New
#1
Two Explorer.exe running
Hi, I'm kinda confused now. Here's the story.
Yesterday, MBAM detected a infection named- Heuristics.Reserved.Word.Exploit. The file which was flagged was- C: \Windows\Installer\Explorer.exe
It always came back after reboot. Upon googling, i found that the threat name refers to the usage of microsoft reserved name outside it's default location.
So, I booted in safe mode, terminated Explorer.exe (original one), and deleted that duplicate Explorer.exe via cmd (it wont unless i terminate original explorer process).
Everything is fine now. There's one thing about which i'm concerned.
I've two Explorer.exe running sometimes, not often. Attached is the screen below.
Both are running from original default location.
Any ideas why 2 explorer.exe are running?
PS: Command line also included in the pic. Maybe if that could reveal something. And I don't have 'Launch folder windows in a separate process' checked. One more thing worth noting that the original explorer.exe and duplicate explorer.exe have same creation date and checksums.