Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: explorer.exe using over 70,000k of memory..Virus?

04 Feb 2012   #1
Fatal1ty

 
explorer.exe using over 70,000k of memory..Virus?

Hey im wondering if someone can give some advice as I think I might have a virus. I read this on bull-guard forum (my antivirus software)

The explorer.exe is a process; however, it is also a Trojan. cexx.org has an excellent removal process at this link: Advertising Spyware: DLDER.EXE, Explorer.exe trojan (ClickTillUWin)

We've found multiple infections in a few machines over the years. It's known as the dlder.exe Trojan and it drops another "explorer.exe" file in a separate folder, normally in 'C:\Windows\explorer\Explorer.exe'.

Please note that you have a legitimate original "explorer.exe" in 'C:\Windows\explorer.exe'

It also drops a startup file in your registry so it will run silently at startup...normally in your Local Machine Registry: [HKLM\SOFTWARE\games\Clicktilluwin]. However; we have also found the Clicktilluwin entry in ‘HKCU’ over the past few months. That said, you should do a search find on your total registry for the phrase 'Clicktilluwin'. Go to the link above and follow cexx.org's manual removal, then search your regedit for the 'Clicktilluwin' reg-key and you should be fine.

Anytime that you have explorer.exe running over....say....25,000K to 30,000K in the task manager, it's usually indicative of infection.

Hope this helps.

Max








Please can anyone give me any info? I am currently using bullguard anti virus registered and MBAM Free version




Attached Thumbnails
-explorer.jpg  
My System SpecsSystem Spec
05 Feb 2012   #2
A Guy

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
 
 

It's relatively easy in this case. Open task manager> Right click on explorer.exe and choose properties> On the General tab, the Location should be C:\Windows (assuming C:\ is the drive where the OS is installed)



You can also click on the details tab which should identify it as a Microsoft product.



Mine is running at 51k to 52k, so take things you read with a grain of salt.



Usually there will be 2 explorer.exe's if there is an infected one, and the spelling will be slightly different, and it won't be located in the root of Windows. It may show up as being in C:\Windows\explorer\exporer.exe, for instance.

Resource usage will vary by machine. You can get more info using a program like Process Explorer, but it's hard to say exactly what is using resources. If you have windows customizations like shell32.dll enhancements, there will be increased usage.

When in doubt, scan with Malwarebytes, or other antivirus/antispyware applications.

A Guy
My System SpecsSystem Spec
05 Feb 2012   #3
Fatal1ty

 

I havent got two explorer.exe and also scanned with malwarebytes and bull guard anti-virus and also superAntiSpyware and my pc came up clean. Don't know why it was using so much memory but thanks for the help.
My System SpecsSystem Spec
05 Feb 2012   #4
A Guy

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
 
 

You can also always upload any suspect file to Virus Total for inspection. A Guy
My System SpecsSystem Spec
06 Feb 2012   #5
GEWB

32bit: XP, Win7 H.P. / 64bit: 2008R2, Win7 Pro, Ultimate / Several flavors of Linux
 
 

Doesn't seem unusual to me. For example, I opened Task Manager and explorer was just over 50k. I then opened Windows Explorer, bounced around some of my large drives, check some drive properties - every new action caused the task manager explorer memory to go up. In no time I was over 66K.

HOWEVER, when "left alone" for a while the explorer memory footprint does begin to drop.

Regards,
GEWB
My System SpecsSystem Spec
06 Feb 2012   #6
Fatal1ty

 

Quote   Quote: Originally Posted by logicearth View Post
You cannot be serious....You seriously cannot be serious...my god I wish I had as much RAM as you...yet here you are complaining about 70 MBs of your RAM being used...You cannot be serious!
Hahaha lol yes. Never seen it use that much memory before though lol my bad
My System SpecsSystem Spec
Reply

 explorer.exe using over 70,000k of memory..Virus?




Thread Tools





Similar help and support threads
Thread Forum
Possible Memory Leak Virus - Anti-virus detects nothing?
Hello, I am needing some support on what is exactly taking up all the RAM on my brother's PC as after about 8 hours of uptime, 65% of my Physical Memory is being used up with nothing really open. I did some research and found out it was a possible memory leak or virus, so I first tried to run...
Performance & Maintenance
Appinfo using 600,000k+ RAM on 2GB machine
Hey all- About every other time I boot up, Appinfo gobbles up a big chunk of my RAM for a good five minutes. I know I can't really just stop it (it's set to manual right now), but I'm hoping there might be some solution out there. I really don't have all that much software installed, and normally...
Performance & Maintenance
Explorer.EXE is this a virus???
Every time I go to change a feature to my computer for example uninstalling a program my User Account Control window pops up asking me if I would want to allow the following program from an unknown publisher to make changes to this computer? Program name: Explorer.EXE Publisher: Unknown File...
System Security
Firefox Memory Starts with 200,000K, goes up 500,000K
firefox.exe starts with (one tab is opened at start) closely to 200,000K and goes up to 500,000K by time. Is this normal? I open several tabs and then it goes up to 500,000K by time. The thing is mostly when it freezes, it is freezing the whole computer. If I am lucky, I am able to kill the...
Browsers & Mail
Explorer Will Not Load, States Explorer.exe Contains Virus
I am currently in safe mode now, but each time I boot normally, I only get a blank screen with a cursor. When i ctrl/alt/del I see other processes necessary for windows, but now explorer...when i manually start it, i get the error that it contains a virus and cannot load. I've been struggling...
System Security
Virus and Virtual Memory is Low
Uh, I've been having problems with my computer lately. It keeps running slowly lately and i keep getting a backdoor trojan that makes my taskmanager and regedit mess up. But i have norton and it always say it deletes it. Also I have problems with my Virtual Memory. Sometimes a box keep coming up...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 09:00.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App