Duplicate processes & problems

TheReaper · 14 May 2011

I have installed Windows 7 Ultimate 64 bit about 2 months ago & during the last couple of days I've started to notice that the number of processes in task manager sometimes increases by 10 or even 20 processes. I've also noticed some duplicate processes: csrss.exe(2), dllhost(2~can't open file location on one of them, it keeps appearing & disappearing, mostly when I open something), nvvsvc.exe(2), taskhost.exe(2 sometimes 3) & svchost.exe(up to 12). Don't know if it's normal.
Am I being paranoid if I suspect a virus or malware is causing it.
Any thoughts & suggestions are very welcome.

I've mentioned this in another post as well: Mouse problems

Britton30 · 14 May 2011

nvvsvc.exe is for your nVIDIA graphics, svchost.exe is a host process for other Windows process, I have 13-14, although some viruses can use this too. csrss.exe and dllhost are also processes for Windows processes, all are normal. Nothing odd I don't think.
The number of processes running at any given time depends on what is running on the machine. I usually have 45-50 on mine.
do run a good AV program to be sure however.
You can plugin any process in Uniblue to see what it is. For example dllhost.
My task manager...
Attachment 154497

TheReaper · 14 May 2011

What would be a good free AV? I'm currently using MSE and MalwareBytes, but they haven't found anything.

Britton30 · 14 May 2011

TheReaper said:

What would be a good free AV? I'm currently using MSE and MalwareBytes, but they haven't found anything.

Run full scans after updating the definitions and the power off. Some malware will only be eradicated with a total power off condition for 5-10 minutes.
Super Anti-Spyware is the other many use here. Sorry I should have included this before. Chances are what you are experiencing is normal.
A good paid version is advisable though.

TheReaper · 14 May 2011

I update all definitions very regularly, but have had concerns lately about the effectiveness of MSE.
The power off for 5-10 min would clear the malware from RAM, am I right?
Have been using SAS on my previous XP system, I'll try it on Win7x64.
I hope it's normal, but it's better safe than sorry.
If I could afford a paid AV or a complete security suite, I'd get one, but sadly that's not feasible at the moment.

Britton30 · 14 May 2011

The power off will clean SOME infections if discover by a scanner. It's not an autmatic solution for all of it by any means, but may help. As I said, it appears from what you've said all is normal.
MSE is by no means a complete security solution, but using the other two with it there is a better chance of catching something if it is present. I use Norton (paid), SAS and MB.

TheReaper · 14 May 2011

Does SAS free support 64bit Windows 7, I mean is there a 64bit version?

Mystere · 14 May 2011

This is all pretty normal. On my system I also have two csrss.exe's, 11 svchosts, etc..

Most likely, the Taskhost and the dllhost problems are related. The taskhost is probably firing off the dllhost to do some task on a regular basis. It's possible it's a virus, or it may just be something for a legitimate program you have installed.

Unless you're actually experiencing a problem, I wouldn't worry about it. Do a malware scan with malwarebytes and if it comes back clean, it's probably normal.

lffoar · 14 May 2011

The other posters are on the money. I've been using the free versions of Superantispyware, Malwarebytes and Spyware blaster for some years with good results. Also a good free AV is Avast which has got me out of trouble a few times by alerting me to dangerous sites, etc.
If you install these programs, set Avast to automatic update and update and scan weekly with SaS and MB, I reckon you are going to be pretty safe......with common sense of course!

Britton30 · 14 May 2011

TheReaper said:

Does SAS free support 64bit Windows 7, I mean is there a 64bit version?

Yes it supports X64 but is a 32 bit program, I have on my X64 system.