Why is task manager duplicating processes?

Question

I know it's a virus of some sort, but I can't get rid of it.

Task Manager duplicates such items as
login.exe
scss.exe
svchost.exe
mdam.exe

I've run Malwarebytes abd Spybot S&D but neither fixed the problem, I'm willing to try anything. I just want this gone.

Help?

Answer 1

Are you sure you are infected, many programs have more than one process running. svchost.exe can have several. mdam.exe is malwarebytes. scss could be malware but it's also used for several games. Your best bet is to open task manager then right click on the process and then select open file location. This will show where the file is, from this you should be able to figure out it the process is legit or not.

Answer 2

Windows Task Manager Processes Virus

Answer 3

This is my scrip for removal of Virus and Malware and some things to think about before you do anything please Read first # 1 should clean most computers however there will be computer that need step #2 and real bad ones all of step #3

System restore bad idea if you think you have a virus it may spread it you can lose files or programs you paid for depends on when last restore was done. never do a restore without having a full backup

format: never format with out a full backup

If you don't have internet access:

go to control internet options click on connection tab LAN settings uncheck proxy server (unless you set this up or your ISP/Administrator) virus was probable using port 6555 for it update

1: Your computer may be infected it need to be clean. run a full virus scan if you don't have anti-virus go to download.com and get a free one. do not by one on line you are infected and you may end up giving you credit card info out to thieves if it won't let you download an anti virus program boot your computer in safe-mode with networking (that the press F8 key when you restart your computer) I recommend a cold start shut the computer down and leave it off 30 sec. then restart and press F8 remember pick with arrows keys safe-mode with networking login to windows when it come up and go to download.com and download Spybot search & Destroy or MalwareBytes both will install in safe mode and run do the updates for it and do a full scan then go to eset.com and do their free online virus scan.

if this doesn't work



2: you need to go to http://www.ubcd4win.com/ on a friends computer and build a a bootable CD or DVD download file is at http://www.securitywonks.net/listing/view/3/UBCD-for-Windows

and this one does it all will give you internet access to update the files for spybot search & destroy then run it. It free also when you get the computer back boot in safe mode with-networking (shift F8) and go to eset.com and do a free anti-virus scan make sure you put the disk in and then turn off the computer so it a cold boot



3: if all this fails then you must backup all your data to removable storage or pull your hard drive put in a new one install your operating system and your applications your anti-virus and anti-malware do all updates and put your data back (data doc,pictures music, passwords anything important on your computer) after it up and running change all

Answer 4

It's normal to have many svchost processes. I recommend using Process Explorer. It gives more info and it's much easier to determine if a process is legitimate or not.



http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

Answer 5

Just don't exit any of the svchost.exe's. That's just Windows being Windows.