Why does Spybot View my screen

Hm. I'm not so sure about that *scratches head.

I opened "My Documents" and there was no change in my Task Manager. Even with no Windows Explorer open, "explorer.exe" was still active.

I recall that should you "kill" the explorer.exe process, then you'll lose your desktop and all the items associated with it. I do not mean literally, but it will be restored with a reboot.

Sittoka, do you have "Explorer.EXE" running?
 
*goes into corner and cries* what a drrag..... :eek:

I wouldn't imagine there's too much difference between E and e, but it's always best to check out things (try googling the filename/following the links provided; i think it's more important to check the location, size, etc.) - Chris

Edit: after killing explorer.exe i think you can also restart it on it's own, using START+R, which will bring up the run prompt, then type explorer/explorer.exe
 
Last edited:
I'm a drag, Chris?!

Crying in the corner should do you good sir.

Google engine searches are not case sensitive. I've tried it. As long you don't see explorer.exe or Explorer.EXE taking up 100% of the CPU then there shouldn't be a problem.
 
Explorer.EXE

Here's the details:

Created 02 January 2003
Date modified: 14 April 2008
size: 0.98Mb
Version: 6.0.2900.5512

All seems well except when I look at the file in the windows folder, it shows as explorer.exe

I may be splitting hairs but all the other applications I have seem to have the extension exe not EXE and this just makes me think this has been modified in some way.

By the way what did I miss, who was crying in da corner and why?

Sirtokalott of the round table is always here to help!!
 
Explorer.EXE

Sirtokalott said:
Here's the details:

Created 02 January 2003
Date modified: 14 April 2008
size: 0.98Mb
Version: 6.0.2900.5512

All seems well except when I look at the file in the windows folder, it shows as explorer.exe

I may be splitting hairs but all the other applications I have seem to have the extension exe not EXE and this just makes me think this has been modified in some way.

By the way what did I miss, who was crying in da corner and why?

Sirtokalott of the round table is always here to help!!
Click to expand...


P.S. I just terminated the process and it didn't make a blind bit of difference everything works fine.
 
Explorer.EXE

Well Donald Duck me, after I terminated Explorer.EXE a new process appeared.

Can you guess what it was called?

explorer.exe

Any ideas people?
 
Hi Sirtokalott,
Here: http://support.microsoft.com/kb/888162 microsoft also reference Explorer.EXE, just trying to find the size of the file so you can rest assured (don't think there's any problem really)

I was crying in the corner because drrag will always beat me :( (joking :P) - Chris

Edit: "it's 1.032.192 bytes on a fully up to date xp, that's about 1008kb, file hash: A0732187050030AE399B241436565E64
On xp sp2, with no patches, the file size is 1.000.960 bytes, 977 KB, file hash 5A26FC6010886D25B3E412493DD95ED8
The xp file size differs depending on what patches you have on the pc and on the language."
977kB = 0.98 mB. info from http://forum.kaspersky.com/lofiversion/index.php/t42634.html
 
Last edited:
ChrisWarFi said:
I was crying in the corner because drrag will always beat me :( (joking :P) - Chris
Click to expand...

Not always, we're both climbing the same ladder. ; )

Sirtokalott, does "Explorer.EXE" come back on the Task Manager after a reboot?

On a clean PC, my Windows XP Home does not seem to show Explorer.EXE running as a task. How about you Chris?
 
*looks to the skies* the same ladder... but a long distance :P
I have vista, but it shows explorer.exe. Just a thought, if a startup file wrote ExPlOrEr.ExE instead of explorer.exe, how would the name be displayed? The 'actual' filename or the referred name? - Chris
 
In other words... we started on the same road.
If your Vista shows "explorer.exe" then you are fine.

It would be unusual for a start-up entry named "explorer.exe".

However, if a start-up process was name, for example, cTfMON.eXE, then after a boot, cTfMON.eXE would be seen running in the Task Manager. Problem is that when you search in a search engine, it is not case sensitive. If it was then it would make searching a lot more tedious for many other people, but easier for us ;0. Maybe?

Chris=Last place.
drragostea=Champ. Lols.
 
Mmm, looks like you're right drrag, spybot doesn't -modify- the hosts file, but windows defender detects it as such:
Resumo:
Alteração de Configuração do Sistema.
(Alteration of the system configuration.)

Mmm, then it's probably just a case of an old filename style (weren't they commonly written like that a long time ago? Or am I just clutching at straws?)

Maybe an option for case-sensitive searching? Imagine the resourcehog!! Strange but I think i saw an option for this the other day, in an academic search.... or maybe i'm losing (more of?) my mind! :) - Chris
 
If Windows Defender detects such change, eg. HOSTS FILE, then it would be better to allow it. Thing is that if you did not immunize, and there was a change in the HOSTS file it would be better to deny it.

I have WinPatrol '08+ to alert me of that change. So Scotty alerts me everytime I immunize. Well it looks like entries are being added to the HOSTS file after every immunize.
 
You must log in or register to reply here.
Back
Top