Explorer.exe taking up 100% cpu?

Toggle sidebar Toggle sidebar
H

Hansomfiser

Junior Member
Nov 8, 2004
5
0
0
I haven't installed anything new or anything the last couple of days, but my explorer.exe-process under the task manager is starting to eat up 100% of the cpu-usage a couple of times per day, especially when I first boot the computer up. The only solution is to ctrl-alt-del and end the process and then re-start it from there.
I have scanned my computer for spyware with the latest Ad-Aware and also NOD32 antivirus, done all the turn-off-system-restore stuff and everything but it doesn't help.
I've looked at the autostart in msconfig but there is nothing there that is suspicious, that I didn't have before.

I even updated my WindowsXP Pro to SP2 from SP1 today, with no success solving the problem.
Besides that, everything works fine, but it's really annoying me, needing to end explorer.exe and restart it again.


I've searched the net and there seems to be other people having similar issues, but I didn't really see any working solution (including the link to Microsofts website with the possible solutions to the 100% cpu thingy)

Thanks alot for the help in advance
 
Z

Zugzwang152

Lifer
Oct 30, 2001
12,134
1
0
run a couple online virus scanners like housecall. run spybot and then hijackthis. post your logs if you dont know how to use hijackthis. then try a sfc /scannow and then a chkdsk /r. report back afterwards.
 
H

Hansomfiser

Junior Member
Nov 8, 2004
5
0
0
Logfile of HijackThis v1.98.2
Scan saved at 17:43:04, on 2004-11-08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program\D-Tools\daemon.exe
C:\Program\Eset\nod32kui.exe
C:\Program\MSN Messenger\msnmsgr.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Murat Akay\Skrivbord\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.se/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
R3 - URLSearchHook: i-Nav IDN SearchHook - {CE000994-A58C-4441-8938-744CD72AB27F} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: tekybvhn - {0D11BF73-A72E-C8CB-D7B9-F0A31BF9F303} - C:\WINDOWS\System32\TEKYBVHN.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program\google\googletoolbar2.dll
O2 - BHO: i-Nav IDN Resolver - {CE000992-A58C-4441-8938-744CD72AB27F} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program\google\googletoolbar2.dll
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [nod32kui] C:\Program\Eset\nod32kui.exe /WAITSERVICE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://c:\program\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: i-Nav ? hjälp - {CE000992-A58C-4441-8938-744CD72AB27F} - (no file)
O9 - Extra 'Tools' menuitem: i-Nav ? hjälp - {CE000992-A58C-4441-8938-744CD72AB27F} - (no file)
O9 - Extra button: (no name) - {CE000996-A58C-4441-8938-744CD72AB27F} - (no file)
O9 - Extra 'Tools' menuitem: i-Nav - alternativ - {CE000996-A58C-4441-8938-744CD72AB27F} - (no file)
O12 - Plugin for .mov: C:\Program\Internet Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for .mp3: C:\Program\Internet Explorer\PLUGINS\npqtplugin4.dll
O12 - Plugin for .mpeg: C:\Program\Internet Explorer\PLUGINS\npqtplugin3.dll
O16 - DPF: ppctlcab - http://69.44.122.156/scanner/ppctlcab.cab
O16 - DPF: {11117711-1111-1711-7121-111177111157} - ms-its:mhtml:file://c:\bebe.mht!http://www.alarm-works.com/tx.chm::/ai.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/...sPAClient.cab30149.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/...neSweeper.cab30149.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://69.44.122.156/scanner/axscanner.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/219808cb59fa029d8505/netzip/RdxIE601.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.micros...site.cab?1095609588046
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840.../housecall/xscan53.cab
O16 - DPF: {83873F92-B99B-400A-9E36-52B5F4970FB7} (FileSharingCtrl Class) - http://appdirectory.messenger....sv/filesharingctrl.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/...atsClient.cab30149.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/...ry/ZIntro.cab30149.cab



Now what is wrong here?
 
HardcoreRobot

HardcoreRobot

Lifer
Nov 7, 2000
16,403
3
81
i have found that my explorer will do this when i have a badly formed video file in a directory it is trying to list or preview. my suspicion is that it is trying to generate a thumbnail and just gets hung up on a bad codec or index. you didnt describe when your problem is happening, so this may or may not apply.
 
H

Hansomfiser

Junior Member
Nov 8, 2004
5
0
0
Hardcore: I disabled the windows avi-preview function thing from the registry, a long time ago (saw it on a Tweak-site). So it shouldn't be the problem hmm... And besides, I don't go to any folders containing movies, before it starts eating my cpu up.
 
H

Hansomfiser

Junior Member
Nov 8, 2004
5
0
0
Thanks Schadenfroh, I deleted/fixed those three lines with Hijackthis but the problem is still there :(

I rebooted after doing the fix, of course.


Now I currently have the 100% cpu problem so I just took a Hijackthis-log during the 100% process to see if there is anything new that came up, so I post the log here before I restart the explorer.exe-process.


Logfile of HijackThis v1.98.2
Scan saved at 17:31:59, on 2004-11-09
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program\D-Tools\daemon.exe
C:\Program\Eset\nod32kui.exe
C:\Program\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Murat Akay\Skrivbord\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.se/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Länkar
R3 - URLSearchHook: i-Nav IDN SearchHook - {CE000994-A58C-4441-8938-744CD72AB27F} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: tekybvhn - {0D11BF73-A72E-C8CB-D7B9-F0A31BF9F303} - C:\WINDOWS\System32\TEKYBVHN.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program\google\googletoolbar2.dll
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [nod32kui] C:\Program\Eset\nod32kui.exe /WAITSERVICE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://c:\program\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xportera till Microsoft Excel - res://C:\Program\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java-konsol - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: i-Nav ? hjälp - {CE000992-A58C-4441-8938-744CD72AB27F} - (no file)
O9 - Extra 'Tools' menuitem: i-Nav ? hjälp - {CE000992-A58C-4441-8938-744CD72AB27F} - (no file)
O9 - Extra button: (no name) - {CE000996-A58C-4441-8938-744CD72AB27F} - (no file)
O9 - Extra 'Tools' menuitem: i-Nav - alternativ - {CE000996-A58C-4441-8938-744CD72AB27F} - (no file)
O12 - Plugin for .mov: C:\Program\Internet Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for .mp3: C:\Program\Internet Explorer\PLUGINS\npqtplugin4.dll
O12 - Plugin for .mpeg: C:\Program\Internet Explorer\PLUGINS\npqtplugin3.dll
O16 - DPF: ppctlcab - http://69.44.122.156/scanner/ppctlcab.cab
O16 - DPF: {11117711-1111-1711-7121-111177111157} - ms-its:mhtml:file://c:\bebe.mht!http://www.alarm-works.com/tx.chm::/ai.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/...sPAClient.cab30149.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/...neSweeper.cab30149.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://69.44.122.156/scanner/axscanner.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.micros...site.cab?1095609588046
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840.../housecall/xscan53.cab
O16 - DPF: {83873F92-B99B-400A-9E36-52B5F4970FB7} (FileSharingCtrl Class) - http://appdirectory.messenger....sv/filesharingctrl.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/...atsClient.cab30149.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/...ry/ZIntro.cab30149.cab



Edit: if it for any use, I have recently discovered that my NOD32kui.exe is causing 100% cpu usage too, but not as often as explorer.exe. Maybe it has something to do with it? I don't want to uninstall the complete program just to see that explorer.exe still causes the problem, I wanna be sure :/
 
K

kylef

Golden Member
Jan 25, 2000
1,430
0
0
Try re-installing your anti-virus software.

Also, what the heck is
O2 - BHO: tekybvhn - {0D11BF73-A72E-C8CB-D7B9-F0A31BF9F303} - C:\WINDOWS\System32\TEKYBVHN.dll
Click to expand...
?

That looks suspicious to me.

You should use two programs from SysInternals to help diagnose this further.

1) Get Process Explorer and when explorer.exe is locked at 100%, open up its properties and look at the stack of the thread that is running away. See if you can tell what module it's from. Also, set the lower pane view to "Dll View" and see what Dlls are loaded by Explorer.exe to see what plug-in is causing the 100% cpu usage.

2) Download Autoruns and liberally remove startup programs that don't look necessary, or are questionable. You can always re-run the program and re-check the little box to add them back later if you change your mind.
 
H

Hansomfiser

Junior Member
Nov 8, 2004
5
0
0
Ok thanks guys for your help, but I think the problem has been solved some strange way, since I updated my virus definitions for NOD32, explorer.exe stopped taking up resources. Been fine now for 24 hours! Yiihaa..

I'll let you know if the problems comes back again.Until then - you can stop writing here so it doesn't take up space on the boards.

Thanks
 
You must log in or register to reply here.

TRENDING THREADS

COMPANY
RESOURCES
FOLLOW
Top Bottom