New Posts  All Forums:Forum Nav:

ping.exe *32

post #1 of 12
Thread Starter 
First, sorry if this is in the wrong topic area but was closest thing I could find to my problem.

I just got back on my computer from a day of not using it, start up a game, and a couple minutes later windows tells me it's running low on memory. So course *** comes to mind and I open up the task manager to see something called ping.exe *32, something I've never seen or head up before, taking up 1.5 gigs of memory. So I end the process only to see it pop right back up but this time only using two megs of memory (it fluctuates how much it uses). I googled but couldn't find anything useful. I scanned with spybot, malwarebytes, and super antispyware, none of which found anything frown.gif. I tried rolling back to a previous date but it was still there doing it's thing when I came back. Any help is greatly appreciated, I hate reformatting and hope it won't come to that.
post #2 of 12
Read about ping.exe here.

It's a needed executable for TCP/IP to work. However it can be malware too, depends on where its located and if it is published by MS or not.
Junkyard
(18 items)
 
NAStradamous
(12 items)
 
HTPC01
(16 items)
 
CPUMotherboardGraphicsRAM
Intel i5 2320 @ 3.1GHz MSI B75MA-E33 HIS HD7970 3GB @ 1050 / 1700, 1.17v Patriot 2x4GB DDR3-1066 
Hard DriveHard DriveOptical DriveCooling
Crucial MX100 256GB WD Green 2TB DVDRW Corsair H50 Push / Pull 
CoolingOSMonitorMonitor
NZXT 120mm fans strapped to stock 7970 cooler Windows 10 Pro Dell 3007WFP Dell 2007FP 
MonitorKeyboardPowerCase
Dell 2007FP Cheap Toshiba (R.I.P. Ducky) PC Power & Cooling Silencer MKIII 950w Cheap Garbage (free) 
MouseAudio
Logitech G602 Yardsale Special 
CPUMotherboardGraphicsRAM
Intel Core i5 3330 Asus H61 MSI GTX 750Ti Low Profile 2x4GB Hynix DDR3-1333 
Hard DriveHard DriveOptical DriveCooling
60GB Kingston SSD 1TB Seagate Samsung DVDRW CoolerMaster Gemin II 
OSMonitorKeyboardPower
Windows 8.1 + Steam Big Picture / Plex HT 50" Insignia LED 1080p Logitech Rosewill Green 530w 
CaseMouseAudioOther
Silverstone HTPC Logitech Pioneer 2.0 tower speakers + 135w RMS Rosewill MCE Remote 
  hide details  
Reply
Junkyard
(18 items)
 
NAStradamous
(12 items)
 
HTPC01
(16 items)
 
CPUMotherboardGraphicsRAM
Intel i5 2320 @ 3.1GHz MSI B75MA-E33 HIS HD7970 3GB @ 1050 / 1700, 1.17v Patriot 2x4GB DDR3-1066 
Hard DriveHard DriveOptical DriveCooling
Crucial MX100 256GB WD Green 2TB DVDRW Corsair H50 Push / Pull 
CoolingOSMonitorMonitor
NZXT 120mm fans strapped to stock 7970 cooler Windows 10 Pro Dell 3007WFP Dell 2007FP 
MonitorKeyboardPowerCase
Dell 2007FP Cheap Toshiba (R.I.P. Ducky) PC Power & Cooling Silencer MKIII 950w Cheap Garbage (free) 
MouseAudio
Logitech G602 Yardsale Special 
CPUMotherboardGraphicsRAM
Intel Core i5 3330 Asus H61 MSI GTX 750Ti Low Profile 2x4GB Hynix DDR3-1333 
Hard DriveHard DriveOptical DriveCooling
60GB Kingston SSD 1TB Seagate Samsung DVDRW CoolerMaster Gemin II 
OSMonitorKeyboardPower
Windows 8.1 + Steam Big Picture / Plex HT 50" Insignia LED 1080p Logitech Rosewill Green 530w 
CaseMouseAudioOther
Silverstone HTPC Logitech Pioneer 2.0 tower speakers + 135w RMS Rosewill MCE Remote 
  hide details  
Reply
post #3 of 12
Do you also have "cmd.exe" open according to Task Manager?
It's a computer!
(19 items)
 
  
CPUMotherboardGraphicsRAM
i5-2500K @ 4.5GHz (1.368-1.384V fixed voltage) ASUS P8P67 EVO B3 (UEFI ver. 1850) GTX 780 ASUS DirectCU II (1228 / 6300, 1.180V) G.SKILL Ripjaws X 8GB (2 x 4GB) 1866MHz, CL9 
Hard DriveHard DriveHard DriveOptical Drive
250 GB Samsung 840 EVO (C:\) 250 GB Samsung 840 EVO (D:\) 150 GB WD VelociRaptor Samsung SH-S243N 24x DVD Burner 
Optical DriveCoolingOSMonitor
Samsung SH-S203N 20X DVD Burner Thermaltake Frio Win 7 Home Premium x64 SP1 Retail AOC G2460PG (24" 1920 x 1080 144Hz G-SYNC) 
KeyboardPowerCaseMouse
Filco Majestouch 104-key Cherry MX Blues w/NKRO Corsair HX650 (Bronze, ordered on 12-12-2009) CM 690 Intellimouse Optical (1.1A) 1000Hz polling rate 
Mouse PadAudioAudio
Basic, but premium round X-Fi Titanium HD Klipsch ProMedia 2.1 (with 16 AWG Monster Cable... 
  hide details  
Reply
It's a computer!
(19 items)
 
  
CPUMotherboardGraphicsRAM
i5-2500K @ 4.5GHz (1.368-1.384V fixed voltage) ASUS P8P67 EVO B3 (UEFI ver. 1850) GTX 780 ASUS DirectCU II (1228 / 6300, 1.180V) G.SKILL Ripjaws X 8GB (2 x 4GB) 1866MHz, CL9 
Hard DriveHard DriveHard DriveOptical Drive
250 GB Samsung 840 EVO (C:\) 250 GB Samsung 840 EVO (D:\) 150 GB WD VelociRaptor Samsung SH-S243N 24x DVD Burner 
Optical DriveCoolingOSMonitor
Samsung SH-S203N 20X DVD Burner Thermaltake Frio Win 7 Home Premium x64 SP1 Retail AOC G2460PG (24" 1920 x 1080 144Hz G-SYNC) 
KeyboardPowerCaseMouse
Filco Majestouch 104-key Cherry MX Blues w/NKRO Corsair HX650 (Bronze, ordered on 12-12-2009) CM 690 Intellimouse Optical (1.1A) 1000Hz polling rate 
Mouse PadAudioAudio
Basic, but premium round X-Fi Titanium HD Klipsch ProMedia 2.1 (with 16 AWG Monster Cable... 
  hide details  
Reply
post #4 of 12
Yea, sounds like a virus is masking itself as a commonly known to be safe file.
Beast of Burden
(19 items)
 
Cool story, bro!
(16 items)
 
 
CPUMotherboardGraphicsRAM
i7 3770k Gigabyte Z77X-UD5H Gigabyte HD 7970 Reference Ripjaws Z 
Hard DriveHard DriveOptical DriveCooling
Crucial M4 Caviar Black ASUS DVD XSPC Raystorm 
CoolingCoolingCoolingOS
EK FC-7970 w/ Backplate Copper/Acetal RX360 w/ 3x Yate Loon High Speed in Push XSPC Dual Bay Res w/ D5 Pump Windows 7 
MonitorMonitorKeyboardPower
ASUS VE226H ASUS VE226H Cooler Master Quickfire Rapid Corsair HX850 
CaseMouseMouse Pad
HAF 932 Advanced Razer Deathadder QcK Mini 
CPUMotherboardGraphicsRAM
Q9550@ 3.5GHz w/ 1.191v Gigabyte GA-EP45-UD3P Sapphire Reference 5850 @ 775/1100 G.SKILL 4GB (2 x 2GB) DDR2 1066 
Hard DriveHard DriveHard DriveOptical Drive
Crucial C300 Spinpoint F3 Caviar Black ASUS DVD-RW 
CoolingOSMonitorKeyboard
Arctic Cooling Freezer 7 Pro Windows 7 Home Premium 64-bit Samsung 23" Saitek Eclipse III 
PowerCaseMouse
Corsair 430W NZXT Source 210 Wolf King 
  hide details  
Reply
Beast of Burden
(19 items)
 
Cool story, bro!
(16 items)
 
 
CPUMotherboardGraphicsRAM
i7 3770k Gigabyte Z77X-UD5H Gigabyte HD 7970 Reference Ripjaws Z 
Hard DriveHard DriveOptical DriveCooling
Crucial M4 Caviar Black ASUS DVD XSPC Raystorm 
CoolingCoolingCoolingOS
EK FC-7970 w/ Backplate Copper/Acetal RX360 w/ 3x Yate Loon High Speed in Push XSPC Dual Bay Res w/ D5 Pump Windows 7 
MonitorMonitorKeyboardPower
ASUS VE226H ASUS VE226H Cooler Master Quickfire Rapid Corsair HX850 
CaseMouseMouse Pad
HAF 932 Advanced Razer Deathadder QcK Mini 
CPUMotherboardGraphicsRAM
Q9550@ 3.5GHz w/ 1.191v Gigabyte GA-EP45-UD3P Sapphire Reference 5850 @ 775/1100 G.SKILL 4GB (2 x 2GB) DDR2 1066 
Hard DriveHard DriveHard DriveOptical Drive
Crucial C300 Spinpoint F3 Caviar Black ASUS DVD-RW 
CoolingOSMonitorKeyboard
Arctic Cooling Freezer 7 Pro Windows 7 Home Premium 64-bit Samsung 23" Saitek Eclipse III 
PowerCaseMouse
Corsair 430W NZXT Source 210 Wolf King 
  hide details  
Reply
post #5 of 12
It's a computer!
(19 items)
 
  
CPUMotherboardGraphicsRAM
i5-2500K @ 4.5GHz (1.368-1.384V fixed voltage) ASUS P8P67 EVO B3 (UEFI ver. 1850) GTX 780 ASUS DirectCU II (1228 / 6300, 1.180V) G.SKILL Ripjaws X 8GB (2 x 4GB) 1866MHz, CL9 
Hard DriveHard DriveHard DriveOptical Drive
250 GB Samsung 840 EVO (C:\) 250 GB Samsung 840 EVO (D:\) 150 GB WD VelociRaptor Samsung SH-S243N 24x DVD Burner 
Optical DriveCoolingOSMonitor
Samsung SH-S203N 20X DVD Burner Thermaltake Frio Win 7 Home Premium x64 SP1 Retail AOC G2460PG (24" 1920 x 1080 144Hz G-SYNC) 
KeyboardPowerCaseMouse
Filco Majestouch 104-key Cherry MX Blues w/NKRO Corsair HX650 (Bronze, ordered on 12-12-2009) CM 690 Intellimouse Optical (1.1A) 1000Hz polling rate 
Mouse PadAudioAudio
Basic, but premium round X-Fi Titanium HD Klipsch ProMedia 2.1 (with 16 AWG Monster Cable... 
  hide details  
Reply
It's a computer!
(19 items)
 
  
CPUMotherboardGraphicsRAM
i5-2500K @ 4.5GHz (1.368-1.384V fixed voltage) ASUS P8P67 EVO B3 (UEFI ver. 1850) GTX 780 ASUS DirectCU II (1228 / 6300, 1.180V) G.SKILL Ripjaws X 8GB (2 x 4GB) 1866MHz, CL9 
Hard DriveHard DriveHard DriveOptical Drive
250 GB Samsung 840 EVO (C:\) 250 GB Samsung 840 EVO (D:\) 150 GB WD VelociRaptor Samsung SH-S243N 24x DVD Burner 
Optical DriveCoolingOSMonitor
Samsung SH-S203N 20X DVD Burner Thermaltake Frio Win 7 Home Premium x64 SP1 Retail AOC G2460PG (24" 1920 x 1080 144Hz G-SYNC) 
KeyboardPowerCaseMouse
Filco Majestouch 104-key Cherry MX Blues w/NKRO Corsair HX650 (Bronze, ordered on 12-12-2009) CM 690 Intellimouse Optical (1.1A) 1000Hz polling rate 
Mouse PadAudioAudio
Basic, but premium round X-Fi Titanium HD Klipsch ProMedia 2.1 (with 16 AWG Monster Cable... 
  hide details  
Reply
post #6 of 12
Thread Starter 
No cmd isn't there, and it's in the C:\Windows\SysWOW64 folder(not sure if that's where it should be or not). The thing that worries me is first the amount of memory it likes to use, and the fact I can't edit or keep it from launching itself. The only things I could find on google was how it's :
A. Nothing to worry about.
B. A virus masking itself.
C. Definitely a virus, here's software that gets rid of it easily after you give us 20 dollars.

I'm sitting here just watching it in the task manager and it starts at 2 megs then steadily keeps going up and up until I end the process, and then starts all over again. I planned on going to bed hours ago lol.
post #7 of 12
I suspect your infected with something.

There is a ping.exe that comes with pretty much every semi-modern version of Windows, its located in C:\Windows\System32. But I have a difficult time believing it could ever consume 1.5gb of memory- its a simple command line program. And it's unlikely Windows would keep relaunching this process when closed.

My guess would be either:

1) Some Malware is pretending to be ping.exe so that it appears to be a normal process in the taskmanager.

or:

2) A 3rd Party App (or Malware) is using the windows version of ping.exe to check for a connection or send data somewhere. This could explain why it's constantly relaunching.

I would:

Run a search on your computer and see if it turns up other versions of ping.exe, (ones not located in C:\Windows\System32). Also I've never tried this but I might attempt to rename or temporarily remove C:\Windows\System32\ping.exe and see if it it still shows up in the taskbar. If a 3rd Party App or Malware is calling this exe, this should atleast stop it from constantly launching. I could be wrong but I doubt any Microsoft Services depend on ping.exe.
Spit in God's Eye
(16 items)
 
  
CPUMotherboardGraphicsRAM
i7-5960x @ 4.26 ghz core / 3.53 ghz uncore - 1.... AsRock X99 Extreme3 EVGA GTX980 Ti 16gb (4x4gb) Crucial DDR4 2133 CL15  
Hard DriveHard DriveHard DriveOptical Drive
A-Data SP600 256gb SSD (C:) Samsung 840 EVO 1TB SSD (D:) Seagate 2TB Hybrid Drive (E:) LITE-ON 24x DVDRW 
CoolingOSMonitorKeyboard
Corsair H110 Win 10 x64 HP 2511x ( 25" 1080p ) AZIO L70 
PowerCaseMouseAudio
Corsair TX750 Antec 300 (Modded) Logitech M100 Onboard 
  hide details  
Reply
Spit in God's Eye
(16 items)
 
  
CPUMotherboardGraphicsRAM
i7-5960x @ 4.26 ghz core / 3.53 ghz uncore - 1.... AsRock X99 Extreme3 EVGA GTX980 Ti 16gb (4x4gb) Crucial DDR4 2133 CL15  
Hard DriveHard DriveHard DriveOptical Drive
A-Data SP600 256gb SSD (C:) Samsung 840 EVO 1TB SSD (D:) Seagate 2TB Hybrid Drive (E:) LITE-ON 24x DVDRW 
CoolingOSMonitorKeyboard
Corsair H110 Win 10 x64 HP 2511x ( 25" 1080p ) AZIO L70 
PowerCaseMouseAudio
Corsair TX750 Antec 300 (Modded) Logitech M100 Onboard 
  hide details  
Reply
post #8 of 12
Yes, it should be in the C:\Windows\SysWOW64 folder. Whats its size in bytes?
Antec
(13 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 Gigabyte X58A-UD3R Sapphire 5850 G-Skill 6GB DDR3 
Hard DriveOSCase
1TB WD Caviar Black Windows 7 Antec 1200 
  hide details  
Reply
Antec
(13 items)
 
  
CPUMotherboardGraphicsRAM
i7 920 Gigabyte X58A-UD3R Sapphire 5850 G-Skill 6GB DDR3 
Hard DriveOSCase
1TB WD Caviar Black Windows 7 Antec 1200 
  hide details  
Reply
post #9 of 12
I had the exact same problem as you did.

I am very knowledgeable about my security and my system was definitely secure. (This started a few weeks back, even after more definition updates to my AV, nothing has been detected).

It looked to me like a third-party program had called PING.EXE for some reason and had died shortly after leaving PING.EXE just pinging, it also loaded multiple instances at some points.

Even using procexp I was unable to terminate them, they were signed by Microsoft and were the genuine PING.EXE. Some of the time I am able to terminate them although they are just refreshed seconds later.

After a reboot it disappeared, still no idea what it was although it still randomly happens. The only time I really notice is if I'm about to play a game and it chokes up due to lack of memory available.
Toaster
(12 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 4790K ASUS Maximum VII Impact Z97 OcUK GeForce GTX 970 "NVIDIA 970 Cooler Edition" 16GB (2x8GB) Low-profile Corsair DDR3 Vengeance 
Hard DriveCoolingOSMonitor
500GB Samsung 850 EVO Corsair H100i Microsoft Windows 8.1 Dell UltraSharp U2312HM 
KeyboardPowerCaseMouse
Logitech G15 600W SFX Silverstone Strider NCASE M1 Zowie FK1 
  hide details  
Reply
Toaster
(12 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i7 4790K ASUS Maximum VII Impact Z97 OcUK GeForce GTX 970 "NVIDIA 970 Cooler Edition" 16GB (2x8GB) Low-profile Corsair DDR3 Vengeance 
Hard DriveCoolingOSMonitor
500GB Samsung 850 EVO Corsair H100i Microsoft Windows 8.1 Dell UltraSharp U2312HM 
KeyboardPowerCaseMouse
Logitech G15 600W SFX Silverstone Strider NCASE M1 Zowie FK1 
  hide details  
Reply
post #10 of 12
Thread Starter 
Sorry for late replay, was 5:30 in the morning and couldn't keep myself up any longer lol.

But after looking with a more clear head it does seem to be the legit ping.exe. Is 15KB and says it was created and last modified on July 13th 2009 which is when I built this PC. That's sort of a relief in a way but now it's another mystery of why it's taking up so much memory. I guess I'm just going to have to get ready for a reformat frown.gif
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Other Software