explorer.exe running more than one instance @ 90% cpu (Possible virus?)

fenixl

Reputable
Dec 24, 2014
2
0
4,510
To start with, I have been turning gpu scaling on and off on catalyst control centre to for video configurations for CS:GO and have not experienced any problem at all. However, after turning on gpu scaling last night, my game crashed (CS:GO) with an error saying "display driver stopped working.. and has recovered successfully etc.." it went straight to a BSOD. After getting the "display driver stopped working" error. I have noticed that my whole computer system slowed down by alot. I have opened task manager to check whether to see if there's a program that is using up all the cpu, and it turns out that "explorer.exe" uses at around 60%-90% of the cpu in average, and at around 1.2m memory. Now, what I have noticed is that whenever I end the process of the unstable explorer.exe, my computer suddenly started to work faster like usual. In addition, with no programs opened except task manager, I have found out that there are more than one instance of explorer.exe's. Could this be a virus or a malware that is rogued under the name explorer.exe?

Screenshot : http://imgur.com/6OGBEJ7

CPU : Intel i5-2500k (stock clockspeed/voltage)
Graphics : Asus EAH6870 (Stock speed)

I have tried using different malware removal tools such as AVG (full scan), HitmanPro, Malwarebytes, Tdsskiller and Windows defender offline. After scanning using AVG, it found atleast 3 trojans and deleted it. However, that didn't fix the problem. I tried using and running the other softwares externally, but have found nothing with the so called "explorer.exe" still using 90% of my cpu.

I am not good with computers, so please excuse my technical terms.
-f
 

gotigers

Distinguished
Dec 13, 2007
25
0
18,540
I have NEVER seen two seperate instances of explorer run under the same account. Does task manager say that both are running under the exact same account? If so that's definitely suspicious, but I'd still be slow to blame some sort of malicious software, especially if the problem started right after a driver modification.
I'd completely uninstall the video driver first, reboot, and see if your system is still slow, or just ugly now.
If not slow, reinstall with default settings.
Moving on...
If the explorer.exe is running under a different account, restart the machine and login with whatever account it's using and see if you see anything.
If it's running under the same account - right click the process in task manager and click open file location. If you're somewhere other than C:\Windows I would certainly suspect a virus.
WinKey+R, type msconfig, hit enter. select startup tab and uncheck anything that looks suspicious (note down what you de-selected), reboot and check for similar behavior. Try running a virus check after you've rebooted with diminished startup processes as well, as this may allow your AV to effectively dispose of it.. seeing as how the program is no longer locked in memory.

Good Luck
 

fenixl

Reputable
Dec 24, 2014
2
0
4,510
Hi thanks for your reply! ,

I have recently uninstalled my video driver and restarted my pc, but still no change at all. the "explorer.exe" is still consuming at atleast 5gb of memory and 70% of the cpu. In addition, I do not have any other accounts besides mine on this computer. However, looking at the task manager, the overloading explorer.exe is under my system's name. I did your suggestion which is to look at the file location of the explorer.exe, and it lead me to C:\Windows and highlighted the explorer.exe file. Tried running all the anti-virus softwares again and still found nothing. :/

UPDATE : I have noticed that the explorer.exe affects my internet connection, without any programs on except keeping the whole system on idle, according to Networx I have downloaded over 3gb of data in the past 2 hours. Ending the process of explorer.exe stops the internet consumption.
 

Latest posts