Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Two explorer.exe, One taking all of my RAM's Memory

29 Dec 2014   #121
jadr

Windows 7 Hoem Premium 64
 
 
same problem - thanks! - but also fyi and a ?

Ran into same issue - computer was crawling. Thanks so much for all your work and problem solving on this - I read through the 12 thread pages. The uvk script worked great as I noted the same hidden folder. My computer now screams along fine/as usual ... EXCEPT: I still see two windows explorer processes when I go on line. The good news is that it is no longer a RAM hog ( was using almost 4GB and now stays in the 30-40k range) but still there after reboot. Something to worry about? leave it alone? keep an eye on? The memory usage has stabilized (waited 24 hours to share this) - will let you know. Thanks for any thoughts.


My System SpecsSystem Spec
.
29 Dec 2014   #122
AfrimS

Windows 7 Home Premium 64bit
 
 

Maybe thats there because you have the option for a new explorer,exe process to run when a new file is open?
My System SpecsSystem Spec
29 Dec 2014   #123
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
Folder still present

Quote   Quote: Originally Posted by jadr View Post
Ran into same issue - computer was crawling. Thanks so much for all your work and problem solving on this - I read through the 12 thread pages. The uvk script worked great as I noted the same hidden folder. My computer now screams along fine/as usual ... EXCEPT: I still see two windows explorer processes when I go on line. The good news is that it is no longer a RAM hog ( was using almost 4GB and now stays in the 30-40k range) but still there after reboot. Something to worry about? leave it alone? keep an eye on? The memory usage has stabilized (waited 24 hours to share this) - will let you know. Thanks for any thoughts.

My thoughts: Try running UVK as administrator - right click and choose "run as administrator"

If that doesn't work try the "Force Delete" option. Check results after a reboot.

If that doesn't work [SHIFT+Right Click] the folder and choose "copy as path" and paste the result here just to check that it's identical.

Other than that try PC Hunter:

Download PC Hunter - MajorGeeks

Run the program - there's a 32bit executable for 32bit machines and a 64bit executable for 64bit machines. From the "File" tab navugate to the problem folder and right click then choose "Force Delete"
My System SpecsSystem Spec
.

30 Dec 2014   #124
Valantor

Windows 7pro 64bit
 
 

Id like to thank you all , was having the same issue found this thread , found the same folder and cleaned it up

Saved me so much time after a few scans , only thing id done lately was windows updates and a flash player update so no idea where it came from but it was driving me nuts so thanks for the hard work
My System SpecsSystem Spec
02 Jan 2015   #125
ITsupportneeded

Windows 7
 
 

I'm having exactly the same problem with my laptop! So glad I found this thread, I've been trying to find a solution since October. I also have the folder with the same name in \ProgramData and have 2 Explorers, one of which uses all my memory. Can you please post the fix, I didn't quite understand how to delete this folder and get rid of the virus. Both Norton and Kasperski couldn't find it and I didn't quite get from this topic how to remove it. Thank you!
My System SpecsSystem Spec
02 Jan 2015   #126
ITsupportneeded

Windows 7
 
 

UPDATE: downloaded UVK and used it to delete the folder in \ProgramData. THe problem appears to be solved. Anything else I need to do? Thanks!
My System SpecsSystem Spec
02 Jan 2015   #127
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
Clean Up?

Quote   Quote: Originally Posted by ITsupportneeded View Post
UPDATE: downloaded UVK and used it to delete the folder in \ProgramData. THe problem appears to be solved. Anything else I need to do? Thanks!
Have a clean up maybe. Run Ccleaner or similar if you've got it installed. Delete all system restore points and create a new one. You could also check what's connecting using the method in Post #81 or use any similar utility that you've got installed.
My System SpecsSystem Spec
02 Jan 2015   #128
ITsupportneeded

Windows 7
 
 

Quote   Quote: Originally Posted by Callender View Post
Quote   Quote: Originally Posted by ITsupportneeded View Post
UPDATE: downloaded UVK and used it to delete the folder in \ProgramData. THe problem appears to be solved. Anything else I need to do? Thanks!
Have a clean up maybe. Run Ccleaner or similar if you've got it installed. Delete all system restore points and create a new one. You could also check what's connecting using the method in Post #81 or use any similar utility that you've got installed.
Thank you! I used a Kasperski tool tdsskiller and Norton's clean up utilities to look for virus in the last few days and both came back clean. They only thing that helped was the deletion of that folder in \ProgramData. I might get the ccleaner and run it. The rest looks a bit too complicated for me Thank you so much for posting the solution, I've been googling the solution to this problem for 2 months and couldn't find the it anywhere! Why doesn't Norton address it? I have it running all the time!
My System SpecsSystem Spec
02 Jan 2015   #129
Callender

Microsoft Windows 7 Home Premium 64-bit 7601 Multiprocessor Free Service Pack 1
 
 
Why doesn't Norton detect it?

Well according to the VirusTotal report none of the big name AV's detect it. I honestly don't know too much about it but here's my thoughts:

It seems to use digitally signed files to evade detection. MBAM Pro alerts on suspicious connections but doesn't remove it. It may take time for the big name AV's to come up with a safe method that they can use for detection and removal. Possibly it's classed as Adware and not malicious or not stealing your personal data.

The best thing that you can do for now is ask yourself how it got on your system. My guess (it's just a guess) is that it's a flash exploit that used a vulnerability in an old version of flash player to install itself. So just make sure that you check that all third party software (non microsoft) is patched and up to date and that the old versions have been fully removed. That's about all you can do without installing extra protection!
My System SpecsSystem Spec
28 Jan 2015   #130
Ged325

Windows 7 Ultimate N
 
 
Thank you

A big thanks to all of you for doing the leg work.

I too had the same symptoms and GUID folder (Hidden under c:\ProgramData) with the recently modified login date.

For any others out there it seems to be getting in by old Java versions. AVG, MalwareBytes, and even combofix hadn't detected the issue.

I ended up using unlocker (downloaded from CNET Unlocker - Free download and software reviews - CNET Download.com) to forcefully delete the folder.

So far no 2nd explorer has come back taking up all the ram. Agreed that it's using signed DLLs to avoid detection . . . though I think mine was a different DLL name.

Thanks again for the help.
My System SpecsSystem Spec
Reply

 Two explorer.exe, One taking all of my RAM's Memory




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Two explorer.exe, one taking up to 3 gigs system memory
So the other thread was no help, so I started this one. When I start up my computer and after its loaded (in normal and clean boot) an explorer.exe shows up and starts rapidly ballooning up over the 2 million bits mark, making my computer really slow. I've cleaned with Comodo, Malwarebytes...
Performance & Maintenance
MsMpEng.exe taking up too much memory
MsMpEng.exe(windows defender) has taken up lots of my computer's ram and cpu usage and is making my computer really slow But when I try to open windows defender it says that windows defender has been disabled even though MsMpEng is running. Trying to turn on windows defender in order to disable it...
System Security
Internet explorer taking up a lot of memory, also disable screensaver
Does this happen to someone else also? I usually have about half dozen IE windows opened at anytime. I might start a few more and then close a couples. But eventually I notice one or two if the IE processes start to use up several hundred MB ram up to eventually 1GB ram. When one of the IE...
Browsers & Mail
Why is IE taking up so much memory?
I took a look at my TaskMan because my Core 0 was at 100%, and I just exited a flash game. I had 4 IE windows open, and a total of 4 tabs. One iexplore.exe was using over 400,000K. I clicked on the Applications tab, right clicked on each App, and selected Go To Process. None took me to the...
General Discussion
Svchost taking too much memory
my svhost process is taking too much Memory... making my computer lag..it havent happened any time before... http://www.pikipimp.com/pp/pimped_photo/s/image/52/806/368/Capture.PNG?ts=1264555978397:shock::shock::shock: please suggest a solution..
Performance & Maintenance
Graphics taking more memory
Hi, recently i brought a DELL Inspiron 15 laptop, which has 4GB RAM and integrated Graphics+Core i5 Processor.But when i check my system properties it shows Available Memory : 4GB (Usable 2.93GB). when i made some tests regarding the 1 GB missing RAM, i found that intergrated Graphics current...
Graphic Cards


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 11:02.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App