explorer.exe very confused

Discussion in 'Malware Help (A Specialist Will Reply)' started by chivesthebutler, Jan 9, 2005.

  1. chivesthebutler

    chivesthebutler Private E-2

    hi everyone...

    my problems are as such:

    explorer.exe jumps up and down in cpu usage, basically depending on how much the other processes are using up. so if i'm doing a couple of things, explorer.exe will jump to 60% or something about once every two seconds. the result is a graph that pretty much looks like my computer's having a heart attack:


    yeah so that's a problem. also, my mouse (microsoft optical usb basic with scroll wheel) dies every couple of minutes (particularly when explorer.exe is acting up) and then comes back. also, sometimes explorer.exe just dies alltogether and then comes back.

    also, when i startup, i get a really messy thing going on with my start bar. that can be seen here:


    i also get a bunch of problems with "Language Bar" and "The language bar" as toolbars on the start bar when i startup.

    they always manage to disappear within a couple of hours though...

    when i start up IE, it freezes for a couple of seconds before i can do anything. so if i click or anything it has to be task-ended.

    i was going through the thread at the top of the forum, but when i went to disable the system restore i hesitated...
    will i regret deleting ALL my restore points (which are a lot because i have a 120 gb hd and full restore usage on)?

    i've done most else of what's on that list. if you guys really think it (getting rid of system restore) will help i will.

    just gimme a heads up (maybe there is a problem like this that's easy to fix... i had a similar problem with my computer when i first got it. the messenger service caused the system idle process to actually take up cpu cycles, and i turned that off and it was fixed).

    thanks!

    (PS i put all of these problems together because they all started at once, so i guess it's just one thing?)
     
  2. chivesthebutler

    chivesthebutler Private E-2

    ok nevermind. i got rid of system restore... i'm working through the list of things to do, i'll post a hijack thingy list when i get to it.

    again, if anyone has any basic ideas just let me know.
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    That's not a graph of explorer.exe. It's a graph of all CPU useage. Look at the process list to see what explorer.exe is using. If you don't do anything and just watch the graph, where does it normally run at (don't do anything, don't even move your mouse for awhile).

    If you have malware problems and do not remove your restore points, you will only bring back the malware when you use a system restore point. That is why the first step in the procedure is to disable system restore. If you want, you could try going back to a system restore point right now. If you really think you know when the problems began, go back to a restore point before that time. Don't forget anything you have added to your system after the restore point, good progams will be gone too, and will require re-install and tweaking. If that is of no use to you then you will have to disable system restore and complete ALL (not most) of the steps in the READ ME.
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    HJT logs should only be posted when we request them and must follow the sticky thread guidelines.
     
  5. chivesthebutler

    chivesthebutler Private E-2

    ok i'm working my way through the list as of now, i'll let you know if anything comes up. and i will follow the list, for sure.
     
  6. chivesthebutler

    chivesthebutler Private E-2

    sorry, i guess i wasn't too specific.

    yes indeed many of those processes are from other programs, but the up and down motion is caused by explorer.exe. the way i know is because i sort the processes by which is using the most cpu cycles (%) and then highlight explorer.exe. everything else remains (more or less) in place except explorer, which jumps up and down, accounting for that heartbeat sort of motion. i remember how that line looked before explorer.exe happened, and when i wasn't doing anything (as was the case when i took this screenshot) it usually remained pretty steady.
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    So are you saying if you are just sitting there and not doing anything at all (not even a mouse movement) it sits at 97% most of the time?

    Are you working on completing all of the steps in the READ ME?
     
  8. chivesthebutler

    chivesthebutler Private E-2

    yes it can. it's not common, usually it stays at around 60%, but if i have a browser open or something like that, it can sometimes randomly jump up to 97%.

    and yes, i am working my way down the list. i will post when i'm all done.

    hopefully that will fix my problem...
     
  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    It may or may not! Sounds like a trojan could be lurking in the background.
     
  10. chivesthebutler

    chivesthebutler Private E-2

    hey,

    i did everything on the list, and the problem remain.

    it seems to have changed a bit... the odd cpu usage sort of died away for some time, but it's back again... even in safe mode, i think... or it seems so.

    anywho, just a heads up that the tutorial thingy is done.

    hope you guys can help me!

    -tim
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Make sure you have HijackThis 1.99 and follow the guidelines on where to install it and how to post a log as an attachment. This is all covered in the sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

    Now post a HijackThis log as an attachment to your message (Do not post the log inline). All running programs should be closed, including your web browser, e-mail. Close before running Hijack This!

    To repeat: Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file. Place it in its own folder, for example C:\Program Files\HJT
     
  12. chivesthebutler

    chivesthebutler Private E-2

    will do in a moment. just an update. recently, i've been having problems with my USB mouse (it dies every couple of minutes and then comes back) and my internet connection... it seems to be getting spikes or something, as my instant messenger programs will boot off and sign back on often.

    i'll get that log going now.
     
  13. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member


    Could that be part of your problem with System Resource usage?
     
  14. chivesthebutler

    chivesthebutler Private E-2

    i think it is.

    the log file is attached... i think i did everything correctly...
     

    Attached Files:

  15. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Your log is basically clean. Just a question though. Do you use this ViewPoint crap from AOL? If not, I would uninstall it. You will see a few entries in your HJT log for it.

    Do you have a regular mouse that you can try for a while to see if your problems are somehow related to the mouse?
     
  16. chivesthebutler

    chivesthebutler Private E-2

    hmm... do you think this is a windows problem? maybe explorer.exe is corrupted. if you really thing it's not a spyware problem, could you drop this thread over into the software thread or something?

    i tried disconnecting the mouse and not much changed...

    i do think that toolbar (the first post) has something to do with the problem.

    but what do i know... hmm.

    you've helped a lot though... my computer is running quicker (albeit still with the same problem) and that software i got from this site will surely come into use later.
     
  17. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

  18. tiwahu

    tiwahu Private E-2

    I had very similar symptoms. No adware/spyware running, but the explorer.exe process would spike every few seconds. It would start out around 10 to 20% peaks, but later would be hitting nearly 100%. This was verified with perfmon.

    I didn't think it was too much of a problem at first, but it became quite a nuisance. Simple text editing became annoying and videos were increasingly more choppy. I had installed the latest video drivers from Nvidia, and I think the problems started around the same time, but I cannot be certain it was the drivers. Another reason I think it was something related to video is that I didn't seem to have the problem when I used Remote Desktop to my computer.

    Fortunately, I believe the following resolved my issue with the explorer.exe process spikes:

    Video may momentarily stop or pause when you use other programs in Windows XP Service Pack 2
    http://support.microsoft.com/default.aspx/kb/885853/EN-US/?

    Hopefullly it works for you, too.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds