HELP NEEDED > Strange program running on my computer

[pradeep1]

Originally posted by: lxskllr
I wouldn't think a folder name would show up under Explorer like that, unless something was really fubar. You may be able to ignore it, but I know it would bug the hell out of me not knowing what the issue was. I'm not really sure where else to go though. You could try running a couple of scanners from a bootable CD and see if that makes a difference :^/

I did that last night. All the CD boot scanners for some reason did not detect my C: drive and would only scan my D: drive. They are all Linux based and for some reason, my C: drive is not mounting or showing up to scan.

 

[lxskllr]

YGPM

 

[pradeep1]

bump

 

[pradeep1]

bump^2

 

[FLegman]

Originally posted by: pradeep1

Okay, I downloaded the two. I used ProcessExplorer and it showed a fairly common set of programs running under the explorer.exe tree. I killed each and every process that was under that, excluding Avira antivirus (access denied), yet this mysterious "Downloads" program still remains.

In ProcessExplorer try to find out the path of each process under Explorer tree by opening the "properties" window then "image" tab.
Make sure each of them is a legit process/handle and hopefully you will be able to single out the troublesome instance.

Another thing : verify the digital signature of the processes (though some legit ones will fail to be authentified, Avira for exemple, but we know they ok...)
In ProcessExplorer >> Options>>Verify Images Signatures (so you dont go 1by1).

After finding the full path of the application causing the issue you can use the ""malware removal/prevention guide" from forum member John's site.

You may also want to replace Task Mangager with ProcessExplorer for a much better control of your running processes.
ProcessExplorer>>Options>>... Note that you can always restore Task Manager back.

 

[pradeep1]

Originally posted by: FLegman

Originally posted by: pradeep1

Okay, I downloaded the two. I used ProcessExplorer and it showed a fairly common set of programs running under the explorer.exe tree. I killed each and every process that was under that, excluding Avira antivirus (access denied), yet this mysterious "Downloads" program still remains.

In ProcessExplorer try to find out the path of each process under Explorer tree by opening the "properties" window then "image" tab.
Make sure each of them is a legit process/handle and hopefully you will be able to single out the troublesome instance.

Another thing : verify the digital signature of the processes (though some legit ones will fail to be authentified, Avira for exemple, but we know they ok...)
In ProcessExplorer >> Options>>Verify Images Signatures (so you dont go 1by1).

After finding the full path of the application causing the issue you can use the ""malware removal/prevention guide" from forum member John's site.

You may also want to replace Task Mangager with ProcessExplorer for a much better control of your running processes.
ProcessExplorer>>Options>>... Note that you can always restore Task Manager back.

That's just it. In ProcessExplorer, nowhere does "Downloads" come up under the explorer.exe tree. All other programs underneath the explorer.exe tree can be verified or are there because of valid programs that I installed and know about. This is the big mystery with this problem. It looks to me that task manager itself has become corrupted and is showing this wayward "Downloads" program as running the applications windows when nowhere else can I find evidence that it is.

Is there any way to fix this corrupted task manager?

I downloaded a replacement program called "System Explorer", which is essentially a beefed up task manager, and in its applications tab, there is no instance of this mysterious "Downloads" program running.

 

[FLegman]

I will go as follow :

1 replace Task Manager with ProcessExplorer and pay attention for the running & unknowned processes that are hiting on the CPU
2 launch Windows Defender (if installed, ortherwise after installation)>>Tools>>Software Explorer (or something similar)>>Categories and from the drop down menu look at both the programs that load at startup and those currently running. See if you can detect something else that is not displayed in PorcessExplorer.

If you think that Task Manager is corrupted, you can try sfc /scannow command in normal and safe boot (with command prompt) mode.

If the above don't work, try a system restore to a time when everything was ok.

Hope you will find and fix the problem (otherwise i will call the Ghost Buster Team )--)

 

[bsobel]

Taskmanager is definately not corrupt. It's reporting the names of top level windows, somewhere on that box that window exists for some reason. You possibly have a custom toolbar on your taskbar?

 

[pradeep1]

Originally posted by: bsobel
Taskmanager is definately not corrupt. It's reporting the names of top level windows, somewhere on that box that window exists for some reason. You possibly have a custom toolbar on your taskbar?

Then how do I find it and kill it?

I don't have any toolbars on the taskbar other than quicklaunch and windows search.

 

[nordloewelabs]

try AutoRuns. it will show which progs are set to load to memory when Windows boots. your Downloads process might show there.

 

[pradeep1]

I finally figured this problem out.

I first isolated the program, brought it into focus and then it up as the entire desktop within a window. I could literally drag and move my entire desktop with wallpaper and taskbar and all as a single windows, with nothing but black behind it.

But it did pop up one single "X" close button the top right hand corner. I closed it and it closed my desktop and then explorer.exe rebooted and everything is fine.

I have no idea what this was. This was the first time this happened to me.

Thank you all who have worked hard and stuck it out with me to help fix this mess.

Pradeep

 

[lxskllr]

Originally posted by: pradeep1
I finally figured this problem out.

I first isolated the program, brought it into focus and then it up as the entire desktop within a window. I could literally drag and move my entire desktop with wallpaper and taskbar and all as a single windows, with nothing but black behind it.

But it did pop up one single "X" close button the top right hand corner. I closed it and it closed my desktop and then explorer.exe rebooted and everything is fine.

I have no idea what this was. This was the first time this happened to me.

Thank you all who have worked hard and stuck it out with me to help fix this mess.

Pradeep

Well that's interesting as hell. I'm glad you figured it out, but what was it?

 

[pradeep1]

Originally posted by: lxskllr

Originally posted by: pradeep1
I finally figured this problem out.

I first isolated the program, brought it into focus and then it up as the entire desktop within a window. I could literally drag and move my entire desktop with wallpaper and taskbar and all as a single windows, with nothing but black behind it.

But it did pop up one single "X" close button the top right hand corner. I closed it and it closed my desktop and then explorer.exe rebooted and everything is fine.

I have no idea what this was. This was the first time this happened to me.

Thank you all who have worked hard and stuck it out with me to help fix this mess.

Pradeep

Well that's interesting as hell. I'm glad you figured it out, but what was it?

I have no idea. Seems like some type of error with the entire Windows desktop interface. Something must have gotten corrupted or hosed somewhere in the registry. I could not, for the life of me, find out what program was causing it. But after I did this little manuever, it resolved itself and never came back. The weird thing is that I tried to find this strange open window pointing to the "Downloads" directory on my computer and I tried and tried to bring it in to the foreground or into focus so I could close it. But on the last attempt I did, it finally came up into control. It was the weirdest thing to see your entire desktop move. I have a dual monitor setup and the entire desktop including taskbar, system tray - everything - moved in unison like it was just a facade. Behind it was nothing...no desktop, no background, nothing accessible. It was like peering into the computer abyss.

 

[nordloewelabs]

i'm curious to know what it was as well.

 

[RebateMonger]

Originally posted by: pradeep1
Behind it was nothing...no desktop, no background, nothing accessible. It was like peering into the computer abyss.

Sounds like a script for a future "Twilight Zone" episode. Or a Stephen King novella.

 

[pradeep1]

Originally posted by: RebateMonger

Originally posted by: pradeep1
Behind it was nothing...no desktop, no background, nothing accessible. It was like peering into the computer abyss.

Sounds like a script for a future "Twilight Zone" episode. Or a Stephen King novella.

I agree.