Multiple iexplore.exe in task manager (a.k.a. is there an echo in here?)

Solved
By drvodka
Jul 24, 2010
Topic Status:
Not open for further replies.
  1. drvodka

    drvodka Newcomer, in training Topic Starter Posts: 62

    ok - so here's the deal - after literally rebooting my machine 8,000 times in the past 24 hrs...

    It seems my explorer.exe is always at 35,000-40,000K in Task Manager, regardless of what I have turned on or off in msconfig. By turning everything off (service and startups) and switching the items on one by one, I have narrowed down the list of possible culprits to the following, but cannot seem to identify the one (if it is only one) that consumes so much CPU Memory Useage in Task Manager, so I may need your advice:

    Services:
    * PC Tools Auxiliary Service (do not recall ever intentionally installing this)
    * PC Tools Security Service (do not recall ever intentionally installing this)
    * TSM Central Scheduler (I uninstalled Tivoli Storage Manager years ago, this seems to be leftover)
    * TSM Client Acceptor (I uninstalled Tivoli Storage Manager years ago, this seems to be leftover)
    * TSM Remote Client Agent (I uninstalled Tivoli Storage Manager years ago, this seems to be leftover)

    Startup:
    * Boingo (software used to find wireless signals in airports - don't care if we remove it)
    * iTunesHelper (I never use iTunes - can remove)
    * hpgs2wnd (this is a Hewlett Packard leftover from an old scanner I had, no need for it)
    * Google Toolbar Notifier (do I need this?)

    Any advice would be great - my computer is running smoothly and quick right now with the above list turned off in msconfig - if I can get rid of them all with no bad side-effects, then that is fine with me! :)

    Thanks, Broni.
  2. Broni

    Broni Malware Annihilator Posts: 45,316   +243

    Great.
    Never look at RAM usage. It really doesn't matter.
    What matters is CPU usage.

    Uninstall, whatever is listed in Add\Remove.
    All applications, you listed are safe to uninstall.
    Run TFC afterward.

    When done, we'll look at your final list of startups, by....

    Download HijackThis:
    http://free.antivirus.com/hijackthis/
    by clicking on Installer under Version 2.0.4
    Install, and run it.
    Post HijackTHis log.
    Do NOT attempt to fix anything!

    NOTE. If you're using Vista, or 7, right click on HijackThis, and click Run as Administrator
  3. drvodka

    drvodka Newcomer, in training Topic Starter Posts: 62

    Maybe I spoke too soon! :)

    My CPU Useage is at 100% when I just have this one chrome tab open and HTJ - nothing else (other than Avira). I am typing and waiting a few seconds before I even see the text appear in the window here, it is that slow. This is pretty infuriating. I am posting a prcess explorer log that shows what is running when just chrome (one tab) and HJT are open - and HJT is finished scanning.

    Attached Files:

  4. Broni

    Broni Malware Annihilator Posts: 45,316   +243

    PE is eating up over 43%, which happens. As soon, as you close it, CPU usage should go down.
    Then, Chrome is using 20% + 3% = 23%
    I don't use Chrome, but you may have some add-ons installed, which are doing it.
    See, if same thing happens with FF and IE.
    Don't open PE, check the usage through Task Manager and just let me know.

    I'll be checking your HJT log in a meantime.
  5. Broni

    Broni Malware Annihilator Posts: 45,316   +243

    Re-run HJT and checkmark following items (these startups will be disabled; no actual programs will be removed):

    - O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto
    - O4 - HKLM\..\Run: [WD Button Manager] WDBtnMgr.exe (up to you: Button manager installed with a western digital external disk drive. Allows you to back up your system with one click)
    - O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    - O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
    - O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime (* see a note below)
    - O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    - O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    - O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    - O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
    - O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
    - O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
    - O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
    - O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    - O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (** see note bellow)
    - O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
    - O4 - HKUS\S-1-5-18\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'SYSTEM')
    - O4 - HKUS\S-1-5-18\..\RunOnce: [TSClientAXDisabler] cmd.exe /C "%systemroot%\Installer\TSClientMsiTrans\tscdsbl.bat" (User 'SYSTEM')
    - O4 - HKUS\.DEFAULT\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'Default user')
    - O4 - Global Startup: Digital Line Detect.lnk = ?
    - O4 - Global Startup: VPN Client.lnk = ?

    Close HJT. Restart computer.



    * Download, and run QuickTime Killer: http://www.softpedia.com/get/System/Launchers-Shutdown-Tools/QuickTime-Killer.shtml
    After downloading, double click on EnGraphQuickTimeKillerInstaller.msi file.
    You may be asked to download, and install .NET Framework
    QuickTime Killer will remove QuickTime from start up and kill any running QuickTime processes. This application runs silently at start up and closes itself as soon as it takes care of QuickTime. QuickTime itself won't be removed from your computer, and will be available whenever needed.
    NOTE. QuickTime is not a threat, but unnecessary startup, which can't be disabled in any other way.

    ** Download, and run CTFMON-Remover: http://www.gerhard-schlager.at/en/projects/ctfmonremover/
    The CTFMON-Remover helps you removing the annoying CTFMON.EXE from your Windows operating system. The program is easy to use and displays whether the CTFMON.EXE is installed and running or not. If it was found then you can remove it within seconds. Just in case that you need the CTFMON sometime in the future there is also an option to restore the original one.
    Note:The CTFMON.EXE is among other things responsible for changing the language schema of your keyboard (e.g. for switching between the German and English keyboard layout). So in case you are using this feature you shouldn't remove or disable the CTFMON.EXE!
    NOTE. CTFMON.EXE is not a threat, but unnecessary startup, which can't be disabled in any other way.
  6. Broni

    Broni Malware Annihilator Posts: 45,316   +243

    Ooooops...
    After checkmarking all those items, click on "Fix checked" button, then close HJT.
  7. drvodka

    drvodka Newcomer, in training Topic Starter Posts: 62

    forgive the stupid question - but after putting the check marks, I click on 'fix selected', right? :)

    edit: hahaha beat me to it!
  8. Broni

    Broni Malware Annihilator Posts: 45,316   +243

    LOL..................
  9. drvodka

    drvodka Newcomer, in training Topic Starter Posts: 62

    ok - I've done all of that.

    CPU useage in Task Manager is currently at about 20% with just one firefox tab open, but as soon as I change pages or even start to type in the window, it seems to jump up as high as 80%. Doesn't seem to matter which browser I'm using - true for chrome,. IE and firefox.
  10. Broni

    Broni Malware Annihilator Posts: 45,316   +243

    1. Did you apply all those HJT changes and did you restart computer?
    2. What type of internet connection do you have?
    3. Does the high CPU usage happen only while using browsers? Which browser is the one, you use the most often? Give me PE log with while you have FF open with a few tabs?
    4. You should move some stuff out of drive C:
    Windows likes to operate on at least 15% of a free space.
    5. Did you run defrag yet?
  11. drvodka

    drvodka Newcomer, in training Topic Starter Posts: 62

    my computer is really perfectly fine, I'm just going for the record longest thread....;)

    (no, really, it isn't fine!)

    1. yep - fixed the selected items and rebooted.
    2. I'm using wireless right now (Intel PRO/set) - 54 Mbps - AT&T router.
    3. When I close all browsers, CPU useage drops to 2-10% in TaskManager. With one tab open it runs at 30-50% depending on the browser, and at 70-90% with two tabs open. Three tabs = 100% regardless of browser. I used to use firefox only but then noticed it was using a lot of memory, and had read about it's memory leaks, so switched to chrome literally a week before I contracted the multi-iexplore.exe thing. PE log attached while running four of my most visited websites in firefox. Of course, just to confuse the issue, when I restarted firefox, it updated and now includes a new Task Manager item called process-container.exe to help with crashes - looks like it's chewing up some CPU useage.
    4. ok - I'll try and move some stuff onto my external drive overnight.
    5. yes I defragged when you recommended it.

    Attached Files:

  12. Broni

    Broni Malware Annihilator Posts: 45,316   +243

    You sure?

    Are we talking laptop here?
    Can you hardwire it to the router and check CPU usage?
    Also, hardwire it straight to the modem and check again.
  13. drvodka

    drvodka Newcomer, in training Topic Starter Posts: 62

    pretty sure - I went into the wireless connections thingy and it says 'speed' and '54Mbps'. and yes, it's a laptop (Dell Latitude D620).

    I have an AT&T 2701HG-B modem only - don't think it's a router. *blush*. it's the box we got when we signed up for their DSL service.

    I have hardwired into the router (modem?) now and it is the same thing when I open three tabs - 100% CPU in Task Manager.
     
  14. Broni

    Broni Malware Annihilator Posts: 45,316   +243

  15. drvodka

    drvodka Newcomer, in training Topic Starter Posts: 62

    ha! FINALLY! I have stumped you :)

    seriously though, thanks so much for your huge help - i'll try moving some stuff onto my external tonight and see if that helps. At least if worst comes to worst I can now just run it into a shop and have them look into this issue for me.

    please (honestly) PM me with a mailing address so I can send you a 6-pack of my next homebrew (golden belgian ale) as a token of my thanks.

    sincerely,

    dr.v.
  16. Broni

    Broni Malware Annihilator Posts: 45,316   +243

    Try moving some stuff out of C drive.

    Try also that new profile.

    One more thing, I'd like to check...

    Download, and install SpeedFan: http://www.almico.com/sfdownload.php
    Post your computer temperatures:

    [​IMG]

    Provide processor info (hold Windows logo key, and hit Pause/Break key to find out).



    P. S. As for that beer...I'd love to but I'm just helping people, because I like to do it :)
    If you insist, you can always check my signature :)
  17. drvodka

    drvodka Newcomer, in training Topic Starter Posts: 62

    ok - so it is probably running hot :)

    HD0 = 42C (green check)
    Temp1 = 76C (flame)
    Core0 = 66C (flame)
    Core1 = 70C (flame)

    Processor:
    Dell Latitude D620
    T2300 at 1.66GHz
    981MHz, 3.24Gb RAM
  18. Broni

    Broni Malware Annihilator Posts: 45,316   +243

    This is Core Duo T2300, right?
    If so, max temp is listed at 100C, so your temperatures are not that bad.
    "Flames" come from SpeedFan settings (can be changed), which set a "flame" at 50C.

    Tried new profile?
  19. drvodka

    drvodka Newcomer, in training Topic Starter Posts: 62

    New profile is now my job for tomorrow evening :)
  20. drvodka

    drvodka Newcomer, in training Topic Starter Posts: 62

    actually I am not sure if it IS core duo - doesnt say that anywhere. only 'Genuine Intel(R) CPU' before the T2300....
  21. Broni

    Broni Malware Annihilator Posts: 45,316   +243

    Sounds like a plan :)
  22. drvodka

    drvodka Newcomer, in training Topic Starter Posts: 62

    rather embarrassing: how do I tell if I have a core duo? I'm starting to think that I DONT have one.
  23. Broni

    Broni Malware Annihilator Posts: 45,316   +243

    I already checked.
    T2300 is Core Duo :)
  24. drvodka

    drvodka Newcomer, in training Topic Starter Posts: 62

    *ahem* yeah, I knew that - was just testing you....
  25. Broni

    Broni Malware Annihilator Posts: 45,316   +243

    You owe me another beer....LOL
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.