igfxpers.exe is a part of Intel Graphics Media Accelerator Driver. igfxpers.exe represents Intel Graphics Persistence Module. It is a process installed alongside NVidia video cards and Intel graphics chipsets. It is a part of the Intel Common User Interface Application and often installed together with the igfxtray.exe process, an Intel graphics tray process which gives easy access to the graphics configurations of these graphics card hardware.This process enables simple resolution changes such as changing the desktop graphics modes or running your video-based Ultra-Mobile PC (UMPC) at scaled display resolution.

It starts during the Windows startup. It is from Intel and its a trusted file, it is not a malware or spyware. But is known to consume high CPU sometimes. If you don’t want this additional configuration utility, you can safely remove it.

It resides at C:\Windows\system32\igfxpers.exe

Screen resolution Problem

Many people have this problem. Admin sets a screen resolution to say 1024×768 and for users it resets to an other resolution without them changing it, and it still persists with the changed resolution even when users change it. So what to do to have the Admin’s screen resolution inherit to users?

To resolve this problem, disable Intel graphics persistence (igfxpers.exe file). Let’s do with registry, follow the steps below.

1. Open the registry by clicking Start -> Run, type regedit and click OK
2. On the left hand side navigate to the following location by clicking on the [+]. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run and find a key called  “persistence’
   
3. Double Click the Persistence key and delete the value and click OK.
4. Once the Registry screen looks as shown below, close it and restart the computer. All users should now inherit the resolution set by the Administrator.
   

How to disable igfxpers.exe on windows startup?

Follow the same step as we did to disable Intel graphics persistence (igfxpers.exe) from the Windows registry above.

How to resolve other igfxpers.exe Errors?

Run a Registry Booster Scan to fix igfxpers.exe related errors.

Run a Windows Driver Update scan to update all the Windows Drivers on your system.

Msmpeng.exe is a Microsoft Antimalware service. It belongs to Microsoft Windows Defender, Microsoft Security Essentials and Microsoft Forefront Security. All these are Microsoft security programs that protects your system from spyware/malware and other malicious program. Microsoft Forefront Security is for business and comes with a price tag. Microsoft Security Essentials and Microsoft Forefront Security also scans Viruses. Msmpeng.exe also gets added to your system with the installation of Microsoft Live OneCare. Which could mean if you use both Windows Defender and Microsoft Live OneCare, they share the same msmpeng.exe file and could be a potential conflict problem. Microsoft Windows Defender comes preinstalled with Microsoft Windows Vista and Windows 7. Windows Xp Users can download it as well. Its a Microsoft’s freeware.

Why is MsMpEng.exe using so much CPU?

You want to get rid of Msmpeng.exe file because of its high CPU consumption and as well its not quite good for an antimalware tool. Well why is it consuming too much CPU? The reason is its conflicting with other process. Microsoft Windows Defender or Windows Security Essentials conflicts with Windows Live Essentials. This can also be a problem when scanning files that has a strange read/write pattern. Let’s talk about how to resolve this problem.

1. Turn off Windows Live Essentials, as its conflicting.
2. Excluding files that consumes high cpu, which can be seen from the log file.
3. Exclude the directories of each program so it won’t scan itself.
4. Turn off scheduler.
5. Turn off unwanted features.

While you can figure out how to keep using these Microsoft antimalware tools at a minimum CPU consumption. You can also totally disable it if you don’t want it anymore or looking forward to try another antimalware solution. Let’s talk about how to disable Msmpeng.exe, Microsoft Antiimalware service now.

How to Disable it?

If you don’t want Msmpeng.exe to run all the time. You can set this service to run when you want. You can do this using the Windows Services Utility. Follow the instructions below to set this service to run on demand, instead of running automatically all the time, on System startup.

1. Go to Start and select Run
2. Type services.msc in the box that appears and click OK
3. Locate this service in the right-pane and double-click on it.
4. Select the drop-down menu that appears before Start Type and set the option to Manual.
5. Click OK and exit from the Services Window

You can also turn Microsoft Windows Defender off from within the program.

To turn off Windows Defender, open the program and click on Options. Now go to Administrator options and uncheck the Use Windows Defender box.  Click Save.

This will disable the program within the program itself, and it won’t run any longer unless to select “Use Windows Defender”.

Just  disabling alone will work, if other resolving solutions aren’t that effective. You don’t have to totally remove it off your system for it to not work anymore.

Rundll32.exe is an Windows system file that runs DLL files as an application. This is a command line utility that runs along with Rundll.exe. There is no direct way to run a dll file. That’s where Rundll32.exe comes in, to run the functions of a DLL file and keep that function in the memory. The dll file owners use this file to run a particular function of a DLL file as shown below. But Rundll32.exe can only execute a dll file that are specific to be accessible by rundll32.exe. It is located at C:\Windows\System32

The ones that are not located at that folder, is a Malware.

Virus with same name:
W32.Miroot.Worm – Symantec Corporation
Backdoor.Lastdoor – Symantec Corporation
Trojan.StartPage – Symantec Corporation

Click to run a FREE scan for rundll32.exe related errors

Missing Rundll32.exe

If the Rundll32.exe file is missing, don’t worry. You can get it back from the Windows CD easily. Follow the steps below, to get the Rundll32.exe file from the Windows Cd,

1. Insert the Windows XP CD ROM disk in the CD ROM drive.
2. Click Start , and then click Run .
3. Type expand X :\i386\rundll32.ex_ c:\windows\system32\rundll32.exe in the Open box, where X is the letter of your CD ROM Drive.
4. Restart the computer.

You now have the Rundll32.exe in your system!

Know What dll files are using Rundll32.exe

You can check what DLL files are using Rundll32.exe by using a tool called Process Explorer, from Microsoft Wininternals, tool set, formerly Sysinternals. You can download this Freeware here – http://technet.microsoft.com/en-us/sysinternals/bb896653

1. Open Process explorer, it shows all the process running on the system.
2. See the instances of Rundll32.exe as shown in the image above.
3. Right click and select properties for the properties window to open.
4. Properties window will display the DLL file that is using Rundll32.exe in the command line. You can select and copy that. It also shows what function of that DLL is being used. In the above image, Hotplug.dll is using Rundll32.exe and HotPlugEjectVetoed function of it is being accessed by the Rundll32.exe.
5. By this way, you can look what process is started at Windows start up, and remove it from Msconfig utility.
6. You can look for other instances of Rundll32.exe and check what DLL file is being used.

Note:  Malwares also use Rundll.exe to execute malicious DLL files. So make sure to Keep MalwareBytes Anti-Malware tool to run in real time to detect those activities.

What is Nwiz.exe?

Nwiz.exe is Nvidia nView Wizard that gets installed with Nvidia graphics driver. Nwiz.exe started coming with Nvidia since from the latest version. It is automatically started on the Windows start up and can be removed it using the Msconfig utility.  Nwiz.exe is a desktop customization utility for users with Nvidia graphics card. It allows users to add transparency to the application, split the desktop screen over more than 1 monitor upto 32 monitors, larger desktop than the monitor size,  zoom the desktop portions, monitor calibration, TV out settings etc… You can see the nView Desktop manager wizard in the screengrab on the right.  This process is no use unless you are using the features mentioned above and you can remove it from the Windows start up process list.

Fix for Nwiz.exe High CPU Usage.

The reason for high CPU is because Nwiz.exe looks up Registy for a key, new DWORD DisableWindowCaching, and when it doesn’t find it, It keeps searching for it using the command NVTweak \ DisableWindowCaching, creating multiple instances of registry lookups which can be seen in the process manager.

The way to fix it would be to add that registry key manually, so it finds when its looking for. To do that create a new DWORD DisableWindowCaching and set it to 0. This would disable the Window caching feature and as well as since the key is now present, the CPU usage is drastically reduced. What I recommend is, disable Nwiz.exe totally when you don’t use its features.

What if I have Nvidia graphics card and I may use the nView features, is it still okay to remove it from the Windows start up list?

If you use nView features you don’t want to remove it from the Windows start up list. Else you can remove it safely. Its not a security threat or something that you should be worried of.

To remove nwiz.exe from your Windows startup list, do the following things.

1. Click the Start and then click Run.
2. Then in the Run window, type msconfig and press Enter to open the System Configuration Utility.
3. Click the Startup tab.
4. Clear the checkbox before nwiz.exe, click Apply, and then click OK.
5. Restart your PC.

NWIZ.exe InstallQuiet

This is just the normal Nwiz.exe with a run switch /installquiet – nwiz.exe/installquiet. The features and removal are same as Nwiz.exe. The normal Nwiz.exe has the run switch – nwiz.exe/install. You can find them on the run registry.

Iw3mp.exe is part of Call of Duty 4 a popular video game. This file looks like a multiplayer module from seeing the file name, there is mp at the end of the file name.

iw3mp.exe has stopped working

This error arises when trying to launch the multiplayer. There are fixes given in this article. Follow them and you should be all set to game multiplayer. The common problem here is with the sound card. It is always necessary when your gaming, the sound and video card drivers must be regularly updated as soon as the update is released. Having that taken care of,  most the problem is solved. You can try a free scan of driver updater program. Be it to update RealTek sound card or Sigmatel or Dell or anything!

How to fix iw3mp.exe Error?

Apart from updating audio drivers, these portion of the article talks about additional fixes you can apply to fix this problem if the problem is not part of the sound card.

1. Install the Call of Duty 4 patch 1.5

Install the patch 1.5, to get the game running smooth killing previous bugs that are present in the game prior to the fix. If it asks for the previous patch 1.4 to be installed prior to this patch. Install that as well.

2. If you have an onboard RealTek sound card.

You can install the latest driver update for RealTek using a driver updater program. This should solve the issue most of the time.

Else try enabling Stereo mix in the sound card.

To enable stereo mix in the sound card, follow the steps below.

1. Open Control Panel.
2. Select Hardware and Sound.
3. Select Sound and then display the Recording tab in the Sound dialog box.
4. Right-click in the window and select the Show Disabled Devices option.
5. Enable Stereo Mix.
6. Click OK and exit.

If the problem still persists use headphones instead of mic. Don’t use USB microphone as some people have had problems with that before.

3. If you have a Dell Computer and Sigmatel onboard soundcard.

You can install the latest driver update for Sigmatel and dell using a driver updater program. This should solve the issue most of the time.

4. Rename the Mssmp3.asi File

This is a miles sound system that plays the background music in the “Modern Warfare 2″ version.

Find mssmp3.asi, it is by default located at C:\Program Files\Steam\steamapps\common\or C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\miles\ call of duty 4\miles folder. Rename mssmp3.asi to mssmp3.bak. This is also how you remove the background music from “Modern Warfare 2″ for the PC. So there is nothing wrong with that, and its legal for the warfare tournaments.

5. Incompatible Mssmp3.asi File

Download a new Mssmp3.asi from here if you using Athlon processor. The COD4 miles sound file is incompatible, while you can use COD2 miles audio file, which is linked above.

6. Uninstall and reinstall COD 4.

If nothing of the above works, the next step is to uninstall and reinstall Call of Duty 4.

Most users never even heard of the Bcmwltry.exe error before. So what is this error and how do we fix it? Bcmwltry.exe Error belongs to Broadcom Corporation Wireless Network program and the error is due to the corrupted application. Upon installing their wireless hardware and software, your system automatically installs the program and enables it to start upon the reboot of your computer. The computer places a very small icon on the lower right side of your computer and this icon allows quick access to your BroadCOM software.

How to fix Bcmwltry.exe Error?

1. Removing it from the startup programs to prevent it from starting up on each boot.

It might be a little tricky to remove this, yet luckily there are some computer fixes which can be used in order to remove this file.

Before you delete the file, the first thing that you need to understand is about startup programs. Startup programs are types of applications which automatically run when you open your PC. As the startup computer opens, so would be your startup programs and services.

In essence, startup programs are designed to aid users to open essential files and folders. The only problem here is that some startup services would only slow down the pace of your PC and they also consume a lot of memory. If you are not using any BroadCOM wireless LAN card or if you want to change several settings in your computer, you need to complete several computer fixes. One of which is by disabling and removing the startup process manually on your system.

In order to remove the program, you need to go to the start menu. The start menu can be found in the lower left area of your screen. Open this menu and select the Run command. Inside the Run command, you need to type MSConfig and press the OK button. Your MSconfig, or System Configuration Utility dialog box is a feature added by Windows in order to manually configure your startup and the services which are running in your computer. It has a list of the programs which are running when you open your computer including several options for booting.

1. Upon opening the System Configuration Utility screen, you will see a Startup tab.
2. Click on it and then look for the box before the line Bcmwltry which is also known as the Broadcom option.
3. Click on the box and then press Apply in order to save the settings.
4. Press OK again in order to ensure your settings and then exit your dialog box.
5. After you finished the settings, you need to restart your computer in order for the settings to take effect.

Remember to only complete this step and never press any other settings from startup since it might affect other programs in your computer. If you do not know what you are doing, remember to use your computer’s system restore settings which are found in the System Tools Panel in your Start tab.

2. Restoring deleted or corrupted bcmwltry.exe

bcmwltry.exe – application error
“the exception unknown software exception (0xe06d7363) occurred in the application at location 0x7c812a5b”

In the case that you incorrectly modified or deleted the bcmwltry.exe file then you need to rectify that problem. One of the most common computer fixes which you can do is to restart your computer into Safe Mode.

You can open Safe Mode through restarting your computer and pressing F8 while your computer is in Boot mode. This would show you a number of features such as Safe Mode with Command Prompt, Normal Safe Mode and Debugging Mode for Windows. Choose Safe Mode and press Enter.

1. After reaching Safe Mode, go to your Start tab and press the All Programs panel.
2. Next, Click on Accessories and the System Restore.
3. This would then lead you to the system restore Panel in your computer.
4. Follow the instructions for restoration and complete the process.
5. If you find a schedule which is near the date where you deleted the Bcmwltry.exe file, you can select the schedule then restart your computer.

3. Using the Windows Repair.

If the problem still persists than you need to use your Windows XP installation CD. Your installer CD is designed to repair windows and analyze any damages that are found in your hard drive. It also analyzes any broken drivers and removes them from your system.

All you need to do is to press F8 to accept the License Agreement and then press R to open the repair process. In the event that your system would be having a fatal error upon deletion of file and the above fixes are not effective, then you would need to reinstall your operating system. You need to reinstall your operating system and you need to update all of your hardware in order to prevent any errors in the future.

Ntoskrnl.exe sounds like a Kernel file from the krnl in the file name. Am i sure? you bet! It is a Kernel file of Windows NT OS. It performs the fundamental tasks for the OS like Process management, memory management, cache management, scheduling tasks, security monitoring etc…

How to fix Missing or corrupt Ntoskrnl.exe Error?

Windows NT could not start because the following file is missing or corrupt:

Winnt_root\System32\Ntoskrnl.exe

Please re-install a copy of the above file.

To fix this follow the solutions below,

1. Fixing Improper Boot.ini file.

To fix this rebuild the improper boot.ini file. This is a process of making sure the [Operating System] entry has the valid directory path of the OS. Let’s do that now,

• Right click My Computer, and click Properties. This opens up system properties.
• Navigate to Advanced tab, under Startup and Recovery > click Settings.
• Under System Startup, click Edit. This open Notepad to edit Boot.ini.
• As the notepad open, take a back up on boot.ini file. To do that, save it as boot.ini.bak or something, you can even save in the location you want.
• Now open command prompt, Start > run > type cmd.exe
• At command prompt type, Type bootcfg /rebuild, and then press ENTER.
• If at any step, you want to know more options available for bootcgf, type bootcfg /?
• Now after you have entered bootcfg /rebuild, the following instructions are displayed:

  * Prompt for the identified versions of Windows installed. When you receive this prompt press Y only if the bootcfg command properly identified each of the Windows operating systems installed on the computer. OS such as Windows XP, Windows 2000 are the ones that are detected automatically.

  * Prompt to enter the load identifier. This is the name of the operating system for the boot.ini. For example, Microsoft Windows XP Home users would enter Microsoft Windows XP Home edition.

  * Prompt to enter OS load options. When this prompt is received type /fastdetect to automatically detect the available options.
  

• You can check your boot.ini that is rebuilt doing what you did to open the boot.ini.

2. Fixing Missing or corrupt Ntoskrnl.exe Error

1. Insert the Microsoft Windows XP CD. Not the recovery or restore CD. The Xp installation CD!
2. Reboot the computer, press any key to boot from the CD.
3. In the Microsoft Windows XP setup menu press the R key to enter the recovery console.
4. Select the operating system you wish to fix, and then enter the administrator password.
5. Type expand [CD-driver drive]:\i386\ntoskrnl.ex_ c:\windows\system32
   If the Cd drive is H: you must type h:\i386\ntoskrnl.ex_ c:\windows\system32
   
6. You will then be prompted if you wish to overwrite the file type Y and press enter.
7. Type exit to reboot the computer.
8. You have now copied the working Ntoskrnl.exe from the Windows Xp CD!

This should fix the issue with Ntoskrnl.exe!

Csrss.exe is the Windows system executable files for Microsoft Client Server Runtime Server Subsystem. Since it is a system file, it is located at the system path, C:\Windows\System32.

What Csrss.exe does?

The purpose of this file is to manage graphical instruction sets for the Operating systems from Windows NT to Windows 7 now. This main application of this file is controlling processes. It is a process controller. It creates, removes and schedules process threads as per the requirement of the Operating system. Threads is a subset of a process, meaning small 32-bit or 64-bit executable codes that a processor can handle is scheduled by Csrss.exe file. When an application runs, if it runs multi-threaded, there are several threads, that makes the process.

From the wikipedia page,

To give an analogy, multiple threads in a process are like multiple cooks reading off the same cook book and following its instructions, not necessarily from the same page.

Csrss.exe is like the manager of those chefs.

But why do you need to remove such a file?

When it’s a malware disguising in the name of csrss.exe and more than one instances of it are running which are not located in the Windows system path – C:\Windows\System32. You need to remove this malware with a tool I personally use and recommend – MalwareBytes.

How to identify if it’s a malware?

Click to view in full size.

As you can see from the process explorer screen shot, the Csrss.exe is currently taking less than 3000kb and its CPU usage is low. You can also see its location and its parent process.

So, with these things reinforced again, lets talk about how to identify if it’s a malware.

• If its location is not at C:\Windows\System32
• More than one instances of it are not located at the system path.
• And it consumes high percentage of CPU.
• It can even have the same file size as the legitimate version. The safest bet would be to scan the system with an anti-malware tool such as MalwareBytes.

Common Csrss.exe Error – Windows User Profile Corrupted (high CPU – exception case).

This problem of Csrss.exe is known to consume high CPU. This not due to any virus activity. This is an exception to the checklist that we use to determine if Csrss.exe is legitimate or not. This is due to a corrupted Windows user profile. You are viewing this site, logged on to your Windows user profile. The things that a Profile stores are My documents folder, Desktop folder, Favorites folder etc… If you happen to log on to a new profile you won’t be able to access those things from your old profile such as files on desktop, all files on your my documents folder, items on start menu, recent files and so on.

How to fix this problem?

The solution is to remove the corrupted profile and create a new one.

How to backup Windows User profile?

You maybe wondering how to backup those data in the other profiles? You can do it with Datagrab.

Ok you have taken a back up your user profile, all those files associated with it.

The next step is the remove it and create a new one. Lets go though those steps now,

1. Make sure everything is backed up, and saved in an external disk or USB drive.
2. Now, log off of your user account.
3. Log in as administrator.
4. Right click My computer on the desktop or start menu, click properties.
5. Navigate to the Advanced Tab as shown in the image below.
6. Under User profile, click settings as highlighted in the red,
7. Select the profile which is corrupted, and delete it.
8. Restart the system.
9. A new profile is created next time you log on to the system. You can restore the backed up files. Alternatively, you can create a new profile before the Step 8, which is before restarting the system.

Mshta.exe is Window HTML Application Host file that aids in reading and running .HTA file. It is located at the system path, C:\Windows\System32. This is genuine Microsoft file and part of Windows 2000 OS.

How to Fix Mshta.exe Error?

On a Windows 2000 Computer, You get the error “Mshta.exe has generated errors and will be closed by Windows” when you open Add/remove programs from the control panel or as is with its CPL file, appwiz.cpl from the Start > run or at command line. To fix this,

1. Insert Windows 2000 CD.
2. Click Start, and then click Run.
3. Type the following commands one by one and press Enter.sfc /purgecachesfc /scannow

Multiple instances of Mshta.exe is running, how to resolve this?

To check the version of Mshta.exe you have is legitimate, make sure the location of it is C:\Windows\System32. Variants found on other locations disguised in the name of file are malwares. Make sure to run MalwareBytes scan, before running update it. Or run it as following,

• Open MalwareBytes  in normal/regular mode and click Update tab, select Check for Updates.
• click Scanner tab, select Quick scan and scan (normal mode).
• After scan click Remove Selected and Reboot into normal mode.

It is also known to create Schedule tasks to run every hour or so. So check Schedule Task folder as well.

Run a MalwareBytes scan now!

What is Ctfmon.exe?

Ctfmon.exe is a Windows process that provides advanced text functionality.

It gets added to your computer on installing Microsoft Office’s suit. It also adds the language bar on the taskbar to switch between multiple keyboard layout if you have more than one keyboard layout (ex. English and German).

It is located in the C:\Windows\System32 folder.  It starts with every boot and it runs even when Office is not in use, its normal.

Before talking about when to remove it, lets know when its needed.

When not to remove it?

Simply put, its when you use other keyboard layouts and Alternative Input technologies. What is that? Alternative Input like speech recognition, tablet pen, other language keyboard layouts, on screen keyboard to type in East Asian languages and more… When you need them, you don’t have to remove Ctfmon.exe.

When and how to remove it?

You now know the utilities of  Ctfmon.exe. Now you decide to remove it. How to do it?

It starts itself even when its removed from the start up programs list at Msconfig.  So just removing from the start up programs list won’t help.

You need to turn off the service itself.  To do that,

1. Go to control panel,
2. Open Date, Time, Language, and Regional Options, and then click Regional and Language Options.
3. On the Languages tab, under Text services and input languages, click Details.
4. Under Preferences, click Language Bar.
5. To turn text services off, select the Turn off advanced text services check box.
6. To turn text services on, clear the check box.
7. Click Yes if prompted to confirm your selection.

Note: Turning off  does not affect multiple languages or keyboards (you only can’t use them without this process) that you have added under Installed services on the Text Services and Input Languages.

Or you can use a 3rd party program like CTFMON-Remover to disable and enable it easily.

Make sure to run a quick registry scan and fix for a even faster PC!

Use a registry cleaner tool, to run a full registry scan for a faster PC!