HELP there are extra google chrome tabs and i don't know where they come from when i close then they come up again
- Thread starter erikbagerj
- Start date
- Status
- Apr 9, 2020
- 667
Hello erikbagerj.
Having more Chrome processes than tabs is normal behavior from Chrome. It uses processes for different tasks. While some will make sure to display and sandbox one certain tab, others are there for initializing, installed extensions, security tasks, and more. If you want a more detailed explanation, watch 2 minutes of this video by an IT teacher starting from 19:05: Chrome's sandbox
Tracking cookies are not inherently malicious. They might be of privacy concerns for some people which is why Hitman Pro detects them. You can read more about this topic here: What are tracking cookies and are they bad?
If you still feel your system might be infected, follow the steps below and I will check it.
-------------------------------------------------------------------
Please familiarize yourself with the following ground rules before you start.
Farbar Recovery Scan Tool (FRST) Scan
Having more Chrome processes than tabs is normal behavior from Chrome. It uses processes for different tasks. While some will make sure to display and sandbox one certain tab, others are there for initializing, installed extensions, security tasks, and more. If you want a more detailed explanation, watch 2 minutes of this video by an IT teacher starting from 19:05: Chrome's sandbox
Tracking cookies are not inherently malicious. They might be of privacy concerns for some people which is why Hitman Pro detects them. You can read more about this topic here: What are tracking cookies and are they bad?
If you still feel your system might be infected, follow the steps below and I will check it.
-------------------------------------------------------------------
Please familiarize yourself with the following ground rules before you start.
- Read my instructions thoroughly, carry out each step in the given order.
- Do not make any changes to your system, or run any tools other than those I provided. Do not delete, fix, uninstall, or install anything unless I tell you to.
- If you are unsure about anything or if you encounter any problems, please stop and inform me about it.
- Stick with me until I tell you that your computer is clean. Absence of symptoms does not mean that your computer is free of malware.
- Back up important files before we start.
- Note: On weekends I might be slow to reply
Farbar Recovery Scan Tool (FRST) Scan
- Please download Farbar Recovery Scan Tool and save the file to your Desktop. (Note: choose the right version, 64 or 32 bit, for your operating system, only one will run)
- Double-click FRST64.exe to run the programme.
- Click Yes to the disclaimer.
- Ensure the Addition.txt box is checked.
- Click the Scan button and let the programme run.
- Upon completion, click OK, then OK on the Addition.txt pop up screen.
- Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Attach both logs in your next reply.
- Apr 9, 2020
- 667
Hello Hello erikbagerj.
Your logs look fine. Congratulations
There are indeed users registered on your system that you might not recognize.
1. There is the DefaultAccount, which is needed to run multi-user-manifested-apps (MUMA apps). It is part of your system and should stay there to ensure it is working properly.
2. There is also the defaultuser0 which was added as part of a Windows update. The story behind this one is explained in this news article: Windows 10 Anniversary Update is creating "defaultuser0" profiles
You can delete this account if it bothers you. Follow these steps:
Both of these are normal observations. What you see there are serveral processes. Programs in general may create several processes, although you have only started the program just once.
Reasons vary, but most of the time this is done to improve security and stability, e.g., many browsers use one process for each website additionally to their main processes. If the website executes code that creates an error, it may crash the process but your browser will still work properly because the main components are unaffected.
Those processes for displaying one tab of the browser also have less rights, so if they contain malicious code, this code will not be able to do as much harm as a process with full rights.
Discord has likely similar reasons for creating several processes. I can ensure you it looks the same on my system.
Please let me know if you have any questions.
Your logs look fine. Congratulations
There are indeed users registered on your system that you might not recognize.
1. There is the DefaultAccount, which is needed to run multi-user-manifested-apps (MUMA apps). It is part of your system and should stay there to ensure it is working properly.
2. There is also the defaultuser0 which was added as part of a Windows update. The story behind this one is explained in this news article: Windows 10 Anniversary Update is creating "defaultuser0" profiles
You can delete this account if it bothers you. Follow these steps:
- Open the Settings app.
- Select the Accounts Option.
- Select Family and Other Users.
- Select defaultuser0 and press Remove.
- Select Delete account and data.
Both of these are normal observations. What you see there are serveral processes. Programs in general may create several processes, although you have only started the program just once.
Reasons vary, but most of the time this is done to improve security and stability, e.g., many browsers use one process for each website additionally to their main processes. If the website executes code that creates an error, it may crash the process but your browser will still work properly because the main components are unaffected.
Those processes for displaying one tab of the browser also have less rights, so if they contain malicious code, this code will not be able to do as much harm as a process with full rights.
Discord has likely similar reasons for creating several processes. I can ensure you it looks the same on my system.
Please let me know if you have any questions.
- Apr 9, 2020
- 667
You are welcome.
This topic seems to be solved. I am closing the thread.
If you need help again or have other questions, please post a new thread.
This topic seems to be solved. I am closing the thread.
If you need help again or have other questions, please post a new thread.
- Status
Similar threads
