Ken -& Dan - I removed some pre-installed programs. I noticed that I
have several of the following which duplicate:
svchost.exe (6 processes)
3 on svchost.exe -- System
2 under NETOWRK SERVICES
1 under Local services
-- Why do I need 6 of these?
also I noticed duplicates on:
rundll32.exe (Why 2 of these?)
ADSER~1.EXE - System (Is this spyware?)
How do I remove some processes so they will not run on the system or
do I need them?
Thanks for your help.
There is typically several instances of svchost.exe running. It is
exactly what it's names says, ServiceHost. This exe is actually running
the sevices.
Go to sysinternals.com and download their ProcessExplorer. It will give
you MUCH more info than the standard process window. It will look at each
svchost process and will tell you which service each hosts. Just dbl-
click on any SVCHOSTS.exe and to bring up the properties box. Then there
is a 'Services' tab, which will tell you what services that particular
SVCHOST hosts.
RunDLL32.exe is a valid Windows file. It is also a 'host' program of
sorts. But RunDLL32.exe should not be running all the time and has been
used to run spyware/adware on occasions. One time when it SHOULD be
running is if you boot your PC and the 'New Hardware Found' dialog opens.
At that point, if you look at the processes, there will be a RunDLL32.exe
instance, and if killed, the 'New hardware Found' dialog will disappear,
so it is a real program.
ADSER~1.EXE sounds fishy to me, ProcessExplorer will give you all the
details about it.
You should run the complete battery of Anti-Spyware/Adware on your PC IN
SAFE MODE, ALWAYS ! This is the first thing to do before anything else.
Of the stuff you un-installed, how many of them had startup programs ?
Did you get the number of processes down at all ?
DanS