What is Reddit's opinion of SystemExplorer?

From 3.5 billion Reddit comments

It gives you a download for a file that is named "Sound Plugin.exe", which some people will fail to recognize as a threat and execute.

In fact it is a 7zip self extracting archive, containing 2 files (obfuscated javascript and a visual basic script (that just pops up a message box saying "This program cannot be run in this OS")).

These two scripts get autoexecuted upon succesful extraction.

The beefy part is the obfuscated javascript. It would take me some time to decypher that one, but I see it may be getting some data from web server and execute them.

Edit: It downloads a few files. One of them is this 'https://www.myflare.com/0/io/hotlink/_nG281JOEeWxaAICrBEAbg/arhiv'. Password protected file containing some dll files and executables in systemx64 directory. I think I could find the password in the scripts, but I don't know if it is worth the trouble.

Edit2: The password is "BOSSLOVEMONEY" for anyone that would like to look inside, but you better know what you are doing!

Edit3: still interested? The code in the archive is some kind of exploit that connects to a server (some chinese-registered domain pudgenormpers.com) that probably gives it commands. Seeing that, I won't dig any further.

Edit4: Looking at the client32.exe binary, it seems to be this: http://systemexplorer.net/file-database/file/client32-exe/24839247

Not sure if it works on Windows XP, as that OS is outdated and insecure, but System Explorer has a view that shows processes starting, closing, opened and closed TCP/IP connections and and high CPU usage. That list is limited to 1000 entries by default, but that limit can be lifted and there is also an option to save the log to a file.

Some tips to try boost performance on laptop:

• Make sure your laptop is using your nvidia graphics processor by default and not the integrated graphics (check your nvidia control panel)
• On nvidia control panel, manage 3D settings and add the Escape From Tarkov alpha .exe file and make sure to set the power management mode to be "Prefer Maximum Performance"
• Download System Explorer and run Escape From Tarkov, alt+tab back to desktop, open System Explorer, right click the EFT .exe file and set the process priority to High. Right click again and click permanent so that it will always be high when you boot the game.
• Download Unpark CPU and run it to unpark your CPU cores.

Just some general tips for anyone, even with a Desktop can use to try get better performance out of any game.

To be sure, read Reddits virus removal thread MalwareBytes is currently the favourite scanning/removal tool.

Yep - sounds like a stuck key indeed.

The other thing you could try is installing System Explorer This adds a small icon to your systray that looks like a monitor with a green performance graph on it.

Leave your mosue floating over the icon, and let the computer idle until it hits 100% When the CPU starts to rocket, the process eating up all your system should be listed there by filename

Google that file name and see whats found.

Do you have any sort of CPU or graphics card monitoring software (ATI/Nvidia)? I'm wondering do you have overheating issues since this started in the middle of a game when the CPU/GPU load is usually at it's highest.

Sounds like too many background processes could be running while you're trying to play the games.

Run them at minimum graphical settings, just for a short time, to see if there is any freezing still. If there isn't, I'm guessing that you have too much running in the background, and then the games are pushing your computer even harder at Max.

A good tool to use to determine how many background services/processes are running is System Explorer. http://systemexplorer.net/

Let me know what you think of my advice, and don't be afraid to ask me any further questions!

> Sysinternals Process Explorer

I used that for a bit but ended up switching to System Explorer. So far, I think I prefer System Explorer. But I'm not a game programmer or software developer, so maybe that's contributing to my preference.

Some tips:

• Install it on an SSD if you have it

• Make sure to unpark all your CPUs, you can use this to do so - http://www.coderbag.com/programming-c/disable-cpu-core-parking-utility

• Download System Explorer, it's a program that can allow you to permanently set .exe processes to always be high. (Right click Dayz's exe when running, set process priority to High, right click exe again and check "Permanent")

• Go onto your nVidia Control panel and add DayZ's exe, set the Power Management Mode to "Prefer Maximum Performance"

• Check in your nVidia Control Panel that your graphics processor is set to your nVidia graphics by default and not your integrated graphics

Unfortunately I don't think there is anything to do this built into Windows. Some software like system explorer can do it but you can also create shortcuts that will launch it with a specific priority

Okay, that crash seems to be happening in something called qipcap.dll, which appears to be from something called "Websense Data Endpoint". Uninstalling that should stop the crashes.

According to this page on SystemExplorer.net, nvStreamService.exe is a service associated with NVIDIA, which is a company known for making graphics cards.

Do you happen to have an NVIDIA graphics card? If so, I would be willing to venture a guess that this has something to do with your graphics card and its drivers.

However, if you don't, or if you are concerned that your computer may be infected with malicious files or programs, I would recommend that you run both another antivirus scan and antimalware scan, just to be safe. Running the scans in Safe Mode or Safe Mode with Networking is also something you may want to try, as in some cases this can help make viruses and other malicious files and programs easier to detect.

Additionally, I would also recommend that you run a scan with CCleaner, a free program by Piriform that can be used to scan for potentially unwanted programs (PUPs) and temporary files that you may not need, as well as enable you to view and configure Startup programs, among other features.

http://Piriform.com/ccleaner

Best of luck and I hope I helped you!

> rkcl.exe

http://systemexplorer.net/file-database/file/rkcl-exe

This lists the file as having been discovered yesterday, so whatever it is seems recent. There's no corporate signature or stuff, so who knows what it comes from?

If you want to be sure about the process who take/steal CPU time use http://systemexplorer.net/ to clearly see when you move your mouse what is the process that use CPU time... http://systemexplorer.net/onlinehelp.php?t=processes

Let me know after that I will be more able to help you to resolve it !

Your best chance is to find some task manager alternative. I just tried this one (I downloaded the portable version) and it has it.

Weirdly enough, Process Explorer (the best one around) doesn't seem to have that column.

Hello,

Have you tried using a program like Microsoft Sysinternals Process Explorer, Mister Group's System Explorer or ESET's SysInspector to actually see how the various processes on the computer are using its memory?

Regards,

Aryeh Goretsky

Download System Explorer from: http://systemexplorer.net/. When you install it make sure you uncheck "run at startup".

This program will show you what is running, let you do "security checks" to see if they are valid processes/programs.

Use the program to root out any programs that seem fishy. Since this isn't the built in windows task manager, the virus/malware shouldn't slow down when you have this running. Currently the "Security Scan" and the "Security Check" don't seem to be working. Possible the website is under maintenance at this time.

even easier: just use this http://systemexplorer.net/

its a really nice tool, much better than task manager, and can filter processes with search bar, also shows the cmd the process was launched with

I'd also recommend System Explorer( System Explorer - Keep Your System Under Control )* process manager and setting the priority to High and set to permanent. This can be achieved by going to task manager, go to the "Details" tab, select the application and right-click and set priority to "high". This can help some people with framerate issues.

* I do realize the site is not secure but I have not had a problem with this software at all.

Better course of action:

Create a gaming user profile in which you trim down autostarts and per-user services;

Use a task manager that keeps permanent process priority such as System Explorer. Run Yuzu at high priority and see if it helps, as real-time priority will probably be ruining your user experience as well as generating glitches (audio, input etc).

(Edit: System Explorer can also help you dealing with autostarts)

Sorry thought System Explorer was meant as a generic term not the software name.

Quick Google search later, and I found this: http://systemexplorer.net/onlinehelp.php?t=userinterface.

Problem is, it looks nothing like what you have. Do you have a link to the website you got it from?

Another thing you can do:

Win < 10 Prio

Win 10 System Explorer

Once you have Overwatch running use either to permanently set Overwatch.exe to be a high priority / real time process.

Also only use fullscreen mode, as recommended by Jeff himself.

If you're noticing the problem when you are playing games and watching videos, it's starting to sound more like your Graphics Card is about to go out. That's not great news, I understand, but coming from myself doing a lot of gaming on low-end hardware, I get the same experience often. I'm only basing my assumption off the idea that it sounds like your card has deteriorated to the point where it is just as bad as my intel hd integrated graphics.

However, I'm still not certain this is the reason for your problems. One thing that I believe might help you is if you downloaded System Explorer, opened the Performance tab, and kept an eye on it during these instances:

1. When Idling
2. When Playing Games
3. When Watching Videos (offline or online)

http://systemexplorer.net/

This nifty tool has helped me quite a bit in trying to figure out problems I've had with an excruciating amount of processes running in the background, and the up-to-date performance graph is incredibly useful.

It wont do that but you can get a program called System Explorer for Windows 10 and a Task Manager plugin called Prio for Windows 7.

I believe both of those allow you to save settings for process affinity and priority.

Additionally you can run a batch script if you are looking to have just one or two programs run at a certain priority level but you'd want to look up the commands for that because batch is not my strong suit.

In the four dumps you posted the interrupt was caused by MRVW24C.sys.

This seems to be your Marvell wireless something (the wireless card I assume).

So whatever you have from them, go to their website, grab the newest driver.

Then go into the device manager, go to their Adapter/Card.

Doubleclick it and chech under the Drivers tab and there under driver details that it is MRVW24C.sys

Once you found that one and got the driver ready for a fresh install on the disk you uninstall the old one. If there is a box that says "delete from this computer" or something along those lines make sure you have that one selected.

Also keep uninstalling until all version of the driver are gone.

Then reinstall the new one.

Use "System Explorer"** look at the column "Mem Usage" just after you have rebooted your system** and look again after few hours or the next day to compare and know which program/process use abnormal amount of memory. http://i.imgur.com/4PnnS4r.png

If you don't have system Explorer download here it's free: http://systemexplorer.net/

Look at picture 3 - the P7 row in the problem signature makes a reference to "rzdspsrv".

Doing a quick Google, I see this belongs to some kind of Razer overlay software?

http://systemexplorer.net/file-database/file/rzdspsrv-dll

> Our database contains 4 different files for filename rzdspsrv.dll . This files most often belongs to product DspSrv. and were most often developed by company Razer, Inc.. This files most often have description RddUm remote process overlay module. This file is Dynamic-link Library. This library can be loaded and executed in any running process.

Do you have some kind of Razer software installed that matches this description? Can you try disabling / uninstalling it? It's extremely possible that this software is injecting something into the memory space being used by Star Citizen in order to render it's overlay, which is making the game unhappy (you don't want to end up in the middle of invalid memory).

Hello,

I would suspect a prank as opposed to actual malware, but definitely would suggest examining the system using some investigatory tools like Microsoft Sysinternals' Process Explorer, Mister Group's System Explorer, ESET's SysInspector and so forth, to see if you can locate any processes which you cannot identify as being part of the system's normal functionality.

Regards,

Aryeh Goretsky

I used System Explorer http://systemexplorer.net/. I found some ypool bitcoin mining exploits and some other stuff with it. I like the sorting/filtering and the process lookup functionality. I also like Process Explorer by sysinternals but this one is worth noting among the other two big ones (process explorer, process hacker).

I will generally use Microsoft's Resource Manager these days if I don't want to pull bits down.

Check out the Minecraft Forum link here. It looks like your issue is the same as that one, and while I can't say that I've tried their advice myself, it sounds reasonable.

Ah good find. That was a spam program that attached itself to some freeware from cnet. I uninstalled it a couple months ago but it's still hanging around in some files.

Thank-you for the heads up.

IWantThis Summary

http://systemexplorer.net/db/screenupdate.exe.html looks like it was the screensaver, this is why we disallow changing them at my work. It it may be easier to do a system restore to before "they" installed it.

Not trying to pimp it, but you should really try System Explorer as a task manager replacement, it does so much more than the manager, I don't know how they can provide it for free.