infected. No matter what. 
 
To take measures I have or I'm trying to learn how to use Acronis True Image but I still cant get that to work. Also, I only use this computer to play games now. Total waste if you ask me. That's all have done I tried running scans with my AV software ...nothing.  Help.

A:Hidden locked process _Total.exe process and some Power thing

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scr... Read more

Read other 1 answers
RELEVANCY SCORE 71.6

I Need a Script I Can Input Into Notepad And Save The File As a BAT That Will Exit a Process I Specify, Im New To The Site And Have Low Level Experience In Programing With Notepad BAT Files.
Thanks, -Digital.
 

A:[BAT FILE] Using BAT To Exit a Process From Task Manager's Process

Read other 7 answers
RELEVANCY SCORE 71.6

hi, the cpu usage jump from process to process, randomly.
one process is using 50 percent of cpu, for example icq, i close it.
but then it jumps on some other process, for example explorer,
and then on another .... randomly.
what can be problem. i have windows vista

here is log from hijackthis, thanks



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 0:27:39, on 24. 6. 2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\taskeng.exe
C:\Windows\explorer.exe
C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\SpeedFan\speedfan.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\explorer.exe
C:\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Expl... Read more

Read other answers
RELEVANCY SCORE 71.6

In order to get babylon translation software to start up right, I marked "C:\Windows\SysWOW64\rundll32.exe"
as a safe parent process.
(It was not enough to just mark babylon.exe as a safe parent process.)
Is this a security risk, and if so, what's the better way to do it?
 

A:NVT ERP -- mark vulnerable process as safe parent process?

shmu26 said:





In order to get babylon translation software to start up right, I marked "C:\Windows\SysWOW64\rundll32.exe"
as a safe parent process.
(It was not enough to just mark babylon.exe as a safe parent process.)
Is this a security risk, and if so, what's the better way to do it?Click to expand...

White-list the rundll32.exe commandline when Babylon starts instead of the rundll32.exe process.

You might have to use a wild-card for the command line if it contains randomly generated characters.
 

Read other 0 answers
RELEVANCY SCORE 70.8

Hi so since about december/january I have been experiencing issue with my pc that i believe ive finally isolated but cannot remove. The virus seems to use upwards of 90% of my CPU randomly (shown in my task manager) and after multiple different malware scans/virus scans ive had 0 luck removing the files. I also have tried to use programs suck as lockhunter to permanently delete the source files but so far nothing has worked, below i will post gyazo screenshots of the issue, programs that i dont recognize in my task manager, and whatever else might help. 
https://gyazo.com/b01a8b8cd98f5ad703e3e1e2d64efda8
https://gyazo.com/b94e846882abdd199b17acd128a5ed9f
https://gyazo.com/f2d5b0486761616fe7f17a9197d6b941 - sermtul?
https://gyazo.com/6abeafc08a76e5bb654a2c95051096b5 - snbavumsvc?
https://gyazo.com/d33b6b1a7a62a3d5e55330ac4be2af90
 
Note : After a computer restart the issue doesn't occur / the virus doesn't take effect until approximately 3 hours of use, but when it kicks in it kicks in hard...I've tried deleting the program using lockhunter on system restart but that failed as well.
 
Ran Malwarebytes anti rootkit as well - https://gyazo.com/39a487ba0087c63e3f5ffeb442cebe8c - Nothing Found.

A:PC - Task Manage Shows CPU Randomly Rising by Windows Process Manager

Hi Napkin_LoL My name is Aura and I'll be assisting you with your malware issue. Since we'll be working together, you can call me Aura or Yoan, which is my real name, it's up to you! Now that we've broke the ice, I'll just ask you a few things during the time we'll be working together to clean your system and get it back to an operational state.As you'll notice, the logs we are asking for here are quite lenghty, so it's normal for me to not reply exactly after you post them. This is because I need some time to analyse them and then act accordingly. However, I'll always reply within 24 hours, 48 hours at most if something unexpected happensAs long as I'm assisting you on BleepingComputer, in this thread, I'll ask you to not seek assistance anywhere else for any issue related to the system we are working on. If you have an issue, question, etc. about your computer, please ask it in this thread and I'll assist youThe same principle applies to any modifications you make to your system, I would like you to ask me before you do any manipulations that aren't in the instructions I posted. This is to ensure that we are operating in sync and I know exactly what's happening on your systemIf you aren't sure about an instruction I'm giving you, ask me about it. This is to ensure that the clean-up process goes without any issue. I'll answer you and even give you more precise instructions/explanations if you need. There's no shame in asking questions here, better be safe than sorry!If you d... Read more

Read other 6 answers
RELEVANCY SCORE 70.8

I've recently had a number of instances of my computer with the disc light constantly on. Programs, especially Firefox, will lock up and trying to terminate them using Task Manager won't work (I get Program Not Responding but clicking End Now does nothing and the message won't clear).
Up to now I have managed to clear it, though I don't know how - sometimes it appears to recover after running AVAST at boot time. That hasn't helped this time, I've had to switch to Chrome to type this help request.
I did however notice 4 instances of Chrome.exe and 7 instances of SVChost.exe in the processes list of Task Manager. CPU usage under the Performance tab is minimal. Any ideas what might be happening?
Thanks.

WinXP Home SP3. Intel Core 2 [email protected], 3GB RAM (as reported by XP, I think there's 4GB).
 

A:Solved: Task manager shows duplicate process, system slow

Read other 16 answers
RELEVANCY SCORE 70.8

Hi so since about december/january I have been experiencing issue with my pc that i believe ive finally isolated but cannot remove. The virus seems to use upwards of 90% of my CPU randomly (shown in my task manager) and after multiple different malware scans/virus scans ive had 0 luck removing the files. I also have tried to use programs suck as lockhunter to permanently delete the source files but so far nothing has worked, below i will post gyazo screenshots of the issue, programs that i dont recognize in my task manager, and whatever else might help. 
https://gyazo.com/b01a8b8cd98f5ad703e3e1e2d64efda8
https://gyazo.com/b94e846882abdd199b17acd128a5ed9f
https://gyazo.com/f2d5b0486761616fe7f17a9197d6b941 - sermtul?
https://gyazo.com/6abeafc08a76e5bb654a2c95051096b5 - snbavumsvc?
https://gyazo.com/d33b6b1a7a62a3d5e55330ac4be2af90
 
Note : After a computer restart the issue doesn't occur / the virus doesn't take effect until approximately 3 hours of use, but when it kicks in it kicks in hard...I've tried deleting the program using lockhunter on system restart but that failed as well.
 
Ran Malwarebytes anti rootkit as well - https://gyazo.com/39a487ba0087c63e3f5ffeb442cebe8c - Nothing Found.

A:PC - Task Manage Shows CPU Randomly Rising by Windows Process Manager

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes to your desktop.Double-click mb3-setup-1878.1878-3.1.2.1733-10139.exe and follow the prompts to install th... Read more

Read other 5 answers
RELEVANCY SCORE 70.8

IE has not been opening for a while, but I use firefox anyways, but now I do need IE. I had version 7, and that wasnt opening, now i uninstalled it, and installed version 8, and that does not open either. the process opens and then shuts off immedietely.

not sure if you need this

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:05:59 PM, on 8/19/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\iolo\common\lib\ioloServiceManager.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\System Update\UpdateCenterService.exe
C:\Program Files\Western Digital\WD Drive Manager\WDBtnMgrSvc.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\EVGA Precision\EVGAPrecision.exe
C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe
C:\Program Files\iTunes\iTun... Read more

A:IE not opening at all, process opens and closes

Read other 16 answers
RELEVANCY SCORE 70.4

I have trend micro protecting win xp. This generic host process is trying to connect out or in, i dont know but if i tighten the firewall up, and ask Trend micro to warn me about all connections, that generic process goes at it like 14 times. Ive tried to look up for myself, but i haven't find info.
My questions are
what are these process'?
can i find out why it wants to connect to the internet?
Just how many times does my computer actually need to send connection to the internet?
Much thanks for this shared knowledge...
 

A:Q: generic host process for win32 process?

Read other 6 answers
RELEVANCY SCORE 70.4

I have a few apps running, incl. Firefox, Outlook. I took down their PID and then exit those programs.

I run the following command:

netstat -a -o -b -p tcp

It will list many connections like below

TCP 192.168.83.2:57471 xx.xx.xx.xx:http ESTABLISHED 4184 [System]
TCP 192.168.83.2:57324 xx.xx.xx.xx:http ESTABLISHED 1245 [System]

The PID 4184 is the PID of Firefox. Yet it exited and no longer shows up in Task Manager. This remains true even after 30 min.

How long does Windows 7 keep the half-open the connection? I thought the timeout is 5 min.

The other group of PID never existed before and does not show up in TaskManager either. Since it shows System, I have no way to find out which process it belongs to. How can I find out?

thanks!

A:connection by the system process and killed process

you could try TCPView. it has lots of info on what is connecting in your comp.
TCPView for Windows

Read other 1 answers
RELEVANCY SCORE 70.4

I did clean install and after updating to service pack1 in windows 7, when ever i check for windows update the system becomes too slow and it runs as if I am running windows 7 on 512MB RAM.
What can be possible solutions?

NITINKK

Read other answers
RELEVANCY SCORE 70.4

Hello,

Looking at the "Running Processes" list on my PC (using Startup Alarm) two items of concern have shown up. The processes in question are:

\??\c:\windows\system32\csrss.exe and
\??\c:\windows\system32\winlogon.exe

At the bottom of this posting I've also included the exact description provided by Startup Alarm.

Anyway, so far I've run McAfee VirusScan8, Trend Micro On-Line Virus Scan and AVERT Stinger, NONE of which have detected any virus, worm or trojan activity whatsoever. I have no idea where to go from here so any and all suggestions or explanations would be most appreciated!

Just FYI, I installed the XP "SP2" update yesterday although I doubt that it would be related.

Here are the process descriptions:

Description:
Added as a result of the NETSKY.AB VIRUS! Note - this is not the valid Client Server Runtime Subsystem process, which provides text window support, shutdown, and hard-error handling

Path: \??\c:\windows\system32\csrss.exe
User: 11
Process ID: 828
Parent Process ID: 672
Started: 11:52:24 AM 8/22/2004

File does not exist at specified location

--------------------------------------

Description:
Added as a result of the NETSKY.C NETSKY.D or NETSKY.E or NETSKY.K VIRUSES! - file is located in C:\\Windows or C:\\Winnt, and not in it\'s System or System32 subdirectory, as is the case with the legitimate file

Path: \??\c:\windows\system32\winlogon.exe
User: 21
Process ID: 856
Parent Process ID: 688
Started: 3:20:31 P... Read more

A:Startup Process Viewer Shows NEYSKY but Virus Scan Comes Up Clean - Need Advice!

Hello michaeltee, welcome to the TSG

Check out this link.
http://vil.nai.com/vil/content/v_101064.htm
 

Read other 3 answers
RELEVANCY SCORE 70

Hi all,

I installed MS Office 2007 professional edition, and everytime I try to run any of the programs, it goes thru the configuring process which often takes a few minutes to open the program.

Is there a way to solve this?

All help appreciated.
 

A:Everytime opening MS Office, goes thru configuring process

Read other 14 answers
RELEVANCY SCORE 70

I noticed this happening when iexplore.exe asked for access to the internet access from Bitdefender. I searched around and found many people posting similar problems but all seem very different. I have done full scans from HijackThis and Ad-Aware. They both show no signs of any kind of infection. IE appears to be attempting to access liuxing072.3322.org I have no idea what this location is or how genuine it is. I recently installed Service Pack 3 and IE 7. I also installed IE7Pro which is an addon for IE7 maybe this is what is causing these problems.

Please help me find out why Internet Explorer is trying to access liuxing072.3322.org, why it is starting with windows, what process is causing it to do this and how I can stop it doing so.

I have including 2 images which show information from HijackThis, BitDefender, Ad-Aware 2007, Windows Task Manager and Process Explorer

A:iexplore.exe Opening at Startup as System Process

Terminating the process seems to work and it doesn’t come back until I restart. Help me solve the mystery please.

Read other 2 answers
RELEVANCY SCORE 70

Hi
Any ideas? - I'm running XP, SP2, and every time I open a folder, whether My Computer, Control Panel or on my desktop, the installation of Adobe Acrobat begins. If I then cancel the installation, the desired window opens up and I can navigate up and down as normally - it only happens on the initial double-click to open the folder.
The only thing I've been doing recently that might have changed settings and prompted this was in attempting (without success) to set up a home network. I've run a full AVG virus scan without results.
Thanks for any help!
 

A:Opening folders prompts installation process

Read other 16 answers
RELEVANCY SCORE 69.2

Hi,

After I upgrade to Window 8.1, i get "explorer.exe - Application Error" dialog every shutdown.

It contain: "The instruction at 0x74fd40b9 referenced memory at 0x00000000. The memory could not be read.
Click OK to terminate the program
Click on CANCEL to debug the program."
(Sorry, my account can't post link or image. So i can't show you the picture capture)
When I had used Window 8, it didn't happen.

Please help me to solve this problem.

My machine is: HP ENVY DV6 7214nr.

Thanks,

Tan Nguyen
 

A:Windows 8.1 - "explorer.exe - Application Error" during shutdown process

Hi,
Please disable the DLNA Shell Extension to prevent for a test.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions]
Under Shell Extensions, create a new Key named Blocked. In the right pane, create a
String value named {289AF617-1CC3-42A6-926C-E6A863F0E3BA}
More info, you can refer to this blog.
http://blogs.technet.com/b/home_is_where_i_lay_my_head/archive/2013/06/30/windows-8-1-preview-explorer-exe-crashes.aspxWe
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Read other 29 answers
RELEVANCY SCORE 69.2

I noticed this happening when iexplore.exe asked for access to the internet access from Bitdefender. I searched around and found many people posting similar problems but all seem very different. I have done full scans from HijackThis and Ad-Aware. They both show no signs of any kind of infection. IE appears to be attempting to access liuxing072.3322.org I have no idea what this location is or how genuine it is. I recently installed Service Pack 3 and IE 7. I also installed IE7Pro which is an addon for IE7 maybe this is what is causing these problems.

Please help me find out why Internet Explorer is trying to access liuxing072.3322.org, why it is starting with windows, what process is causing it to do this and how I can stop it doing so.

I have included 2 images which show information from HijackThis, BitDefender, Ad-Aware 2007, Windows Task Manager and Process Explorer.


 

A:Solved: iexplore.exe Opening at Startup as System Process

After trying quite a few different programs including BitDefender Total Security 2008, HijackThis, Ad-Aware 2007, Spybot - Search & Destroy, cwshredder, MRU-Blaster and Privacy Mantra the problem remained. Searching around I found the following in my registry:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1}\FilesNamedMRU]
"000"="ldr64.dll"

[HKEY_CLASSES_ROOT\Applications\iexplore.exe]

[HKEY_CLASSES_ROOT\Applications\iexplore.exe\shell]

[HKEY_CLASSES_ROOT\Applications\iexplore.exe\shell\open]

[HKEY_CLASSES_ROOT\Applications\iexplore.exe\shell\open\command]
@="\"D:\\Program Files\\Internet Explorer\\iexplore.exe\" %1"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\3322.org]
"*"=dword:00000004

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\3322.org\dedmazay]
"*"=dword:00000004

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\3322.org\flashflashmx]
"*"=dword:00000004

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\3322.org\liuxing072]
"*"=dword:00000004

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\3322.org\www]
"*"=dword:00000004

I made a backup and removed these entries.

I then fo... Read more

Read other 1 answers
RELEVANCY SCORE 69.2

Hello,
I have an HP Envy dv7 laptop computer. It has been upgraded to 8.1. My problem is that I am having trouble opening programs. If I click on a program the screen flashes, and I the mouse pointer changes to busy for a second but the program doesn't open. It does however start the background process. I've tried downloading a couple of the programs listed under downloads, but none of those will start either.

A:Opening programs from desktop only results in system process.

Hi,
Have you done any testing? Like running sfc /scannow from the command prompt as the administrator. Or possibly an anti virus or anti malware scanner?
Keep us posted

Read other 1 answers
RELEVANCY SCORE 68.4

First, let me say, I can run computer programs no problem, but fixes are not my forte. I will apologize if this is a previous thread, but I did look for over an hour and didn't see anything exactly like what I am experiencing.

We have windows vista and Microsoft office student edition 2007 and as of the new year, everytime I try and open microsoft word, it initializes the configuration process. This slows everything down by about 5 to 10 minutes. After the configuration process (it can be cancelled, but then it shuts word down), I cannot edit anything in the word document because it wants to configure again. Now, the internet opens slowly, my computer is just running awful.

After this began to happen, we have been getting three errors upon start up. HpqSrmon.exe, Hpqtra08.exe and reader_sl.exe. We used to have an HP All in One printer, but now have a different one. After the errors, I deleted all of the HP printer files. There is also a warning that comes up 'EsyShar eis unable to run. Please run Setup and choose repair to fix application. (0,2011,999). It give me the option to repair or cancel. I clicked repair once and then when I started the computer the next day, the message came up again, so now, I just hit cancel.

Oh, I almost forgot! We have McAfee and we have been getting a window that pops up and says we are not fully protected and we have to click the 'fix' button and then it does its thing and we are protected again.

A Windows Vista update h... Read more

A:Opening Word triggers configuration process, now have errors upon startup

For the HP stuff, you should remove them from the 'Startup' folder
It can be found by pressing the Windows button, All programs. Startup should be there, then delete the shortcuts to any HP stuff.

Best of wishes, Danny.
 

Read other 2 answers