Question FONDUE.exe constantly popping up

[tomshardwareuser7]

This FONDUE.exe window keeps popping up:

https://imgur.com/a/QRCyef1

View: https://imgur.com/a/QRCyef1


Any ideas what it is?

Thanks

 

[tomshardwareuser7]

Additionally. this one too:

https://imgur.com/a/LVXET37

View: https://imgur.com/a/LVXET37


Could that have anything to do with it ?

 

[drivinfast247]

Is your Windows a legit copy and is it up-to-date?

 

[tomshardwareuser7]

Is your Windows a legit copy and is it up-to-date?

Yes, iso from Microsoft site. Haven’t purchased a product key yet, but have updated all the updates

 

[Wolfshadw]

Search your computer for the filename, "fondue.exe". Make sure it exists ONLY in the Windows\System32 folder on your PC.

-Wolf sends

 

[tomshardwareuser7]

Search your computer for the filename, "fondue.exe". Make sure it exists ONLY in the Windows\System32 folder on your PC.

-Wolf sends

Yup, C:\Windows\System32\Fondue.exe

 

[tomshardwareuser7]

Actually, there are multiple copies of it:

C:\Windows\SysWOW64\Fondue.exe

C:\Windows\WinSxS\wow64_microsoft-windows-o..onalfeatures-fondue_31bf3856ad364e35_10.0.19041.1_none_09fac50a5fe3aec5\Fondue.exe

C:\Windows\WinSxS\amd64_microsoft-windows-o..onalfeatures-fondue_31bf3856ad364e35_10.0.19041.1_none_ffa61ab82b82ecca\Fondue.exe

Is that a virus ?

 

[ex_bubblehead]

Actually, there are multiple copies of it:

C:\Windows\SysWOW64\Fondue.exe

C:\Windows\WinSxS\wow64_microsoft-windows-o..onalfeatures-fondue_31bf3856ad364e35_10.0.19041.1_none_09fac50a5fe3aec5\Fondue.exe

C:\Windows\WinSxS\amd64_microsoft-windows-o..onalfeatures-fondue_31bf3856ad364e35_10.0.19041.1_none_ffa61ab82b82ecca\Fondue.exe

Is that a virus ?

Quick Google search for fondue.exe:
https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/fondue

 

[tomshardwareuser7]

Quick Google search for fondue.exe:
https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/fondue

thanks, yes I found that an installed Microsoft .NET Framework 4.8 - still no joy though.

Am I missing something ?

 

[Colif]

the syswow64 folders are used for 32 bit applications, so its why there is a version of it in those folders. its common for some parts of windows to be in more than one location. Same thing happens with explorer.exe as well

WinSxS is a Windows system folder that stores files necessary to recover your system. System updates can be downloaded onto your system then stored in your WinSxS folder.

which version of win 10

1. right click start
2. choose run...
3. type winver and press enter
4. current version is 21H2

also, try this:

1. right click start button
2. choose powershell (admin)
3. type SFC /scannow and press enter
4. once its completed, copy/paste this command into same window:
5. Repair-WindowsImage -Online -RestoreHealth

and press enter
SFC fixes system files, second command cleans image files, re run SFC if it failed to fix all files and restart PC

I assume you know what Rocard.exe is as I can't find it online?

 

[tomshardwareuser7]

the syswow64 folders are used for 32 bit applications, so its why there is a version of it in those folders. its common for some parts of windows to be in more than one location. Same thing happens with explorer.exe as well

WinSxS is a Windows system folder that stores files necessary to recover your system. System updates can be downloaded onto your system then stored in your WinSxS folder.

which version of win 10

1. right click start
2. choose run...
3. type winver and press enter
4. current version is 21H2

also, try this:

1. right click start button
2. choose powershell (admin)
3. type SFC /scannow and press enter
4. once its completed, copy/paste this command into same window:
5. Repair-WindowsImage -Online -RestoreHealth

and press enter
SFC fixes system files, second command cleans image files, re run SFC if it failed to fix all files and restart PC

I assume you know what Rocard.exe is as I can't find it online?

Thanks, I did that and got this:

https://imgur.com/a/6mdQe55

View: https://imgur.com/a/6mdQe55


And then this:

https://imgur.com/a/l0AVRb6

View: https://imgur.com/a/l0AVRb6


So far so good... no Fondue popups

As for Rocard.exe: I cannot find it anywhere on google and it turns up no result on my PC. Could it be invisible?

 

[Colif]

System File Checker may have fixed the pop up as I can't say I seen it before.

Guess we wait and see.

Rocard.exe. it could be a part of windows. I can't find any reference at all to it. Which is strange.
I would run malwarebytes or an AV scan just to make sure its nothing suspicious.

 

[tomshardwareuser7]

System File Checker may have fixed the pop up as I can't say I seen it before.

Guess we wait and see.

Rocard.exe. it could be a part of windows. I can't find any reference at all to it. Which is strange.
I would run malwarebytes or an AV scan just to make sure its nothing suspicious.

I already ran Malwarebytes and AVG , both clean apart from this:

https://imgur.com/a/dOM5lZt

View: https://imgur.com/a/dOM5lZt

 

[Ralston18]

Just a quick comment regarding rocard.exe

Seems vaguely familiar - very old and long ago though....

May be some sort of old roledex card software or something that has just used the filename to mask itself?

Any references in Task Manager > Startup or Task Scheduler?

Is there a process running in the background?

 

[tomshardwareuser7]

This is my startup - not sure what all those Windows Form ones are ;

https://imgur.com/a/iFa3Ze3

View: https://imgur.com/a/iFa3Ze3

 

[tomshardwareuser7]

Here it is in Task Manager:

https://imgur.com/a/HXRJ4l8

View: https://imgur.com/a/HXRJ4l8

 

[ex_bubblehead]

The first thing listed on a Google search for "WindowsFormsApp1":

https://otx.alienvault.com/indicato...e32c86669a9aa0ae3af254823f6a00a521d0142671251

Note that in your screenshot it's listed as an HP app.

And as an aside, I'd dump AVG. It hasn't been worth a plugged nickel for quite a few years now.

 

[tomshardwareuser7]

Ah ok, thanks. uninstalled AVG. Will keep MalwareBytes

Looks like it's owned by 'micro' - is that a legit user?

https://imgur.com/a/fLwKLJk

View: https://imgur.com/a/fLwKLJk

 

[ex_bubblehead]

What happens when you search your system for "Rocard.exe"?

If found, where was it found?

 

[tomshardwareuser7]

What happens when you search your system for "Rocard.exe"?

If found, where was it found?

This is the weird thing: "Rocard.exe" appears in no searches at all

 

[ex_bubblehead]

This is the weird thing: "Rocard.exe" appears in no searches at all

Then it's not on your system. Just remove all references to it from your startup folder/s

 

[USAFRet]

I googled for that as well, and also found nothing.

 

[tomshardwareuser7]

Then it's not on your system. Just remove all references to it from your startup folder/s

Startup folder is Task Manager>Startup Items right? It doesn't appear there

 

[ex_bubblehead]

Startup folder is Task Manager>Startup Items right? It doesn't appear there

How to Access the Windows 10 Startup Folder

The Windows Startup Folder, once easily accessible via the Start Menu in older versions of Windows, is hidden in Windows 10 but still serves a useful purpose. Here's how to access the Startup Folder and configure your favorite apps to launch when you log in to your Windows 10 PC.

www.alphr.com

.

You'll find the instructions for Windows 10 about 1/3 or so down the page. There are actually 2 startup folders in Win 10. Task manager isn't how you get there.

 

[Wolfshadw]

Also check Task Manager under the Services tab.

-Wolf sends