Could this be malware?


Recommended Posts

So being that you have reinstalled and are still having issues, can you drill into process explorer and see what the actual issue is?

 

I mean, we can take a bigger gun to it and just tell you to replace the system, there is always that option.  

 

I am not trying to be a jerk, but we haven't identified actual root cause...just something with explorer.exe is causing the issue.  Need to dig deeper.  It could be a driver or some other software (intel, crucial, etc) that is causing the issue.  The shot gun approach didn't fix this time.  We can attack it with a bigger gun and put the system out of its misery, or take out the scalpel and perform some surgery to remove the cancer.

1 hour ago, devnulllore said:

Ok, I just did another fresh install from a new 1903 build install disc. WInver says version 1903 (OS Build 18962.1000) I will let you know how it works.

Yes as Adrenalyn said that's an insider build so I have no idea what you're doing here. You mentioned in a previous thread that you keep getting upgraded to the Insider builds. What are you actually doing after you install Windows?

3 minutes ago, devnulllore said:

Downloaded and burned the ISO file

I find that most bizarre. Would you be able to put the DVD you burned and run the following command:

 

 dism /Get-WimInfo /WimFile:G:\sources\install.wim /index:1

 

Change G:\ to whatever your DVD drive letter is, then post the output of this command here. It may help to see if this is happening pre or post installation.

7 minutes ago, Vince800 said:

I find that most bizarre. Would you be able to put the DVD you burned and run the following command:

 

 dism /Get-WimInfo /WimFile:G:\sources\install.wim /index:1

 

Change G:\ to whatever your DVD drive letter is, then post the output of this command here. It may help to see if this is happening pre or post installation.

C:\WINDOWS\system32>dism /Get-WimInfo /WimFile:H:\sources\install.wim /index:1

Deployment Image Servicing and Management tool
Version: 10.0.18362.1


Error: 2

The system cannot find the file specified.

The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log

 

There is no install.wim file only boot.wim

 

31 minutes ago, devnulllore said:

C:\WINDOWS\system32>dism /Get-WimInfo /WimFile:H:\sources\install.wim /index:1

Deployment Image Servicing and Management tool
Version: 10.0.18362.1


Error: 2

The system cannot find the file specified.

The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log

 

There is no install.wim file only boot.wim

 

Ah it may be an .esd file.

 

dism /Get-WimInfo /WimFile:H:\sources\install.esd /index:1

29 minutes ago, Vince800 said:

Ah it may be an .esd file.

 

dism /Get-WimInfo /WimFile:H:\sources\install.esd /index:1

Deployment Image Servicing and Management tool
Version: 10.0.18362.1

Details for image : H:\sources\install.esd

Index : 1
Name : Microsoft Windows PE (x64)
Description : Microsoft Windows PE (x64)
Size : 1,692,329,773 bytes
WIM Bootable : No
Architecture : x64
Hal : <undefined>
Version : 10.0.18362
ServicePack Build : 239
ServicePack Level : 0
Edition : WindowsPE
Installation : WindowsPE
ProductType : WinNT
ProductSuite :
System Root : WINDOWS
Directories : 3704
Files : 16232
Created : 3/19/2019 - 12:10:55 AM
Modified : 8/20/2019 - 1:09:55 PM
Languages :
        en-US (Default)

The operation completed successfully.

25 minutes ago, devnulllore said:

Deployment Image Servicing and Management tool
Version: 10.0.18362.1

Details for image : H:\sources\install.esd

Index : 1
Name : Microsoft Windows PE (x64)
Description : Microsoft Windows PE (x64)
Size : 1,692,329,773 bytes
WIM Bootable : No
Architecture : x64
Hal : <undefined>
Version : 10.0.18362
ServicePack Build : 239
ServicePack Level : 0
Edition : WindowsPE
Installation : WindowsPE
ProductType : WinNT
ProductSuite :
System Root : WINDOWS
Directories : 3704
Files : 16232
Created : 3/19/2019 - 12:10:55 AM
Modified : 8/20/2019 - 1:09:55 PM
Languages :
        en-US (Default)

The operation completed successfully.

So the update must be happening after installation. Do you sign in with a local or Microsoft account. I'm just wondering if you're signing in with a Microsoft account in the Insider programme on a machine which doens't have a valid license for some strange reason.

5 minutes ago, SnoopZ said:

Sounds like you have previously signed up to the Insider buiilds which probably means it will update to the latest Insider build?

That shouldn't trigger an automatic update to the Insider programme without any manual intervention though.

 

To answer the actual question though, it's not malware.

4 minutes ago, Vince800 said:

That shouldn't trigger an automatic update to the Insider programme without any manual intervention though.

 

To answer the actual question though, it's not malware.

correct; from all my personal re-installs I've never seen the insider builds enable themselves; If I want to use insider builds again I have to enable it manually in settings as always.

 

I have no idea why it keeps forcing OP onto insider builds; I'd recommend OP reach out to Microsoft Support at this point to determine why that particular thing keeps happening.

36 minutes ago, Riggers said:

Any errors in Event Viewer directly after it happening?

correct, check the event viewer and look at the log entry for the application crash explorer.exe

 

I've seen it before were the onboard audio driver was killing explorer. It may have a dll or sys file in log entry telling you which file killed it.

Ok, I did the only thing I can think of and did a new fresh install off the new disc and checked the winver immediately it reads version 1903 (OS Build 18362.295)

 

I found where to enable the insider program and it was enabled by default so I turned it off.

 

So I will monitor with process explorer and see if it happens again. Any other suggestions?

1 hour ago, devnulllore said:

Ok, I did the only thing I can think of and did a new fresh install off the new disc and checked the winver immediately it reads version 1903 (OS Build 18362.295)

 

I found where to enable the insider program and it was enabled by default so I turned it off.

 

So I will monitor with process explorer and see if it happens again. Any other suggestions?

If you can get it to happen consistently, can you try recording it happen? Would be interesting to see what it is, if it's some sort of GPU window re-draw or if it's actually explorer reloading.

 

Are you restoring multiple files (images, documents, etc) when you complete an install?
Do all folders have this issue or is it only ones with many files?
If you have multiple monitors, does it happen on only one of them?
Do you have any devices plugged in (webcam, microphone, external hdd)? 
Have you tried googling the issue (possibly other forums, youtube, etc)?

On 8/20/2019 at 4:23 PM, Vince800 said:

So the update must be happening after installation. Do you sign in with a local or Microsoft account. I'm just wondering if you're signing in with a Microsoft account in the Insider programme on a machine which doens't have a valid license for some strange reason.

Yes I am logging into my Microsoft Account. Mi licence is valid as far as I know. The registration is in my bios.

Just now, SnoopZ said:

Has it happened again since you stopped it downloading an insider build?

The lag, yes but Explorer has not crashed since I got rid of the insiders build.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • UK funds £60M AI labs to challenge US tech dominance with open-source models by Paul Hill The UK government has awarded £60 million to Oxford University and University College London to help keep the country in the AI race by focusing on open-source, low-hardware alternatives. This is in stark contrast to the expensive, closed-source, and high-hardware-requirement models being created in the United States and elsewhere. The money will be shared among two new academic research labs over six years to help them redesign the fundamental mathematics and architectures of AI to help the UK reduce its reliance on a handful of US tech firms. Commenting on the development, AI Minister Kanishka Narayan said: Initially, the government planned to fund just one lab with a £40 million investment, but with this update, two labs will now get access to a larger pool of funds. The labs are expected to invest in the top AI researchers at every career stage, with £2 million per lab being set aside for hiring at least ten doctoral students. The government hopes that this will grow the UK’s talent in the field of AI. The labs are also expected to work closely with the leaders in British AI research, such as the Alan Turing Institute and UKRI’s AI research hubs. This will allow the various teams to collaborate and create new solutions faster than they could alone. This development is pretty interesting for a number of reasons, chiefly that it could create a long-term challenge for US tech firms if these labs successfully scale these open-source architectures that bypass the proprietary ecosystems. It could also give British businesses and public sector organizations access to AI features without paying high licensing fees to foreign providers or needing to invest in specialized server infrastructure.
    • If I were them, I'm gonna hold out until the prices of these semiconductor parts normalize. $1,049 for a ~5 year old hardware is DoA, more so for gamers. On a deeper note, if Steam Machine is priced like this, we are soo effed up for the next gen Xbox console and PS6. With great AAA titles releasing at the end of the year, this just creates more demand...and more tears for me. Lol.
    • I suspect one reason its hard to justify subsidising is that it's not a locked down device like a traditional console is. In this climate sadly if it was a "good deal" you'd get people hoarding them for anything but gaming. The Lenovo Legion Go 2 with the Ryzen Z2 Extreme is £1300 here ($1720) for some context on how other SteamOS like devices are now priced. I got the older Z1 Extreme model for £300 with a dock, just shows how insane prices have got recently.
    • If you have an account with any of Meta's services, you technically have an account with all of their services. You may not use it, but it exists.
  • Recent Achievements

    • One Month Later
      nates earned a badge
      One Month Later
    • Week One Done
      Almohandis earned a badge
      Week One Done
    • Rookie
      dorf went up a rank
      Rookie
    • First Post
      mike_rumble earned a badge
      First Post
    • Dedicated
      tuben earned a badge
      Dedicated
  • Popular Contributors

    1. 1
      +primortal
      469
    2. 2
      +Edouard
      185
    3. 3
      PsYcHoKiLLa
      93
    4. 4
      Michael Scrip
      87
    5. 5
      neufuse
      67
  • Tell a friend

    Love Neowin? Tell a friend!