Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Two explorer.exe, one taking up to 3 gigs system memory

28 Nov 2014   #1
spork

Windows 7 x64
 
 
Two explorer.exe, one taking up to 3 gigs system memory

So the other thread was no help, so I started this one. When I start up my computer and after its loaded (in normal and clean boot) an explorer.exe shows up and starts rapidly ballooning up over the 2 million bits mark, making my computer really slow.

I've cleaned with Comodo, Malwarebytes pro, and Kaspersky bootkit cleaner. This only happens when my computer is connected to the internet. The process has the path C:/Windows/explorer.exe but it shows up with no user in the task manager and when I try to end the task it gives me a message saying "access is denied. However, when I end it through the performance monitor it will let me end it, but a new one always pops back up in its place.

I've been googling for weeks trying to fix this and still no luck, please help.


My System SpecsSystem Spec
.
30 Nov 2014   #2
TJGOA

Windows 7 Home Premium 64-bit SP1
 
 

Google select which programs run at startup for your OS. There should be a way to block any unwanted applications from starting up. You might want to try and see if this simple method would work.
My System SpecsSystem Spec
01 Dec 2014   #3
NimoTony

Windows 7 Ultimate 32bit
 
 

The explorer.exe file is located in the folder C:\Windows. In other cases, explorer.exe is a virus, spyware, trojan or worm!

see this thread

Two explorer.exe, One taking all of my RAM's Memory
My System SpecsSystem Spec
.

01 Dec 2014   #4
spork

Windows 7 x64
 
 

Both of you read the OP before you reply.
My System SpecsSystem Spec
01 Dec 2014   #5
Tookeri

Windows 7 Pro 32
 
 

Quote   Quote: Originally Posted by spork View Post
The process has the path C:/Windows/explorer.exe but it shows up with no user in the task manager and when I try to end the task it gives me a message saying "access is denied.
You need to start Task Manager as administrator to see all processes and all details for all processes. When you start it normally(which means as a standard user even if you're an administrator) you can do this by clicking the button "Show processes from all users" in the bottom left corner.

When you start Performance Monitor it's started as administrator (UAC prompt). That's why you could kill it from there.
My System SpecsSystem Spec
01 Dec 2014   #6
spork

Windows 7 x64
 
 

Ok when I did that it showed it was from owner, which is me. Odd that it would show that after I clicked display processes from all users when the other one showed it normally. And also now I can click on the display file location and it brings up my windows folder, when it wouldn't do that before.

I tried booting in safe mode with networking and still got the same issue. I think its maybe a Microsoft problem? Like one of their updates caused a bug or something. I'm going to try the tool you posted in the other thread for the context menu thing then get back.


EDIT: I almost forgot, when this problem started happening, I now get a RunDLL error on startup saying C/users/owner/AppData/local/owengla.dll could not be found. I have no idea what that means.
My System SpecsSystem Spec
01 Dec 2014   #7
Tookeri

Windows 7 Pro 32
 
 

It wasn't me who suggested that tool I suggested Process Explorer instead of Task Manager cause you get more info and can check the processes on VirusTotal.

This/your problem have been reported in several threads the last days so a recent Windows Update might be the cause. I've tried searching a little but only found these possible explanations so far:
- High CPU usage in the Explorer.exe process when you open a folder that contains corrupted .wav files (Hotfix download)
- Modified folder options(tab: view) in explorer to launch folder windows in a separate process. This would create additional explorer.exe processes more info

I can't find any useful info on owengla.dll other than in malware context. The path ...AppData/local/ is strange because normally files go in a sub-folder to that folder.
My System SpecsSystem Spec
01 Dec 2014   #8
spork

Windows 7 x64
 
 

Yeah sorry I just realized that

I used process explorer though and followed your tutorial. It all comes up clean and verified signed by microsoft, and there is a ctfmon attatched to it *sometimes*, but not always. Its using over 5 gigs as I type this and nothing is attached to it.

I spent the last hour talking to a nice girl from microsoft. she said it *had* to be a virus. So now I'm stumped.

Wathcing it just now it apears that around 5.2 gigs seems to be critical mass, it just restarted itself.
My System SpecsSystem Spec
01 Dec 2014   #9
Tookeri

Windows 7 Pro 32
 
 

The tutorial also shows how to check DLL files that a process is using. And also wait for the ctfmon.exe to show up so you can check that too including the DLL's.
Press Ctrl+L to toggle the lower pane after selecting a process. Then right-click a column header in the lower pane to get the option to add more columns.

FYI, ctfmon is a text service for alternative user input features used for support of speech recognition, handwriting recognition, keyboard, translation, and other alternative user input technologies.
My System SpecsSystem Spec
01 Dec 2014   #10
spork

Windows 7 x64
 
 

On the first DLL it said in the verified signer column (the form specified for the subject is not one supported or known by the specified trust provider). No virus detected. The other unknowns are from nvidia, and none of their stuff is signed so I'm not too concerned about that.

It found a virus in one of the files, CMC says it's a backdoor DLL, but that was the only red flag.

cfmon hasn't showed yet.
My System SpecsSystem Spec
Reply

 Two explorer.exe, one taking up to 3 gigs system memory




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Two explorer.exe, One taking all of my RAM's Memory
Hello, Ever since last month on October 2014 I'v noticed that I have 2 Explorer.exe's with one being my desktop (The one with the username, Afrim) and another explorer.exe process that has no username but this explorer.exe process starts off using a minimal amount of my Memory but after a few...
Performance & Maintenance
Odd Issues: Explorer taking 70k, Chrome not loading pages,system hangs
i dont know where exactly to put this since it spans such a massive amount of software and hardware anyways: I have a Dell Inspiron M1050 with an AMD Triple Core (2.3 Ghz) and an ATI Radeon 4250 HD Integrated. 4 Gb RAM 500Gb HDD Windows 7 Home Premium x64 (obviously) so, ive had this...
General Discussion
Why are two gigs of memory being used?
Hi i don't get why 2 gigs of my memory are being used i have 4 gigs and when i am not running anything but google chrome my laptop is using up 2.50-2.00 gigs of memory and i only have about 4 tabs open and no backgrounds programs i used one of AVG's programs to get rid of any useless programs that...
Performance & Maintenance
Internet explorer taking up a lot of memory, also disable screensaver
Does this happen to someone else also? I usually have about half dozen IE windows opened at anytime. I might start a few more and then close a couples. But eventually I notice one or two if the IE processes start to use up several hundred MB ram up to eventually 1GB ram. When one of the IE...
Browsers & Mail
HD has 68 Gigs free, yet only shows 45 gigs
Hello. The C drive in my computer is 139 GB (150 GB hard drive). Windows shows that there is 45.5 GB free, but if I select the contents of the drive and check the properties, it says that everything on the drive is taking up 70.8 GB on the disk. But in doing the math (139-70.8 = 68.2) it looks...
Performance & Maintenance
System only recognising 3.37 gigs of ram out of 4 GB, on x64
Sorry if this is in the wrong section. I have had the same 4 gigs of 2x 2 GB Kingston DDR2-667 ram in my mobo and only recently noticed the system was only recognising 3.37 GB (see in attached image). Now I know my mobo (see specs, second one) can handle x64 and 4 gigs of ram so any insight could...
Hardware & Devices


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:36.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App