Member Avatar for jaishankar

These files really anoying me, P-4 3GHz, 512 MB of ram but because of these files (ehRec.exe, ehSched.exe, ehRecvr.exe) the system is very slow, i have searched for the registry entries but couldnt find them, even Hijack this couldnt find them, they are not even in the windows folder, they are eating up the memory, wat could i do. Please suggest me, thanx in adv.

  • 3 Contributors
  • 5 Replies
  • 112 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by jaishankar

Dani AI

Generated

The behavior described by — files in C:\WINDOWS\ehome that reappear after deletion and cause high resource use — is normally due to Windows Media Center components being managed by services and by Windows file protection. Deleting the EXEs by hand usually only provokes an automatic restore or a service restart, so the right approach is to identify what is launching them, disable that service or uninstall the feature, and confirm whether the files are legitimate or malicious.

Try these steps in order:

  • Verify the file publisher first: right‑click the EXE, Properties -> Digital Signatures. A Microsoft signature strongly indicates a Media Center component.
  • Use Process Explorer to see the process tree, command line, and which process created or loaded the EXE. This shows whether a system service is launching it. Process Explorer
  • Use Autoruns to find service and startup entries that will recreate the files; uncheck or delete those entries rather than manually deleting the EXE. Autoruns
  • Stop/disable the Media Center-related services via services.msc (look for services with “Media Center” in their name) before removing files, or remove Windows Media Center through Add/Remove Windows Components so the system no longer installs/starts them.
  • If you suspect malware (unsigned file, unusual behavior), run a full up‑to‑date antivirus + anti‑malware scan and consider an offline rescue scan from a bootable AV environment.

Cautions: manually deleting system EXEs can break TV/tuner functionality and Windows protection mechanisms will often restore them. If the files are signed by Microsoft and you don’t need Media Center, uninstall it cleanly rather than forcing file deletion. If they’re unsigned or in an unexpected location, treat them as suspicious and quarantine with a reputable scanner first.

Recommended Answers

All 5 Replies

Member Avatar for jaishankar

These files really anoying me, P-4 3GHz, 512 MB of ram but because of these files (ehRec.exe, ehSched.exe, ehRecvr.exe) the system is very slow, i have searched for the registry entries but couldnt find them, even Hijack this couldnt find them, they are not even in the windows folder, they are eating up the memory, wat could i do. Please suggest me, thanx in adv.

At last i have found these files but couldnt delete, whenever i delete they reappear in the folder, they are in this folder
C:\WINDOWS\ehome

Member Avatar for tayspen

At last i have found these files but couldnt delete, whenever i delete they reappear in the folder, they are in this folder
C:\WINDOWS\ehome

Try to boot into safe mode to delete. Press F8 on start up and select safemode.

And here
it talks about one aving to do with WMP so be careful....

-T

Member Avatar for jaishankar

Try to boot into safe mode to delete. Press F8 on start up and select safemode.

And here
it talks about one aving to do with WMP so be careful....

-T

i tried to boot in safe mode but still they r coming back and i clicked on the link u provided but couldnt understand any other solution, i have win xp media center installed but these files were not there b4,

Member Avatar for goldeagle2005

Could be a trojan or virus. Scan with spybot, adaware and a reputable av package

Member Avatar for jaishankar

Could be a trojan or virus. Scan with spybot, adaware and a reputable av package

ok i will

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.