dual explorer.exe processes in task manager

B

Bill Lynn

I have two explorer.exe running in task manager and my
computer is sluggish. When I
remove "Explorer.exe"(capital "e") the operating speed is
normal, this file also has the lower memeory usage. If I
remove"explorer.exe" I lose the desktop ICON's and have to
reboot.
I've tried registry cleaner and other things but no
success.

Help apprecated!!!

Thanks.
 
B

BeamGuy

Sounds like a virus to me - they often use names that sound like system programs.
 
J

Jason Hall [MSFT]

--------------------
From: "Bill Lynn" <[email protected]>
Subject: dual explorer.exe processes in task manager
Date: Mon, 7 Jun 2004 12:35:04 -0700

I have two explorer.exe running in task manager and my
computer is sluggish. When I
remove "Explorer.exe"(capital "e") the operating speed is
normal, this file also has the lower memeory usage. If I
remove"explorer.exe" I lose the desktop ICON's and have to
reboot.
I've tried registry cleaner and other things but no
success.

Help apprecated!!!

Thanks.
---------------------

There should only be ONE instance of explorer.exe running (which is the
process that runs your desktop, as you have noticed). The Explorer.exe is
very suspicious....often spyware and viruses will "disguise" themselves as
system processes to avoid visible detection, they use different
capitalization to give themselves the same name as a system process. I
would suggest looking in the following locations for this Explorer.exe

1. Everywhere, with Adaware (or the equivalent malware removal tool)
2. The Run registry keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
3. The file system, by using the "search" in the Start menu (or by the path
as indicated in the entry in the registry as per step 2)

--
~~ JASON HALL ~~
~ Performance Support Specialist,
~ Microsoft Enterprise Platforms Support
~ This posting is provided "AS IS" with no warranties, and confers no
rights.
~ Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
~ Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
 
B

Bill Lynn

Thanks again; Ad-aware found the problem. It was the
Litmus Trojan horse virus.

Bill
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top