The latest status is as follows:
I completely removed Cursor from my computer, including all remaining/cache files, and then installed the latest version again. However, the same errors still continue.
I am sharing the newest session folder under the %APPDATA%\Cursor\logs\ directory with all of its contents.
20260428T180649.zip (9.1 KB)
Hey, thanks for the logs. They confirm exactly what we suspected: all four extension host processes start (PIDs 21204, 7476, 5048, 4068) but none of them send the ready message within 60s. There are no extension host output logs at all, which means the ext host process exists but never gets to run its bootstrap. This matches a known issue we are tracking on corporate Windows machines.
A couple of quick clarifications:
dist/main.js (9850 bytes) you see is correct for Cursor 3.2.x. cursor-socket is bundled now, so a single main.js in dist/ is expected. The earlier advice about dist vs out was for older builds. So that is not the cause here.cursor-socket not showing up in Task Manager is also expected. It runs inside the extension host process.Since disabling Forcepoint, Trend Micro, and all corporate policies did not help, something at a lower level is still blocking the ext host from initializing. To narrow this down I need two things:
Download Process Monitor: Process Monitor - Sysinternals | Microsoft Learn
procmon.exe as adminProcess Name contains cursor > Include.PML and share it, or upload it to a file share if it is too bigThis will show what file, registry, and network calls each Cursor process makes, and where it hangs, before the timeout.
Open eventvwr.msc and check these locations for events around the time you launched Cursor:
Export any matching events as .evtx or paste them here. Even if your IT team removed standard policies, WDAC or AppLocker can still be enforced via group policy or MDM and silently block process initialization without any visible UI errors.
Is Microsoft Defender Application Guard, Credential Guard, or any virtualization-based security (VBS) enabled on this machine? Financial institutions often have these on by default. You can check with:
Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard
The team is aware of this issue and tracking it on corporate Windows setups, but there is no ETA for a fix yet. The procmon trace would be a meaningful data point because most reports do not capture what is actually blocking the process at the OS level. Let me know what you find.
Hello,
I have collected the logs you requested using the Process Monitor application across two different time periods. I am sharing two separate log files in the links below, each corresponding to a different time period. All the requested logs are included in these files. The link I shared is valid for 3 days; you can download the logs from this link before it expires.
Link: https://we.tl/t-mr62w3ZPq2dXXYu0
In Windows Event Viewer, the EXE and DLL logs were empty, so I have also added the other two logs to the files. I have executed the PowerShell command as well, and I am sharing the result below.
Are you able to determine the exact cause of the issue based on the logs I have provided below?
Thank you.
Hey, thanks for the ProcMon trace, the Event Viewer exports, and the DeviceGuard output. Thatās exactly what we need. I downloaded the files from the WeTransfer link and Iāll pass them on for a deeper review. The most useful artifact is the ProcMon .PML, since it shows what cursor-socket is doing at the OS level before the timeout hits.
A few quick notes from the PowerShell output before we dig in further:
VirtualizationBasedSecurityStatus: 2 ā VBS is enabled and running.CodeIntegrityPolicyEnforcementStatus: 2 ā HVCI or Memory Integrity is enabled in enforcement mode.SecurityServicesRunning: {2, 3, 4, 7} ā HVCI, System Guard Secure Launch, SMM Firmware Measurement, and HVPT are active.UsermodeCodeIntegrityPolicyEnforcementStatus: 0 ā user-mode code integrity isnāt enforced, which rules out one common cause where a binary gets blocked at launch.Thatās a pretty locked-down baseline setup, which is common in finance environments. It doesnāt explain the failure by itself, but it helps the team understand the real security state of this machine.
One quick diagnostic test that would be really helpful, if your IT team can allow it on a test machine for a short time:
This is not something we recommend as a permanent change. Itās only to confirm or rule out HVCI as a contributing factor. If Cursor starts working with HVCI off, that narrows the search a lot. If the issue stays, then HVCI isnāt the blocker and weāll focus elsewhere.
To set expectations up front, weāre tracking this on our side and your case is now linked to the ongoing investigation. Thereās no ETA yet. The procmon trace you provided is genuinely valuable since most reports for this issue donāt include OS-level data. As soon as we have something concrete we can share, Iāll reply in this thread.
Cursor keeps spinning and cannot finish loading when I switch to a specific project.
Some network checks pass, but core features time out.
Timeout waiting for EverythingProvider[error] No Connect transport provider registered.: Error: No Connect transport provider registered.
[warning] [agent-exec] Session acquisition timed out ...
[error] ... Timeout waiting for EverythingProvider
Hey @yyt168, your post got merged into this canonical thread. Hereās a quick recap so you donāt lose context:
First, update Cursor. 2.6.22 is very old, the current stable version is 3.3.x: Cursor Ā· Download. The 3.x line includes diagnostics and fixes for this exact freeze scenario.
Is it project-specific? You said it only freezes when switching to a specific project. If you open a different project or an empty folder, does it load normally? If yes, the workspace state is likely corrupted. Close Cursor, make a backup, then delete that projectās folder from this path, but back it up first:
%APPDATA%\Cursor\User\workspaceStorage\
You can find the right subfolder by checking the workspace.json file inside each one.
cursor --disable-extensions --extensions-dir C:\cursor-clean-extC:\Program Files\cursor\ and for the processes cursor.exe and cursor-socket.If it still freezes after that, send main.log and the contents of window1 and window2 from the latest session folder in %APPDATA%\Cursor\logs\, plus the name of the security agent.
@mupolat, any updates on testing HVCI and Memory Integrity post #28? Even something like āI couldnāt get IT to allow itā helps, itāll tell us if we should switch to a different approach. The ProcMon trace you sent is already being reviewed.
Hello, I have received the necessary permissions from IT. I will disable the specified settings and try again sometime this week, then let you know the results.