12-14-2015, 07:30 AM
Join Date: Jun 2013
For some days, my computer has been working slowly, and my antivirus has been blocking suspicious activity from files that are in system32, such as notepad.exe, dllhost.exe, and some more.
I checked the processes at task manager and I saw that there are multiple instances of some of them, sometimes from processes I didn't start.
So far I've seen:
-conhost.exe (up to 7-8 instances)
And maybe some others I can't remember right now. If I stop the processes (like notepad) it randomly starts again after some minutes.
I scanned System32 looking for any infections but my antivirus doesn't find anything. I don't know what should I do.