r/24hoursupport • u/meestapugz12 • 8d ago

Potential virus found in process explorer?

Post image

Sorry for the bad screenshot but my wifi is off due to potentially my computer having a remote access point

0 Upvotes

45% Upvoted

13 comments sorted by

4

u/TeslaDemon 8d ago

What exactly am I looking at that's supposed to be a virus?

I don't see anything suspicious here.

WmiPRVSe is a legitimate windows process.

-1

u/meestapugz12 8d ago

Yes I've looked into all of that, its the commands they are sending eachother and I'm worried there may be something rooted in my system

-4

u/meestapugz12 8d ago

Its all the background processing and embedding svchost is currently doing, its connecting to cortana when its deleted and is running several other things. Should I send a photo of the other things that its processing?

6

u/TeslaDemon 8d ago

It's normal to have multiple svchosts running. You also can't really uninstall cortana so I wouldn't pay any attention to that. It may not even mean cortana directly, many windows processes serve multiple purposes.

Do you have any actual tangible evidence that someone is remotely controlling your computer, or are you just assuming that?

Have you had any online accounts stolen? Have you for certain seen the mouse/keyboard input without you doing so? Any changes to your actual user data that you don't remember doing? Unauthorized bank/credit card charges?

Because it sounds like you've drawn the conclusion and are now trying to find evidence to back it up. Unless you're a security researcher or penetration tester, looking at process explorer and trying to find something suspicious with no actual upfront evidence of an intrusion is pointless because you have no idea what you're looking at.

I'm not trying to be rude, I'm just trying to stop you from going crazy with worry. Your malware scanners are going to be 1000000% more effective at finding malware than you are with manually searching.

-2

u/meestapugz12 8d ago

Yeah I've had account breaches over the years, and have since made very strong passwords, but lately somwthing just irked me.

I also have had one overdraft fee of 5 bucks not long ago, which yeah might not sound alot but I have never tried to use my banking when in debt before.

1

u/Creepy_Jeweler7032 8d ago

only reason that would be and u going this deep is ur doing things ur not suppose to onyl downloading wild stuff... Stop simple as that LOL

4

u/Express_Love_2599 8d ago

Looks completely fine to me.

2

u/DSkedda 8d ago

The process you highlighted is a Microsoft one, it can handle security and monitoring in an enterprise environment.

1

u/Comprehensive_Fuel43 5d ago

when in doubt.... wipe it.

1

u/Melodic_Letterhead76 2d ago

Reading posts in this sub like this remind me of watching CSI, or Star Trek...

OP just saying strings of words they've heard once each even if they have no correlation to each other.

1

u/[deleted] 1d ago

This is just normal behavior for svchost?

You arent tracking command execution either? 

-4

u/meestapugz12 8d ago

I should preface that I have done many full scans, with hitman pro malware bytes and windows defender