Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: ntoskrnl.exe showing up in task manager,malware?

08 Dec 2012   #1
proudtobegreek

Microsoft Windows 7 Ultimate 64-bit Service Pack 1
 
 
ntoskrnl.exe showing up in task manager,malware?

I noticed a couple of days ago,a process "SYSTEM PID 4 ntoskrnl.exe",located in windows,C,system32.A bit of searching indicates that this particular process,should never show up in TM.As a precaution,could you help me out?Malware or not,should it be there in plain sight,or not?


My System SpecsSystem Spec
.
08 Dec 2012   #2
Borg 386

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1, Win 10
 
 

Quote:
ntoskrnl.exe is a critical process in the boot-up cycle of your computer although should never appear in WinTasks whilst under normal circumstances

Note: ntoskrnl.exe can be altered by the w32.bolzano and variants. If this process appears in WinTasks, please update your virus definitions immediately.
Quote:
Note that ntkrnlpa.exe is not malware, provided that it is found in %SystemRoot%\System32. The following malware is known to disguise itself as ntoskrnl.exe:
  • W32/Rbot-FB (%SystemRoot%\System32)
    • This is a backdoor Trojan that can spread over network shares. It allows a remote attacker to take full control over an infected system.
  • You should never see ntoskrnl.exe running in the Task Manager. The presence of an instance of it in the task manager is a strong indicator of a malware infection.
Might be a good idea to run a full scan with Malwarebytes or Windows Defender Offline
My System SpecsSystem Spec
08 Dec 2012   #3
proudtobegreek

Microsoft Windows 7 Ultimate 64-bit Service Pack 1
 
 

It is due to this kind of articles,that worried me about this process.Did a full scan with M,while in safe mode,no results found.Should i keep on with the defender?I must say,the process showed itself in safe mode too,does that comfort me or is it the other way around?
My System SpecsSystem Spec
.

08 Dec 2012   #4
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

My System SpecsSystem Spec
08 Dec 2012   #5
proudtobegreek

Microsoft Windows 7 Ultimate 64-bit Service Pack 1
 
 

Interesting approach,had already the process under surveillance via process explorer.The point is,i do not have any CPU spikes,nor a specified version or command line of this process.PE shows that it handles interrupts and smss.exe,two legitimate processes,i think its clean,unless advised otherwise.
My System SpecsSystem Spec
09 Dec 2012   #6
proudtobegreek

Microsoft Windows 7 Ultimate 64-bit Service Pack 1
 
 

Windows defender scan came up with no results,i am giving it a rest,if MBAM and WDO,couldnt find any culprits,all should be fine.Thanks everybody for the support,marking as solved.
My System SpecsSystem Spec
Reply

 ntoskrnl.exe showing up in task manager,malware?




Thread Tools




Similar help and support threads
Thread Forum
Task manager showing 20-30% cpu usage...
Hi there, .. I dont know why my task manager is show that my cou usage is that high.. Even tough I have nothing runnung, .. I check the processes and I don't see anything running there, . and the System Idle process is in 93% (for example) while the task manager is showing CPU usage: 30%... ...
Performance & Maintenance
CPU maxed out but no processes showing on task manager
I have a really horrible problem I really need help with! Whenever I watch any video on the web (such as from YouTube), the video begins to constantly glitch and repeatedly freeze briefly and it's a really horrible experience. It seems to happen for a few minutes at a time, and then is ok for...
Performance & Maintenance
Task Manager not showing applications
I have a Lenovo ThinkCentre running Window 7 Professional. If I bring up the Task Manager, no applications show in the window, no matter how many I have open. Processes, Services, etc. all look fine, just no apps. Of course this makes it impossible to kill a 'not responding' app. This is not...
General Discussion
Task Manager is showing weird.!
so whenever i open my task manager its open in some differently.i have running eset smart 5 antivirus.i have scanned my pc but no virus found.here is snapshot
General Discussion
task manager is showing only one core vs two
I really hope someone has a good idea what is going on with my SSD partition of W7 Professional X64 using a Core2Duo processor. I think I may have confused HAL with my old HDD that I currently have in my DVD/CD bay via an Ultrabay Adapter on my laptop. I had the platter drive with W7 installed...
Hardware & Devices
Task Manager showing just 1 Processor
I have upgraded to Intel core 2 Duo processer ans my task manager is displaying only one processer. i have attached some pics for reference . if anybody can help it would be really appreciated. Thanks in advance
Performance & Maintenance


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 14:20.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App