Comments on: Explorer.exe 100% CPU usage after login (webcpl.dll) http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/ computers, sex, computers, money, computers Wed, 08 Sep 2010 12:32:42 +0000 http://wordpress.org/?v=2.0.1 by: Billy Bob http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-7914 Tue, 02 Jun 2009 00:01:26 +0000 http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-7914 Thx Alot!! I HAVE BEEN LOOKING HOW TO DO THIS FOR SOOOO LONG. ^^ Big Help. Thx Alot!!
I HAVE BEEN LOOKING HOW TO DO THIS FOR SOOOO LONG.
^^ Big Help.

]]> by: Ryan http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-5382 Tue, 17 Feb 2009 14:38:49 +0000 http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-5382 I took a screenshot of the virus. http://img19.imageshack.us/my.php?image=newxt8.jpg Whenever i try to go to system32 , explorer.exe stops responding and restarts :( What should I do? I took a screenshot of the virus.
http://img19.imageshack.us/my.php?image=newxt8.jpg

Whenever i try to go to system32 , explorer.exe stops responding and restarts :(

What should I do?

]]> by: joe http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-5333 Tue, 03 Feb 2009 08:24:11 +0000 http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-5333 HI, I am fixing a computer for my girls boss. I thought I was done when all of a sudden, when I try to search via start menu or right click on start button, explorer.exe takes all cpu in taskmanager and I tracked a thread call shdocvw.dll+0xd4a29 with process explorer that is the culprit. I looked up this dll and it is a windows file? The computer is xp sp3 and this only happens when I search. Also, the taskbar is disabled and all buttons on it? If anyone has suggestions that would be great. HI, I am fixing a computer for my girls boss. I thought I was done when all of a sudden, when I try to search via start menu or right click on start button, explorer.exe takes all cpu in taskmanager and I tracked a thread call shdocvw.dll+0xd4a29 with process explorer that is the culprit. I looked up this dll and it is a windows file? The computer is xp sp3 and this only happens when I search. Also, the taskbar is disabled and all buttons on it? If anyone has suggestions that would be great.

]]> by: chuonthis http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-5272 Fri, 09 Jan 2009 21:53:00 +0000 http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-5272 Did you note the name of the culprit DLL file? If you did, it is usually at %windir%\system32 (which in most cases is C:\Windows\System32). You may have to turn on hidden files or system files to see it. (<a href="http://www.tech-recipes.com/rx/1521/how_to_view_hidden_and_system_files_and_folders_in_vista/" rel="nofollow">how to view hidden and system files and folders in vista</a>) Did you note the name of the culprit DLL file? If you did, it is usually at %windir%\system32 (which in most cases is C:\Windows\System32). You may have to turn on hidden files or system files to see it. (how to view hidden and system files and folders in vista)

]]> by: Michael http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-5271 Fri, 09 Jan 2009 21:12:15 +0000 http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-5271 Oops , I just downloaded Process Explorer , I suspended then MURDERED the thread , but how exactly do I find and delete it , it won't show up on search. Oops , I just downloaded Process Explorer , I suspended then MURDERED the thread , but how exactly do I find and delete it , it won’t show up on search.

]]> by: Michael http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-5270 Fri, 09 Jan 2009 19:53:29 +0000 http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-5270 How do I fix this on Vista?? I can't even open Process Explorer :( How do I fix this on Vista?? I can’t even open Process Explorer :(

]]> by: Zahed http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-5068 Wed, 19 Nov 2008 20:42:13 +0000 http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-5068 This will fix it: The obnoxious bug in XP that causes Explorer to read the entire contents of broken AVI files before allowing any access to them is caused by bad behavior of shmedia.dll. This problem manifests itself by causing Explorer to read the entire contents of an AVI file, regarless of its size or location any time the mouse pointer is hovered over it, or an attempt is made to access it in windows explorer. This causes 'permission denied' errors when trying to simply move, copy or delete these files as they cannot be changed while Explorer has an open handle on them. This also causes a DoS situation where large AVI's are stored on remote shares and Explorer keeps reading the files from beginning to end each time they are accessed. To correct this misbehavior in Windows XP, remove the following registry key. HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{87D62D94-71B3-4b9a-9489-5FE6850DC73E}\InProcServer32 This will prevent Explorer from loading shmedia.dll in response to file property queries on these files. This will not effect your ability to play files, get file attributes, or even view thumbnails. Say goodbye to all explorer.exe 100% CPU issues. And Solution #2 (basically does the same thing, except you are inactivating the file attributes option)...But it WORKS--No more locked .avi files: Well windows seem to have a REALLY big problem when it comes to reading AVI files. It seems that when you click on an AVI file in explorer, it'll try to read the entire AVI file to determine the width,height, etc. of the AVI file (this is displayed in the Properties window). Now the problem with Windows is that if you have a broken/not fully downloaded AVI file that doesnt contain this info, Windows will scan the entire AVI file trying to figure out all these properties which in the process will probably cause 100% CPU usage and heavy memory usage. To solve this problem all you have to do is the following: 1. Open up regedit 2. Goto HKEY_CLASSES_ROOT\SystemFileAs sociations\.avi\shellex\PropertyHandler 3. Delete the "Default" value which should be "{87D62D94-71B3-4b9a-9489-5FE6850DC73E}" Please note that this will no longer provide you with the windows properties displaying the AVI file information such as width, height, bitrate etc. But its a small price to pay for saving you resources. Source: Spywareinfo.com This will fix it:

The obnoxious bug in XP that causes Explorer to read the entire contents of broken AVI files before allowing any access to them is caused by bad behavior of shmedia.dll.

This problem manifests itself by causing Explorer to read the entire contents of an AVI file, regarless of its size or location any time the mouse pointer is hovered over it, or an attempt is made to access it in windows explorer. This causes ‘permission denied’ errors when trying to simply move, copy or delete these files as they cannot be changed while Explorer has an open handle on them.

This also causes a DoS situation where large AVI’s are stored on remote shares and Explorer keeps reading the files from beginning to end each time they are accessed.

To correct this misbehavior in Windows XP, remove the following registry key.

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{87D62D94-71B3-4b9a-9489-5FE6850DC73E}\InProcServer32

This will prevent Explorer from loading shmedia.dll in response to file property queries on these files. This will not effect your ability to play files, get file attributes, or even view thumbnails. Say goodbye to all explorer.exe 100% CPU issues.

And Solution #2 (basically does the same thing, except you are inactivating the file attributes option)…But it WORKS–No more locked .avi files:

Well windows seem to have a REALLY big problem when it comes to reading AVI files. It seems that when you click on an AVI file in explorer, it’ll try to read the entire AVI file to determine the width,height, etc. of the AVI file (this is displayed in the Properties window). Now the problem with Windows is that if you have a broken/not fully downloaded AVI file that doesnt contain this info, Windows will scan the entire AVI file trying to figure out all these properties which in the process will probably cause 100% CPU usage and heavy memory usage.

To solve this problem all you have to do is the following:

1. Open up regedit
2. Goto HKEY_CLASSES_ROOT\SystemFileAs
sociations\.avi\shellex\PropertyHandler
3. Delete the “Default” value which should be “{87D62D94-71B3-4b9a-9489-5FE6850DC73E}”

Please note that this will no longer provide you with the windows properties displaying the AVI file information such as width, height, bitrate etc. But its a small price to pay for saving you resources.

Source: Spywareinfo.com

]]> by: bob http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-3344 Thu, 13 Sep 2007 20:20:53 +0000 http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-3344 I am having an identical problem as described at the top of this page. Problem exists on multiple laptops (but not desktops) at my company. Sometimes after restarting the problem will not come back. Every time a user shuts down and turns laptop back on the problem exists -- explorer.exe is at 0-3% until you try to open my computer or windows explorer. then it just hangs at 99% I ran Process Explorer and found that BrowseUI.dll!ordinal138 is the culprit thread. Here is the stack for that thread: ntoskrnl.exe+0x48f3 ntoskrnl.exe!ZwYieldExecution+0xb0f ntdll.dll!KiFastSystemCallRet WININET.dll!InternetTimeFromSystemTimeA+0x1bbc WININET.dll!InternetCanonicalizeUrlW+0x180 SHDOCVW.dll!Ordinal174+0x2d BROWSEUI.dll!Ordinal136+0x26680 BROWSEUI.dll!Ordinal136+0x126e2 BROWSEUI.dll!Ordinal136+0x12cb0 BROWSEUI.dll!Ordinal138+0x555e BROWSEUI.dll!Ordinal138+0x5a33 BROWSEUI.dll!Ordinal136+0x1444e SHDOCVW.dll!Ordinal147+0x17ae BROWSEUI.dll!Ordinal113+0x28c9 BROWSEUI.dll!Ordinal103+0x1672 BROWSEUI.dll!Ordinal138+0x6e68 USER32.dll!GetDC+0x6d USER32.dll!GetDC+0x14f USER32.dll!DefWindowProcW+0x184 USER32.dll!CallNextHookEx+0x1a3 ntdll.dll!KiUserCallbackDispatcher+0x13 USER32.dll!CreateWindowExW+0x2a7 USER32.dll!CreateWindowExW+0x33 SHLWAPI.dll!Ordinal55+0x5f BROWSEUI.dll!Ordinal138+0x7833 BROWSEUI.dll!Ordinal138+0x7b45 kernel32.dll!GetModuleFileNameA+0x1b4 Can anyone help? -Bob I am having an identical problem as described at the top of this page. Problem exists on multiple laptops (but not desktops) at my company.

Sometimes after restarting the problem will not come back. Every time a user shuts down and turns laptop back on the problem exists — explorer.exe is at 0-3% until you try to open my computer or windows explorer. then it just hangs at 99%

I ran Process Explorer and found that BrowseUI.dll!ordinal138 is the culprit thread.

Here is the stack for that thread:

ntoskrnl.exe+0×48f3
ntoskrnl.exe!ZwYieldExecution+0xb0f
ntdll.dll!KiFastSystemCallRet
WININET.dll!InternetTimeFromSystemTimeA+0×1bbc
WININET.dll!InternetCanonicalizeUrlW+0×180
SHDOCVW.dll!Ordinal174+0×2d
BROWSEUI.dll!Ordinal136+0×26680
BROWSEUI.dll!Ordinal136+0×126e2
BROWSEUI.dll!Ordinal136+0×12cb0
BROWSEUI.dll!Ordinal138+0×555e
BROWSEUI.dll!Ordinal138+0×5a33
BROWSEUI.dll!Ordinal136+0×1444e
SHDOCVW.dll!Ordinal147+0×17ae
BROWSEUI.dll!Ordinal113+0×28c9
BROWSEUI.dll!Ordinal103+0×1672
BROWSEUI.dll!Ordinal138+0×6e68
USER32.dll!GetDC+0×6d
USER32.dll!GetDC+0×14f
USER32.dll!DefWindowProcW+0×184
USER32.dll!CallNextHookEx+0×1a3
ntdll.dll!KiUserCallbackDispatcher+0×13
USER32.dll!CreateWindowExW+0×2a7
USER32.dll!CreateWindowExW+0×33
SHLWAPI.dll!Ordinal55+0×5f
BROWSEUI.dll!Ordinal138+0×7833
BROWSEUI.dll!Ordinal138+0×7b45
kernel32.dll!GetModuleFileNameA+0×1b4

Can anyone help?
-Bob

]]> by: chuonthis http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-1916 Wed, 20 Jun 2007 05:06:38 +0000 http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-1916 Scott, if you can't find the offending executable that's holding onto the file, there are a couple of things you can try. The easiest way is probably just to boot up into safe mode and delete the file. In most cases, the file will not load in safe mode. The next easiest is to just try renaming the file. Oftentimes, you can rename an in-use file even though you can't delete it. If the file isn't recreated, then reboot and it will fail to load on the next startup since it is a different filename. Then you can delete it. Also, I found this semi-useful link on Google about the DLL: <a href="http://translate.google.com/translate?hl=en&sl=ko&u=http://ahnlab.benchbee.co.kr/ahnlab/info_virus_view.asp%3Flist%3D/ahnlab/virus_info_list.asp%26seq%3D7936&sa=X&oi=translate&resnum=3&ct=result&prev=/search%3Fq%3Dcheckweb.dll%26hl%3Den%26client%3Dfirefox-a%26rls%3Dorg.mozilla:en-US:official%26hs%3Dc7r" rel="nofollow">translated link</a> Scott, if you can’t find the offending executable that’s holding onto the file, there are a couple of things you can try. The easiest way is probably just to boot up into safe mode and delete the file. In most cases, the file will not load in safe mode. The next easiest is to just try renaming the file. Oftentimes, you can rename an in-use file even though you can’t delete it. If the file isn’t recreated, then reboot and it will fail to load on the next startup since it is a different filename. Then you can delete it.

Also, I found this semi-useful link on Google about the DLL: translated link

]]> by: Scott http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-1909 Tue, 19 Jun 2007 05:34:58 +0000 http://www.chuonthis.com/tips/2006/01/12/explorerexe-100-cpu-webcpldll/#comment-1909 Thanks for the great recommendation. Found this site after searching now that my explorer.exe is hanging out at 99% cpu usage. Ran the Process Explorer app. and when looking at properties, it ended up leading me to a file called checkweb.dll that is hidden deep within my c:\windows\system32\dllcache directory. Problem is I cant delete it! it keeps saying the file is in use or write protected. I killed it from Process Explorer and any little file assoc. with checkweb.dll (there were about 5 in the Properties tab of explorer.exe that had checkweb.dll as part of its name). Any suggestions of how to delete this from my comp so I dont have to kill it on every boot? Id love to just trash the damn thing. Thanks Thanks for the great recommendation. Found this site after searching now that my explorer.exe is hanging out at 99% cpu usage.

Ran the Process Explorer app. and when looking at properties, it ended up leading me to a file called checkweb.dll that is hidden deep within my c:\windows\system32\dllcache directory.

Problem is I cant delete it!

it keeps saying the file is in use or write protected. I killed it from Process Explorer and any little file assoc. with checkweb.dll (there were about 5 in the Properties tab of explorer.exe that had checkweb.dll as part of its name).

Any suggestions of how to delete this from my comp so I dont have to kill it on every boot?

Id love to just trash the damn thing.

Thanks

]]>