Random setup.exe running using most CPU

elektra

3 times in as many weeks the PC has ground to a standstill and when opening task manager it showed a 'setup.exe' hogging CPU.

Is there anyway to find out what product it relates to ? I had not initiated an install.

At the time I had 3 chrome tabs open , 1 running BBC Iplayer. Slowdown became apparent when tv pic froze but sound continued.

Last 2 times it happened I would have had a few chrome tabs open , not sure about Iplayer.

Have done a Malawarebytes scan, SAS and Avast.

robmar0se

The problem here is that your problem is intermittant. And unless someone has seen the same problem before it may come down to a process of elimination.

I don't use Chrome, some here maybe able to advise how to stop any plug-ins that me be impacting things. Have you got the latest versions of Java, Flash (if not then update these to latest versions, eg Jave 7)? Is it one of these trying to load/update?

I would try a couple of things: (i) use MSconfig to stop all startup programs & non-MS services - then if the problem goes away you van by a process of elimination find out what may be causung this.

Another thing to try is to use a different browser for a time, if the problem re-occurs you know it isn't Chrome.

RussJK

In Task Manager, you should be able to Right Click on the 'setup.exe' process and select 'Properties' for more information.

At the very least, the 'General' tab will give information such as what Location (or Path) it's running from, Created date, etc. In the 'Details' tab it might say who made the file or give clues to what it's for. If there's a 'Digital Signatures' tab, it'll show who has signed the program.

Another way is to change the View > Select Columns in Task Manager, and add the 'command line' column - this will permanently allow you to see the path that processes are running from (this is necessary to see what DLLs are running under a rundll32.exe process for example.)

There are more powerful task managers that can tell you more e.g. Process Explorer, Process Hacker, even Killswitch - but the default Windows Task Manager can do more than most people realise and should be enough for what you need.

elektra

Thanks to you both for replies.

RussJK

Unfortunately in my version of Windows(XP) the task manager does not have those options.

I'll have a look at the other task managers you mention so I'm prepared next time. Although it has not happened a lot I would still like to know what it is.

RussJK

Yes, the XP task manager is more limited - those features are only for Vista and Windows 7. At least you know what can be done, so it'll make more sense if you try another task manager.

In that case, I'd go with Process Explorer
http://technet.microsoft.com/en-us/sysinternals/bb896653

The useful columns will be: Description, Company Name, Command Line, Image Path, Version, Verified Signer. You can add any you want or need using the method mentioned, View > Select Columns (also right clicking on the column). It's a dodgy sign if software running doesn't at least have a Version information, and most software these days should be signed.

Right clicking on a specific process will give more information.

In Options, I always make sure 'Verify Image Signatures' is checked, otherwise you have to do this yourself manually. Essentially it checks that any digital signatures are legitimate, and haven't been revoked (e.g. in cases where malware authors have stolen digital signatures).

elektra

Thanks, have downloaded and played with Process Explorer, and set the options you suggested.

It has much more info than standard task manager.

I learn something new everyday!