explorer.exe hogging 1.8gig vram...

darkconz

Member
Aug 4, 2004
69
0
0
Hi there,

My cousin right now is running Windows XP SP2 and I noticed his computer is running slower than before. I checked the taskmanager and noticed the explorer.exe is using 1.8GB of virtual memory. Can anyone please tell me the cause of this problem? I tried to end task explorer.exe but it failed to do so because of access denial.

Thanks in advance for your help.
 

ojai00

Diamond Member
Sep 29, 2001
3,291
1
81
Download and run HiJackThis to see what processes are running on your computer.
 

MagnusTheBrewer

IN MEMORIAM
Jun 19, 2004
24,135
1,594
126
OP, just so you know that pesky explorer.exe IS Windows. If you had successfully ended task on explorer, your machine would have crashed.
 

spyordie007

Diamond Member
May 28, 2001
6,229
0
0
Originally posted by: MagnusTheBrewer
OP, just so you know that pesky explorer.exe IS Windows. If you had successfully ended task on explorer, your machine would have crashed.
No, explorer.exe is the shell.

It is a Windows component but it is not in-and-of-itself the OS. You can even run 3rd party shells (no explorer.exe at all). If you kill it the default behavior is for Windows to just restart it (the machine shouldnt crash).
 

MagnusTheBrewer

IN MEMORIAM
Jun 19, 2004
24,135
1,594
126
Originally posted by: spyordie007
Originally posted by: MagnusTheBrewer
OP, just so you know that pesky explorer.exe IS Windows. If you had successfully ended task on explorer, your machine would have crashed.
No, explorer.exe is the shell.

It is a Windows component but it is not in-and-of-itself the OS. You can even run 3rd party shells (no explorer.exe at all). If you kill it the default behavior is for Windows to just restart it (the machine shouldnt crash).


Lets not get hung up on semantics. Explorer.exe is the shell but, in 30 years of building and supporting Windows machines, I have never seen a pc that didn't crash or reboot when explorer.exe is ended. As for rebooting, I call that crashing. the end result is the same.

Someone who tries to end explorer.exe to fix a problem neither Knows or cares that it is a shell as opposed to the actual operating system.

The purpose of the original post was to try and fix the memory hogging behavior not to be taught the specifics of the process of how explorer.exe interacts with the OS. My point in posting was to keep the OP from making a frustrating mistake.
 

MrChad

Lifer
Aug 22, 2001
13,507
3
81
Originally posted by: spyordie007
the system doesnt restart, just the explorer.exe process

I agree. I've seen the explorer.exe process crash before, usually Windows automatically restarts it. If not, it can be manually restarted from Task Manager.
 

MagnusTheBrewer

IN MEMORIAM
Jun 19, 2004
24,135
1,594
126
Originally posted by: spyordie007
the system doesnt restart, just the explorer.exe process


I say again, the PRACTICAL net effect of explorer.exe restarting, the system restarting and or crashing is the same. You must either wait or have the knowledge to manually restart the shell. NONE of which helps the OP with their problem.

If you wish to teach the fine points of error handling in the Windows OS you are preaching to the choir and that is not what the OP asked for.

My point was to keep the OP from a frustrating mistake and perhaps I took too many short cuts. I would be happy to clarify that to the OP if asked.

Your posts have no value other than to promote a need for geek trivia which I would be happy to participate in with you in the proper forum with more than your ego at stake.
 

spyordie007

Diamond Member
May 28, 2001
6,229
0
0
I say again, the PRACTICAL net effect of explorer.exe restarting, the system restarting and or crashing is the same. You must either wait or have the knowledge to manually restart the shell. NONE of which helps the OP with their problem.
This is the AT OS forum, typically if information is posted that is not technically correct members will point out the correct information to clarify. This is usually a good thing because it helps keep us on our toes and makes us think twice before posting.

The likely root of OP?s issue was pointed out in the first response, which was made by me. If you want to argue the worth of posts on this thread than I shouldn?t be your target.

If the shell process is killed it will automatically restart itself, the duration for this to occur is typically less than 10 seconds. When the shell is killed on a system that is running properly it will not ?crash your machine?. This is an important clarification to make because by telling them that it will cause the machine to crash you lead them to believe that they cause more damage by doing so, this is simply not true.

The net result and information for the OP is the same.
1. The machine is likely infected
2. The OP would not have caused serious damage were he able to kill the explorer.exe process like originally attempted; in fact I would not consider it an unreasonable thing to try.

The reason I say it wouldn?t be an unreasonable thing to try is if it were the explorer.exe process that was spawned under the user context of their account when they logged in and some legitimate shell plug-in ran away (i.e. something that renders special icons, etc.) it would have cleared out that memory and then explorer would have restarted with a much more reasonable load.

Also FYI if he able to see process information than he?s probably logged in as an administrator; however if he is unable to stop it than the process is probably running under local system security context (which the ?real? explorer.exe shouldn?t be doing). Odds are good that the explorer.exe he saw on the list is something else masquerading as the shell.

His failed attempt to stop explorer.exe (with the access denied error) is simply another likely indicator that the machine has been infected.

Obviously I?ve made some assumptions here, my first post was not designed as the end-all-be-all solution; merely a suggestion of a path to follow.

BTW - Windows has only been around a little over 20 years and AFAIK the explorer.exe shell didn?t get created until about 12 ago.
 

ktwebb

Platinum Member
Nov 20, 1999
2,488
1
0
If there is a memory leak with explorer.exe or if there is malware that is causing the problem. open Task manager. End explorer.exe. NO NEED to reboot the machine. Within task manager, hit File, then New Task (Run) and type explorer.exe and enter. Many or even all may know this but as a clarification, you do not NEED to reboot the machine when stopping the shell executable, explorer.exe. Explorer will dump when you restart it and you can begin to troubleshoot what is going on. Assumably with a virus or spyware scanner as a first step. HiJackThis etc...

This all assuming your able to stop the process. Instead of a malware issue that sounds more like an administrative rights issue to be though I could see it being both generally. Just more likely IMO to be a permissions problem.
 

MagnusTheBrewer

IN MEMORIAM
Jun 19, 2004
24,135
1,594
126
Obviously we all make assumptions. Mine has already been made.

While windows has only been around 20 years or so, I have built and supported systems since the 8088 days. For further clarification for you literal ninnies, I tend to use Windows when referring to operating systems in a general way because that is what most people are familiar with.

 

SunSamurai

Diamond Member
Jan 16, 2005
3,914
0
0
Originally posted by: MagnusTheBrewer
Originally posted by: spyordie007
the system doesnt restart, just the explorer.exe process


I say again, the PRACTICAL net effect of explorer.exe restarting, the system restarting and or crashing is the same. You must either wait or have the knowledge to manually restart the shell. NONE of which helps the OP with their problem.

If you wish to teach the fine points of error handling in the Windows OS you are preaching to the choir and that is not what the OP asked for.

My point was to keep the OP from a frustrating mistake and perhaps I took too many short cuts. I would be happy to clarify that to the OP if asked.

Your posts have no value other than to promote a need for geek trivia which I would be happy to participate in with you in the proper forum with more than your ego at stake.

You're an idiot. lol
 

SunSamurai

Diamond Member
Jan 16, 2005
3,914
0
0
Originally posted by: MagnusTheBrewer
Obviously we all make assumptions. Mine has already been made.

While windows has only been around 20 years or so, I have built and supported systems since the 8088 days. For further clarification for you literal ninnies, I tend to use Windows when referring to operating systems in a general way because that is what most people are familiar with.

lmao.. the forum clown strikes again? After 30 years of your "support" you still think a process re-opening means a computer restart/crash. Youre a fool. No tech about it, youre wrong, dont be a bitch about it.
 

gwag

Senior member
Feb 25, 2004
608
0
0
yup I kill explorer.exe all the time and it still comes back.........
 
Apr 17, 2005
13,465
3
81
Originally posted by: gwag
yup I kill explorer.exe all the time and it still comes back.........

yeah and the other programs are still open (firefox, itunes, etc...)

Idont know what that clown with "30 years" experience is talking about
 

Noema

Platinum Member
Feb 15, 2005
2,974
0
0
Originally posted by: Inspector Jihad
Originally posted by: gwag
yup I kill explorer.exe all the time and it still comes back.........

yeah and the other programs are still open (firefox, itunes, etc...)

Idont know what that clown with "30 years" experience is talking about


Heck, sometimes explorer.exe crashes while I'm running 5 apps and listening to music in WMP and the music doesn't even stop playing. Explorer.exe usually pops back in a matter of seconds and nothing else crashes.
 

Brazen

Diamond Member
Jul 14, 2000
4,259
0
0
Same here, I've had explorer die and it just comes back on it's own with all my running programs still in the taskbar, and my music doesn't even skip a beat.
 

gsellis

Diamond Member
Dec 4, 2003
6,061
0
0
Originally posted by: MagnusTheBrewer
Obviously we all make assumptions. Mine has already been made.

While windows has only been around 20 years or so, I have built and supported systems since the 8088 days. For further clarification for you literal ninnies, I tend to use Windows when referring to operating systems in a general way because that is what most people are familiar with.
8088 was 1981.

 

TGS

Golden Member
May 3, 2005
1,849
0
0
Actually when referring to Windows type systems, I usually hear it as Open Systems. You should be able to kill the explorer process as well. When a machine hangs on the desktop, I typically try that as the first response to getting control back. Sometimes explorer restarts on it's own. Though more often than not, I have to kill the process and manually restart.

Have you tried doing any of this in safe mode?
 
sale-70-410-exam    | Exam-200-125-pdf    | we-sale-70-410-exam    | hot-sale-70-410-exam    | Latest-exam-700-603-Dumps    | Dumps-98-363-exams-date    | Certs-200-125-date    | Dumps-300-075-exams-date    | hot-sale-book-C8010-726-book    | Hot-Sale-200-310-Exam    | Exam-Description-200-310-dumps?    | hot-sale-book-200-125-book    | Latest-Updated-300-209-Exam    | Dumps-210-260-exams-date    | Download-200-125-Exam-PDF    | Exam-Description-300-101-dumps    | Certs-300-101-date    | Hot-Sale-300-075-Exam    | Latest-exam-200-125-Dumps    | Exam-Description-200-125-dumps    | Latest-Updated-300-075-Exam    | hot-sale-book-210-260-book    | Dumps-200-901-exams-date    | Certs-200-901-date    | Latest-exam-1Z0-062-Dumps    | Hot-Sale-1Z0-062-Exam    | Certs-CSSLP-date    | 100%-Pass-70-383-Exams    | Latest-JN0-360-real-exam-questions    | 100%-Pass-4A0-100-Real-Exam-Questions    | Dumps-300-135-exams-date    | Passed-200-105-Tech-Exams    | Latest-Updated-200-310-Exam    | Download-300-070-Exam-PDF    | Hot-Sale-JN0-360-Exam    | 100%-Pass-JN0-360-Exams    | 100%-Pass-JN0-360-Real-Exam-Questions    | Dumps-JN0-360-exams-date    | Exam-Description-1Z0-876-dumps    | Latest-exam-1Z0-876-Dumps    | Dumps-HPE0-Y53-exams-date    | 2017-Latest-HPE0-Y53-Exam    | 100%-Pass-HPE0-Y53-Real-Exam-Questions    | Pass-4A0-100-Exam    | Latest-4A0-100-Questions    | Dumps-98-365-exams-date    | 2017-Latest-98-365-Exam    | 100%-Pass-VCS-254-Exams    | 2017-Latest-VCS-273-Exam    | Dumps-200-355-exams-date    | 2017-Latest-300-320-Exam    | Pass-300-101-Exam    | 100%-Pass-300-115-Exams    |
http://www.portvapes.co.uk/    | http://www.portvapes.co.uk/    |