Browser.exe and Google Chrome window running in background

Posted on 2014-08-19
Last Modified: 2014-08-28
I am working on a customers computer and having a difficult time removing what seems to be a virus or at least malware.  He is running Windows 7 Pro 64 bit.  He installed Google Chrome and this issue seemed to arise after the install.  What happens is several instances of browser.exe opens in the task manager in the processes tab and the description shows as Google Chrome.  Usually between 3 and 7 although no Chrome browser windows are open.  In the application tab there is 1 instance of what appears to be Google Chrome running with various ad looking titles that change randomly.  I have fully uninstalled Chrome and restarted the computer but the same situation happens even with Chrome being uninstalled.  What I have found is a folder in User - AppData - LocalLow - ActiveEthernet - Interrupt Memory.  This folder contains the following folder and files: a folder names 36.0.1985.125 and files browser.exe, debug.log and wow_helper.exe.  I have manually removed this folder and files listed but it comes back on restart.  I also have noticed that no actual window of Chrome is visible but on shutdown there seems to be a windows behind the desktop wallpaper that looks like a browser window.  I have run a scan with MalwareBytes and removed a few objects.  I have tried to use HitMan Pro trial version but it doesn't allow me to have a 30 day trial.  I don't know what that's about since their site states that you can have a 30 day trial.  I have also scanned the registry and removed 2 instances of keys that contain lines showing browser.exe but it did not help.  This computer is on a domain and only this user profile seems to be affected.  I have logged in as the domain admin and this situation does not occur.  Thank you in advance for any input.
Question by:PhilR714
    LVL 69

    Expert Comment

    I have 5 instances of Chrome in process with two chrome web pages open.
    Two chrome browsers openDelete Google Chrome
    In C:\Users\User\AppData\Local>> Google
    There is Google Chrome and Google Toolbar
    The fact it is there behind the desktop wallpaper when shutting down reminds of windows xp active desktop is enabled and a URL was used to create a wallpaper
    To start with rightclick the desktop>personalise what do you see in the themes wall?
    Check the start-up group from start > run> msconfig open the startup and disable chrome if listed?

    Try these from
    Wallpaper Changes Back to Previous Wallpaper after Shutdown
    delete the asus theme or desktop background and choose an original aeroglass theme and save changes.

    Let me know your progress

    Accepted Solution

    Thank you for your response.  As I stated I have completely uninstalled Google Chrome and the issue still appears.  I was able to track down the registry key that was causing a specific dll to load the and cause the issue.  This seems to have resolved the issue.

    Author Closing Comment

    I found the solution myself.
    LVL 69

    Expert Comment

    Ok thanks for the heads up as to what resolved it.
    Dlls loading in the background?
    What would that mean?

    Expert Comment

    by:Billy Getz
    Could you please post what key you deleted to fix your issue. we have the same problem here.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Cybersecurity has become the buzzword of recent years and years to come. The inventions of cloud infrastructure and the Internet of Things has made us question our online safety. Let us explore how cloud- enabled cybersecurity can help us with our b…
    If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
    This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.
    How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now