Page 1 of 5 123 ... LastLast

  1. Joined : Sep 2016
    Posts : 24
    Windows 10 64 bit Home
       15 Sep 2016 #1

    Hundreds of hidden Chrome now IE processes after installing software


    Hi, on Windows 10 x64 Home here, build 1511. Last night I installed two bits of software to allow using your own audio as output on Windows 10 (something that was easier on Windows XP) linked from this youtube video:

    Google hangout cant talk microphone text to speech solution. - YouTube

    REMOVETHIShttp://stereomixplus.com

    REMOVETHIShttp://vb-audio.pagesperso-orange.fr/Cable/index.htm

    The VB Audio virtual audio cable driver seemed relatively inoccuous but the stereomixplus (which it turned out I didn't need anyway) installed some extras, Lavasoft Adware helper, and possibly more nefarious stuff. After installing, then uninstalling stereomixplus and the lavasoft software, I was seeing multiple Chrome hidden processes running which seemed to spawn more and more. So I blocked Chrome in Kaspersky network monitor, then uninstalled as I don't actually use it. I did a scan with malwarebytes and F Secure online scan and nothing was found.

    Thinking everything was OK, I went to use Edge this morning, with just a few tabs open (on clean sites) I saw many connections in both Edge, and then in Internet Explorer hidden processes open up - increasing to over 100! Is this normal behaviour for both Chrome and Internet Explorer to launch these hidden processes? Could the Chrome processes have just been it updating itself, and the IE part of normal Edge functioning? Can anyone recommend any further scans or checks I can run to see if something is awry, thanks!!
      My System SpecsSystem Spec


  2. Joined : Sep 2016
    Posts : 24
    Windows 10 64 bit Home
       15 Sep 2016 #2

    OK, so I just restarted, and tried a different browser, but again the multiple Internet Explorer connections appeared in Kaspersky network monitor, increasing to over 200, but the processes were not listed in process explorer, so I assume they are spawn of another process.
      My System SpecsSystem Spec


  3. Joined : Jun 2015
    Posts : 262
    windows 10 pro x64 stable build
       15 Sep 2016 #3

    download zemana and let it clean up your system
      My System SpecsSystem Spec


  4. Joined : Oct 2014
    In a house with a crazy cat trying to kill me
    Posts : 11,380
    Win 7 32, Win 7 64 Pro, Win 8.1 64 Pro, Win 10 64 Education Edition
       15 Sep 2016 #4

    With all the unwanted additions to your system, your easiest option would be to do a system restore. Find your restore point & go to the 2nd or 3rd one past the point the programs were installed. I say 2nd or 3rd because some malware embeds itself into the 1st restore point available & using that 1st point sometimes doesn't get rid of the PUP's/Malware.

    System Restore Windows 10 - Windows 10 Forums

    If this is not an option for you, AdwCleaner is good at ferreting out adware. Run it as admin & quarantine everything it finds.

    AdwCleaner Download

    You may also have to reset your browsers also after the rollback/scan if the problem persists.
      My System SpecsSystem Spec


  5. Joined : Sep 2016
    Posts : 24
    Windows 10 64 bit Home
       15 Sep 2016 #5

    Thanks for both of your replies. I installed the premium trial of Zemana anti malware and it didn't find anything. I did another test, just let Windows load with process explorer open, and Kaspersky network monitor, it seems the internet explorer processes start up regardless of what I do - the servers trace to Amazon, Akamai, even Kaspersky amongst many others. They spawn to about 200 and then drop down to nothing or just two or three in 3 minutes or so. Watching process explorer it seems there may be a connection to shellexperiencehost, searchui, searchprotocolhost exes.

    I am wondering if this isn't just 'normal' behaviour for Windows 10 and the only reason I am noticing it as I am monitoring Kaspersky network monitor? As it seems those servers might be ad servers it would still be concerning as I thought I had disabled all ad stuff on Windows 10 . It would be good if someone else could keep an eye on their own network monitor to see if you get the same behaviour.
      My System SpecsSystem Spec


  6. Joined : Jun 2015
    Posts : 262
    windows 10 pro x64 stable build
       15 Sep 2016 #6

    I watched kaspersky network monitor after reboot , and I did not see amazon or akamai or kaspersky.
    I also don't see as many processes as you are talking about.
    I see a lot of onedrive and dropbox activity.
      My System SpecsSystem Spec


  7. Joined : Sep 2016
    Posts : 24
    Windows 10 64 bit Home
       15 Sep 2016 #7

    shmu26 said: View Post
    I watched kaspersky network monitor after reboot , and I did not see amazon or akamai or kaspersky.
    I also don't see as many processes as you are talking about.
    I see a lot of onedrive and dropbox activity.
    Thanks a lot for checking for me. So did you get any internet explorer processes running at all? When it does run it uses up hardly any CPU so you may need to order the process list alphabetically to spot iexplore.exe. Just to clarify, there is one process in process explorer, but up to 200 connections for that process shown in Kaspersky network monitor. It seems to take at least 8 minutes after bootup for the connections to start up.
      My System SpecsSystem Spec


  8. Joined : Jun 2015
    Posts : 262
    windows 10 pro x64 stable build
       15 Sep 2016 #8

    tacos team said: View Post
    Thanks a lot for checking for me. So did you get any internet explorer processes running at all? When it does run it uses up hardly any CPU so you may need to order the process list alphabetically to spot iexplore.exe. Just to clarify, there is one process in process explorer, but up to 200 connections for that process shown in Kaspersky network monitor. It seems to take at least 8 minutes after bootup for the connections to start up.
    I don't see any such connections in Kaspersky network monitor
    not sure what process explorer is. I am on KIS 2017 and I don't know where that monitor is located at or what it is.
      My System SpecsSystem Spec


  9. Joined : Oct 2014
    In a house with a crazy cat trying to kill me
    Posts : 11,380
    Win 7 32, Win 7 64 Pro, Win 8.1 64 Pro, Win 10 64 Education Edition
       15 Sep 2016 #9

    shmu26 said: View Post
    not sure what process explorer is.
    Process Explorer

    You can use Process Explorer to check running processes with the aid of VirusTotal.

    To do this, run the program, click on Options/VirusTotal.com/Check VirusTotal.com.

    Accept the terms, another column will appear with VirusTotal results listed.

    Ever wondered which program has a particular file or directory open? Now you can find out. Process Explorer shows you information about which handles and DLLs processes have opened or loaded.

    The Process Explorer display consists of two sub-windows. The top window always shows a list of the currently active processes, including the names of their owning accounts, whereas the information displayed in the bottom window depends on the mode that Process Explorer is in: if it is in handle mode you'll see the handles that the process selected in the top window has opened; if Process Explorer is in DLL mode you'll see the DLLs and memory-mapped files that the process has loaded. Process Explorer also has a powerful search capability that will quickly show you which processes have particular handles opened or DLLs loaded.

    The unique capabilities of Process Explorer make it useful for tracking down DLL-version problems or handle leaks, and provide insight into the way Windows and applications work.
      My System SpecsSystem Spec


  10. Joined : Sep 2016
    Posts : 24
    Windows 10 64 bit Home
       15 Sep 2016 #10

    shmu26 said: View Post
    I don't see any such connections in Kaspersky network monitor
    not sure what process explorer is. I am on KIS 2017 and I don't know where that monitor is located at or what it is.
    It's basically a more advanced task manager, I have to say I didn't know about the virustotal option so thanks for that Borg. Regarding Network Monitor - do you have any data usage for internet explorer listed on the network traffic list (assuming you don't use for browsing)?
      My System SpecsSystem Spec


 
Page 1 of 5 123 ... LastLast


Similar Threads
Thread Forum
W10 64-bit installing 32-bit software by default?
Hi there, I have upgraded my W7 64-bit to W10-64bit some time ago and been testing W10 since then. I had some random crashes and BSODs which I could not find the reason why as my W7 was running pristine. Last week I had a crash for Visual...
Software and Apps
BSOD when installing software
Hello, Recently i upgraded my windows 8 laptop to windows 10. Now when i want to install vmware player 7 i get a BSOD. When i look at the dump files i see only the ntoskernel marked red. How can i fix this. I have added the zip file as in...
BSOD Crashes and Debugging
Chrome keeps freezing since installing W10
My Chrome has been acting, really, really weird since I updated to W10 a few weeks ago. I've reinstalled the browser multiple times with no sign of improvement. There are NO issues on any other browser (Edge, Firefox & Opera) Let me give you a...
Browsers and Email
Anyone had issues with this software when installing Win 10?
Anyone had issues with this software when installing Win 10? Office 2007 This game - Battlefield Bad Company 2 FTP
Software and Apps
Get Windows 10: Microsoft's hidden roadmap for the biggest software up
Get Windows 10: Microsoft's hidden roadmap for the biggest software upgrade in history | ZDNet The above is a few paragraphs down into Ed Bott's article, but for me is the real purpose of letting us know what's next.
Windows 10 News
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 16:34.
Find Us
Twitter Facebook Google+



Windows 10 Forums