Greetings.
For some days, my computer has been working slowly, and my antivirus has been blocking suspicious activity from files that are in system32, such as notepad.exe, dllhost.exe, and some more.
I checked the processes at task manager and I saw that there are multiple instances of some of them, sometimes from processes I didn't start.
So far I've seen:
-cmd.exe
-conhost.exe (up to 7-8 instances)
-csrss.exe
-dllhost.exe
-explorer.exe
-msiexec.exe
-notepad.exe
-taskhost.exe
And maybe some others I can't remember right now. If I stop the processes (like notepad) it randomly starts again after some minutes.
I scanned System32 looking for any infections but my antivirus doesn't find anything. I don't know what should I do.
For some days, my computer has been working slowly, and my antivirus has been blocking suspicious activity from files that are in system32, such as notepad.exe, dllhost.exe, and some more.
I checked the processes at task manager and I saw that there are multiple instances of some of them, sometimes from processes I didn't start.
So far I've seen:
-cmd.exe
-conhost.exe (up to 7-8 instances)
-csrss.exe
-dllhost.exe
-explorer.exe
-msiexec.exe
-notepad.exe
-taskhost.exe
And maybe some others I can't remember right now. If I stop the processes (like notepad) it randomly starts again after some minutes.
I scanned System32 looking for any infections but my antivirus doesn't find anything. I don't know what should I do.