[Ham-Computers] RE: Strange Process In Win ME

Hsu, Aaron (NBC Universal) aaron.hsu at nbcuni.com
Thu May 11 21:36:52 EDT 2006


Paul,

Go here:  http://www.sysinternals.com

Click on the "Processes and Threads" link on the left
Scroll down to "Process Explorer v10.11" and download the version for
Win98/Me.

It's a stand-alone app and doesn't need installation.  For now, just
un-zip it to a desktop folder and run it.  Once running, click on the
"Process" column header to change the sort view to a single, non-nested
view sorted an ascending order.  For simplicity, if the the lower window
pane is open, the click "View" -> "Show Lower Pane" to close it.  Then
click on "View" -> "Select Columns".  In the list of available columns,
add check marks to "Company Name" and "Command Line", then click "OK".

What you now have is a more detailed view of all the tasks running on
the system (sans drivers and kernel tasks).  The Company Name field
shows you what is populated in the "Company" field of the app running -
it may or may not be populated.  The "Command Line" shows you exactly
how the app/task was started including all the parameters used when the
app was initialized.  This should show you where the app is located and
might give you a better idea of what it might be.

To remove it, you could use HiJackThis (http://www.merijn.org), but this
requires a small amount of learning in order to avoid removing the wrong
thing.  What many people do is to run HiJackThis to save a log, then
they post the log for others to review.  From there, suggestions would
be made as to what items to check and remove.  But we're getting ahead
of ourselves here.  Get ProcExplorer and find out where the app is
launching from first so you have a better idea of what it might be.

73,

  - Aaron, NN6O


-----Original Message-----
Sent: Thursday, May 11, 2006 6:06 PM
Subject: [Ham-Computers] Strange Process In Win ME


A couple of days ago, my xyl's PC started "bogging-down." After the
usual diagnostics/maintenance, (window washer, ad-aware, spybot &
derfag) we noticed a "new" process that neither of us have ever heard
of.

If we do a ctrl alt delete (Win ME) we see a process called "T H I S E L
T" (sans quotation marks, or spaces)

I ran a search on Google, but couldn't find anything that seemed
revlevant, unless I wanted to study mathematics in another universe, hi
hi.

Has anybody heard of this, or know what it is?

Paul W5PDA/4



More information about the Ham-Computers mailing list