Why does Eudora have over 500 process entries in "Explorer"

[Franklin]

Why do I have asmany as 500 references in XP's processes to just one
registry key to do with Eudora?

Eudora has not even been launched in this bootup session and nor does
it appear anywhere in Task Manager.

Below I have explained as clearly as possible what steps I took and
what I observed.

Can anyone advise me on what practical steps to take to clear this
up.


++++++ STEPS ++++++++

(1) I boot up my PC and log on to Windows XP Pro + SP1

(2) I am not really familiar with PROCESSES in XP. But by chance I
tool a look at the detailed list of processes before I launched
Eudora. To do this I used a freeware utility called 'Process
Explorer' from System Internals. This is described at
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml. It needs
no installation at all and is only a small download of 260 KB from
http://www.sysinternals.com/files/procexpnt.zip.

When I ran System Internal's Process Explorer I set it to show a
lower pane (CTRL L) and to show the process tree (CTRL T).

(3) I located Windows Explorer and looked through the processes for
Explorer which get shown in the lower pane. I saw lots & lots of
entries for Eudora. In particular I all these referring to the
registry key HKCU\Software\Qualcomm\Eudora\LaunchManager. This GIF
is a screenshot
http://194.168.54.52/openaccess.webspace/eudora_processes.gif of
Process Explorer.

(4) Notice how small the scroll slider is on the right of my
screenshot, indicating how many more entries there are in this
screen. If I go to Process Explorer > Find Handles and enter
"Eudora" as a search term then I can count there over 500 such
entries linked to process 1180 which is Explorer. I also see another
23 entries of the same registry key linked to Metapad (a third party
equivalent to XP's notepad) via process 3676. Weird - I have not
even put Metapad anywhere near Eudora!

None of this seems right.

(5) I followed up this Eudora registry key and used Regedit to view
it at HKCU\Software\Qualcomm\Eudora\LaunchManager. I saw that there
are eight sets of entries for Warn Extensions and Do Not Warn
Extensions. This too doesn't seem right either. See my screen shot
http://194.168.54.52/openaccess.webspace/eudora_registry.gif.

A quick scan of my registry shows there are about 150 keys with the
word 'Eudora' in the registry somewhere.



Can anyone advise me on what might be going on?

What do I need to do to put this right?


Thank you for any help.

 

[Malke]

Why do I have asmany as 500 references in XP's processes to just one
registry key to do with Eudora?

Eudora has not even been launched in this bootup session and nor does
it appear anywhere in Task Manager.

Below I have explained as clearly as possible what steps I took and
what I observed.

Can anyone advise me on what practical steps to take to clear this
up.


++++++ STEPS ++++++++

(1) I boot up my PC and log on to Windows XP Pro + SP1

(2) I am not really familiar with PROCESSES in XP. But by chance I
tool a look at the detailed list of processes before I launched
Eudora. To do this I used a freeware utility called 'Process
Explorer' from System Internals. This is described at
http://www.sysinternals.com/ntw2k/freeware/procexp.shtml. It needs
no installation at all and is only a small download of 260 KB from
http://www.sysinternals.com/files/procexpnt.zip.

When I ran System Internal's Process Explorer I set it to show a
lower pane (CTRL L) and to show the process tree (CTRL T).

(3) I located Windows Explorer and looked through the processes for
Explorer which get shown in the lower pane. I saw lots & lots of
entries for Eudora. In particular I all these referring to the
registry key HKCU\Software\Qualcomm\Eudora\LaunchManager. This GIF
is a screenshot
http://194.168.54.52/openaccess.webspace/eudora_processes.gif of
Process Explorer.

(4) Notice how small the scroll slider is on the right of my
screenshot, indicating how many more entries there are in this
screen. If I go to Process Explorer > Find Handles and enter
"Eudora" as a search term then I can count there over 500 such
entries linked to process 1180 which is Explorer. I also see another
23 entries of the same registry key linked to Metapad (a third party
equivalent to XP's notepad) via process 3676. Weird - I have not
even put Metapad anywhere near Eudora!

None of this seems right.

(5) I followed up this Eudora registry key and used Regedit to view
it at HKCU\Software\Qualcomm\Eudora\LaunchManager. I saw that there
are eight sets of entries for Warn Extensions and Do Not Warn
Extensions. This too doesn't seem right either. See my screen shot
http://194.168.54.52/openaccess.webspace/eudora_registry.gif.

A quick scan of my registry shows there are about 150 keys with the
word 'Eudora' in the registry somewhere.



Can anyone advise me on what might be going on?

1. What does a scan with a current version (not earlier than 2003)
antivirus show? Do the scan in Safe Mode.

2. Additionally, have you used non-viral malware removal tools such as
Ad-aware and Spybot S&D? Do scans in Safe Mode.

3. Do you have a firewall in place? If not, you should get one. XP has a
built-in one which is pretty lame but better than nothing.

4. Questions about Eudora's program and whether the registry entries you
are seeing are normal should be addressed to Qualcomm/Eudora tech
support. Don't do this until you are sure your computer is 100% virus
and spyware-free.

Malke

 

[Franklin]

1. What does a scan with a current version (not earlier than
2003) antivirus show? Do the scan in Safe Mode.

I scan my system daily using AVG and a few days ago I ran an online
scanner too.

2. Additionally, have you used non-viral malware removal tools
such as Ad-aware and Spybot S&D? Do scans in Safe Mode.

I regularly scan for adware by using Spybot. I have the latest
version and I always download updates before I start the scan.

3. Do you have a firewall in place? If not, you should get one.
XP has a built-in one which is pretty lame but better than
nothing.

I use Sygate.

4. Questions about Eudora's program and whether the registry
entries you are seeing are normal should be addressed to
Qualcomm/Eudora tech support. Don't do this until you are sure
your computer is 100% virus and spyware-free.

I am as sure as I can be that it is virus, adware, spyware free.

Unfortunately my experiences with Eudora tech support have not been
good and I find that some of the people in the Eudora group give me
more effective advice.





[groups restored]

 

[Steve Nielsen]

I scan my system daily using AVG and a few days ago I ran an online
scanner too.




I regularly scan for adware by using Spybot. I have the latest
version and I always download updates before I start the scan.

I recommend also using Ad-aware, it catches a lot of malware Spybot S&D
does not catch (and vice-versa).

Steve

3. Do you have a firewall in place? If not, you should get one.
XP has a built-in one which is pretty lame but better than
nothing.

I use Sygate.

4. Questions about Eudora's program and whether the registry
entries you are seeing are normal should be addressed to
Qualcomm/Eudora tech support. Don't do this until you are sure
your computer is 100% virus and spyware-free.

I am as sure as I can be that it is virus, adware, spyware free.

Unfortunately my experiences with Eudora tech support have not been
good and I find that some of the people in the Eudora group give me
more effective advice.





[groups restored]