what are these processes?

Kari · 04 Apr 2010

feyzaguirre said:

My pc has some processes i do not recognize. most of them have a *32 next to them. this has happened i the last two days. what should i do i also have a new option in the start-programs menu internet explorer (64 bit). for some reason in all other pcs ive had, this always shows these symptoms when a trojan or virus is present. how do i fix this before its too late? the picture give u a graphic look at this problem.

If you have a 64-bit Windows, you also have IE8 64-bit on the Start Menu.

What symptoms? What problem? I just don't understand what's the issue here? All the processes visible in Task Manager are completely normal, as they should be when running a 64-bit Windows.

There's not a single mysterious process. There's Messenger, Winword, AVG, touchpad service, iTunes, Catalyst etc. All normal, not one suspicious.

It looks you just have all the possible programs and services running. You might consider cleaning your startup a little bit.

That tells only that you are running a 64-bit Windows, with loads of stuff running on the background. When you run a 32-bit application on a 64-bit Windows, Windows shows with *32 that it's a 32-bit process.

feyzaguirre said:

it wasnt doing this before my computer perfomance is way up in the 80% to the 100%

Your CPU and RAM usage are high because you have almost all possible software running at the same time.

One more time, short version: According to your screenshot, there's nothing suspicious running on your computer. Every visible process is OK.

Kari

feyzaguirre · 04 Apr 2010

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org
Database version: 3954
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
4/4/2010 7:31:07 PM
mbam-log-2010-04-04 (19-31-07).txt
Scan type: Full scan (C:\|)
Objects scanned: 194043
Time elapsed: 4 hour(s), 35 minute(s), 17 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2 (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2.1 (Adware.PopCap) -> Quarantined and deleted successfully.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChange s (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)

richc46 · 04 Apr 2010

Hi Again,

I know this only because I use (and like) Malwarebytes. Usually there is one false positive for windows users. If your malware is this one, just set to ignore.

Malwarebytes false positive? - alt.privacy.spyware | Google Groups

Enjoy your computer and run a virus and malware scan at least once a week.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChang es False Positive

Zomby88 · 04 Apr 2010

4.5 hours to scan your pc

I know I know.