none
Vista explorer.exe sometimes a cpu load of >80% RRS feed

  • Question

  • I have Vista Home Premium fully up to date with latest SP's
    When I open windows explorer and I double click in the right pane a folder to open it, the folder is sometimes not opened, but instead I see the address bar filling up with a green color from left to right and it does not stop. In the task manager I see explorer.exe is running with a cpu load between 50 - 90%
    I cannot stop this. It comtinues even after I have closed the windows explorer window (and all other open windows).
    I can only stop this cpu by restarting my laptop.
    What could be the problem? Any suggestions
    Saturday, October 3, 2009 4:25 PM

All replies

  • Hi Herman,

    Sounds like a shell extension or some such may be interfering with explorer.exe.  Perhaps, use something like Autoruns or ShellExView to systematically disable shell extensions and the like, to see if at some point the problem goes away.

    You could use xperf to try to diagnose the problem, but in all likelihood a shell extension is the culprit.
    Saturday, October 3, 2009 7:01 PM
  • Hi No.Compromise
    Thanks for your suggestion. I downloaded ShellExView version 1.41 and it shows a list of 339 shell extension.
    Do you have a tip how to diagnose which one could cause the problem? E.g. which types of shells can be disabled to start with? E.g all non-Microsoft shells?
    Sunday, October 4, 2009 8:58 AM
  • additional info:
    The problem does not occur when I open a folder via the left folder pane. So only when I double click a folder in the right pane I have the problem
    Sunday, October 4, 2009 9:34 AM
  • Hmm, OK.

    Download and install the the Windows Performance Toolkit, and then, from an elevated CMD prompt change to the folder containing xperf.exe and execute:
     xperf -on DiagEasy+PROFILE  -stackwalk Profile 

    Then, just after reproducing the problem, run:
     xperf –d merged.etl  

    Then, ZIP merged.etl and password protect it.  Upload the ZIP file somewhere, and share the location either publicly or privately.  Share the password privately...
       (My email address can  be found in my profile...)
    Sunday, October 4, 2009 9:39 PM
  • When I run
    xperf -on DiagEasy+PROFILE   -stackwalk Profile
    I get following error

    xperf: error: NT Kernel Logger: Ongeldige vlaggen. (0x3ec).

    "Ongeldige vlaggen" is Dutch for "Invalid Flags" (I have a Dutch version of Vista Home Premium)
    Is this a problem to be solved first or should I ignore it and continue (after reproducing the problem ) with
    xperf –d merged.etl
    etc.
    Monday, October 5, 2009 5:48 PM
  • Run the xperf commands from an elevated CMD prompt (start->cmd.exe->right-click cmd.exe in the list, and choose "Run as Administrator").
    Tuesday, October 6, 2009 10:15 AM
  • Dear No.Compromise

    Thanks. I misunderstood the term elevated CMD prompt. It worked now.
    As instructed, I have send the password protected merged.zip file to you via http://www.transferbigfiles.com/
    See the message in your email box.
    I hope I did everything OK and that you will be able to diagnose the cause of the problem with is.

    Kind regards
    Herman
    Tuesday, October 6, 2009 6:02 PM
  • I'm still getting a 503: Service Unavailable from TransferBigFiles.com, when I attempt to retrieve the file.  Any chance you can upload it to e.g. Windows Live SkyDrive or some such?
    Wednesday, October 7, 2009 9:42 AM
  • Sorry for delay. I was a few days out of town.
    I have now used http://www.yousendit.com/ to send the file.
    If this also not works, I will create SkyDrive account.
    Regards Herman
    Saturday, October 10, 2009 7:45 PM
  • I got the trace and have looked at it.

    Seems that mpegin.dll (a part of "MainConcept® MPEG File Decoder"?) is the cause of the high CPU usage.  Can you uninstall this software, or perhaps disabled the shell portion of it using e.g. Autoruns or ShellExView?
    Monday, October 12, 2009 10:59 AM
  • Dear No.Compromise

    Strange.
    ShellExView does not show mpegin.dll so I can't disable it
    I did a search of my entire c-disk to find mpegin.dll but this was not found.
    Also "MainConcept® MPEG File Decoder" is not known to me and does not show up in the installed programs list
    I hope you have another suggestion.

    Thanks and kind regards
    Tuesday, October 13, 2009 5:33 PM
  • It is certainly related to mpegin.dll...  If you can't find it, it may be malware or a rootkit that's able to hide components. 

    What about files like:
      magixmpegin.dll
      magixpmpeg.ax
      magixspmpeg.ax

    or anything with mpegi in the name (*mpegi*) or magix in the name (*magix*)?

    Try Autoruns from Sysinternals - let it do its scan, and then press CTRL+F to bring up the "Find" dialog.

    Alternatively, save the results from Autoruns' scan as a .ARN file (File->Save), ZIP it, and provide it in a similar fashion to which the .etl file was provided.

    If you can't find the files, perhaps try booting into safe mode and seeing if you can find the files from there.
    Wednesday, October 14, 2009 10:56 AM
  • Thanks for your patience with me and the willingness to help me with this problem.
    I have send via www.yousendit.com the zipped .ARN file as suggested.
    The scan was made while the problem showed up (explorer.exe with >75% cpu load)
    I hope the .arn file shows what is causing the problem
    Thanks Herman
    Thursday, October 15, 2009 7:06 PM
  • By the way, a search for *mpegi* gave following result
    C:\>dir /S c:\*mpegi*
     De volumenaam van station C is ACER
     Het volumenummer is 7C92-71D4

     Map van c:\Program Files\Common Files\MAGIX Shared\MPEG2 Decoder

    06-03-2006  19:36           391.680 magixmpegin.dll
                   1 bestand(en)          391.680 bytes

         Totaal aantal weergegeven bestanden:
                   1 bestand(en)          391.680 bytes
                   0 map(pen)  10.323.009.536 bytes beschikbaar


    C:\>


    Hope this helps also
    regards Herman












    Thursday, October 15, 2009 7:33 PM
  • The referenced files are codecs that are apparently a part of the "MainConcept" package.  I don't know how to uninstall it, but check Add/Remove programs (Control Panel->Programs and Features) closesly for something with a name that contains "magix" or "MainConcept" or the like.

    The hooks that cause the MainConcept software to load are in the registry:
    HKLM\Software\Classes\Filter           
       MainConcept AMR Decoder    AMR Decoder    MainConcept AG    c:\program files\common files\magix shared\mcmp4v7\mcamrd.ax
       MainConcept MP4 Demultiplexer    MPEG-4 Demultiplexer Direct Show Filter    MainConcept AG    c:\program files\common files\magix shared\mcmp4v7\mcmp4demux.ax
       MainConcept MPEG Demultiplexer    MPEG-1/2 Demultiplexer    MainConcept AG    c:\program files\common files\magix shared\mcmp4v7\mcmpgdmx.ax

    HKLM\Software\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance       MainConcept (Consumer) AVC/H.264 Video Decoder    AVC/H.264 Video Decoder    MainConcept AG    c:\program files\common files\magix shared\mcmp4v7\mcstdavcvd.ax
       MainConcept AAC Decoder    AAC audio decoder filter    MainConcept AG    c:\program files\common files\magix shared\mcmp4v7\mcdaac.ax
       MainConcept AMR Decoder    AMR Decoder    MainConcept AG    c:\program files\common files\magix shared\mcmp4v7\mcamrd.ax
       MainConcept MP4 Demultiplexer    MPEG-4 Demultiplexer Direct Show Filter    MainConcept AG    c:\program files\common files\magix shared\mcmp4v7\mcmp4demux.ax
       MainConcept MPEG Audio Decoder    MPEG Video and Audio Decoder    MainConcept AG    c:\program files\common files\magix shared\mpeg2 decoder\magixdsmpeg.ax
       MainConcept MPEG Demultiplexer    MPEG-1/2 Demultiplexer    MainConcept AG    c:\program files\common files\magix shared\mcmp4v7\mcmpgdmx.ax
       MainConcept MPEG Splitter    Mpeg I/II Splitter    MainConcept AG    c:\program files\common files\magix shared\mpeg2 decoder\magixspmpeg.ax
       MainConcept MPEG Video Decoder    MPEG Video and Audio Decoder    MainConcept AG    c:\program files\common files\magix shared\mpeg2 decoder\magixdsmpeg.ax
       MainConcept MPEG-4 Video Decoder    MPEG-4 Video Decoder Direct Show Filter    MainConcept AG    c:\program files\common files\magix shared\mcmp4v7\mcm4vd.ax
       MainConcept Stream Parser    MPEG-1/2 Demultiplexer    MainConcept AG    c:\program files\common files\magix shared\mcmp4v7\mcmpgdmx.ax

      So, in the event you can't find the entry in Add/Remove programs, consider unchecking the above entries in Autoruns and rebooting.
    Friday, October 16, 2009 9:48 AM
  • Dear No.Compromise

    It seems that the problem has been solved by unchecking all the MainConcept entries in Autoruns.
    I could not reproduce the problem anymore by trying to double click on folders within windows explorer. I tried it for 15 minutes now and normally I could reproduce it within 1 minute.
    I could not find any MainConcept or Magix entry in the Add/Remove programs, so I could not uninstall it. I remember that at one time I installed an evaluation version of a  Magix DVD-builder application, but I uninstalled it after 30 days.
    However I still find a MAGIX Shared folder in C:\Program Files\Common Files
    It contains the following subfolders and files

    c:\Program Files\Common Files\MAGIX Shared>dir /s
     De volumenaam van station C is ACER
     Het volumenummer is 7C92-71D4

     Map van c:\Program Files\Common Files\MAGIX Shared

    26-03-2009  17:39    <DIR>          .
    26-03-2009  17:39    <DIR>          ..
    26-03-2009  17:33    <DIR>          3dMaker
    26-03-2009  17:31    <DIR>          EPG
    26-03-2009  17:39    <DIR>          MCMP4V7
    26-03-2009  17:38    <DIR>          MPEG2 Decoder
    26-03-2009  17:33    <DIR>          Regmodule
                   0 bestand(en)                0 bytes

     Map van c:\Program Files\Common Files\MAGIX Shared\3dMaker

    26-03-2009  17:33    <DIR>          .
    26-03-2009  17:33    <DIR>          ..
    24-10-2006  17:31           126.976 TemplMan_1_1.dll
    24-10-2006  17:31            57.344 WebCommand_1_1.ocx
    25-02-2008  17:23            53.248 WebFileUpdater_1_1.dll
    17-07-2007  12:50            94.208 WmfFilter.dll
    17-07-2007  12:50           122.880 X3Dviewer_1_1.dll
    24-10-2006  17:31           876.544 XaraDoc_1_9.dll
    24-10-2006  17:31            24.064 XarThumb.dll
    24-10-2006  17:31            23.552 XFontMan_1_1.dll
    24-10-2006  17:31           124.928 XMUpload_1_3.dll
    24-10-2006  17:31            45.056 XWC_ENG.dll
    28-09-2006  15:16            32.768 XWFU_ENG.dll
                  11 bestand(en)        1.581.568 bytes

     Map van c:\Program Files\Common Files\MAGIX Shared\EPG

    26-03-2009  17:31    <DIR>          .
    26-03-2009  17:31    <DIR>          ..
    19-01-2007  10:14            10.478 channelidentify.ini
    06-09-2006  15:43                17 installation.ini
                   2 bestand(en)           10.495 bytes

     Map van c:\Program Files\Common Files\MAGIX Shared\MCMP4V7

    26-03-2009  17:39    <DIR>          .
    26-03-2009  17:39    <DIR>          ..
    15-08-2008  16:55               464 install.ini
    02-06-2008  22:51           425.984 mcaacadec.dll
    07-04-2008  12:42           230.640 mcamrd.ax
    07-04-2008  12:42           275.696 mcamrdec.dll
    02-06-2008  22:52           167.936 mcdaac.ax
    02-06-2008  22:57           352.256 mcm4vd.ax
    15-05-2008  12:58           413.696 mcmp4demux.ax
    07-04-2008  12:42           247.024 mcmp4dmux.dll
    02-06-2008  22:56           888.832 mcmpeg4vdec.dll
    02-06-2008  22:33         1.392.640 mcmpgdmx.ax
    07-04-2008  12:42           238.832 mcstdavcvd.ax
    07-04-2008  12:42         1.070.320 mcstdh264dec.dll
                  12 bestand(en)        5.704.320 bytes

     Map van c:\Program Files\Common Files\MAGIX Shared\MPEG2 Decoder

    26-03-2009  17:38    <DIR>          .
    26-03-2009  17:38    <DIR>          ..
    03-04-2006  09:36               231 install.ini
    06-03-2006  19:51            65.024 magixdsmpeg.ax
    06-03-2006  19:36           391.680 magixmpegin.dll
    29-03-2006  15:39         1.122.304 magixmpgdec.dll
    06-03-2006  19:51           131.072 magixspmpeg.ax
                   5 bestand(en)        1.710.311 bytes

     Map van c:\Program Files\Common Files\MAGIX Shared\Regmodule

    26-03-2009  17:33    <DIR>          .
    26-03-2009  17:33    <DIR>          ..
    15-02-2008  10:31           192.512 mxvideoproxy.dll
                   1 bestand(en)          192.512 bytes

         Totaal aantal weergegeven bestanden:
                  31 bestand(en)        9.199.206 bytes
                  17 map(pen)   4.129.013.760 bytes beschikbaar

    c:\Program Files\Common Files\MAGIX Shared>


    It looks like these have not been deleted by the uninstall of the Magix application.
    I assume that I can delete them manually without any harm? Correct?
    Anyhow, Thanks a lot for helping me to solve this problem. Good work.
    Regards Herman
    Tuesday, October 20, 2009 1:00 PM