Process Name

[tek1ket]

in task manager i see the process with duplicate names, like
"acrotray.exe" and "acrotray .exe" . the second one has a space more. is it normal?sometimes it is like that, sometimes no. the process differes, it is not always one process to have duplicate like that. like and "SHSTAT.exe" and "SHSTAT .exe", and sometimes none of processes are like that.

I am suspicious to the virus. i have Mcafee with the updated Dat File, I scanned it but could not find anything.

any idea is appreciated

 

[czarj]

Both of the processes you mentioned are third-party applications. Acrotray is of course the adobe acrobat distiller and SHStat is a McAfee product that deals with process-to-process communications. If you concerned I would do two things. First, shut down those applications and restart them and monitor for duplicate processes. Second, run HiJackThis (

http://www.greyknight17.com/spy/HijackThis.exe)

to get a better idea of what is actually running in the background.



--- You must not fight too often with one enemy, or you will teach him all your tricks of war.

 

[tek1ket]

Thannk you for your reply. may be i couldn't explain my problem correctly. my question is not that what is the process "SHSTAT.exe" or "acrotray.exe", but my question is that why some process has duplicate with one more space in their name like "SHSTAT.exe" and "SHSTAT .exe"?
hope this time i could explain it better.

Thank you

 

[guitarzan]

greyknight17.com ???

czarj: If you are going to recommend utilities, you should provide links to their source... not to some unknown site of unknown veracity, updated who knows when...

tek1ket: Sounds like malware to me; I also recommend hijackthis, which can be downloaded from Trend Micro's site here:

http://free.antivirus.com/hijackthis/

Or even better, just google "hijackthis" and post a log here (DON'T have it fix anything unless you are comfortable with the program). I also recommend Malwarebytes Anti-malware.

 

[mintjulep]

If you are going to recommend utilities, you should provide links to their source

I also recommend Malwarebytes Anti-malware.

 

[guitarzan]

mintjulep,

I thought I was clear, but maybe not. I meant post a link to the source AS OPPOSED TO a link from a site that hasn't been updated in over 2 years.

 

[linney]

If you set Task Manager to show the PID numbers of the process, are the numbers different between the near identical processes? Task Manager/ View/ Columns.

You could also try the commands Tasklist /SVC and Tasklist /m from a Command Prompt. Tasklist /? will give you further help.

A Description of Svchost.exe (Q314056)

http://support.microsoft.com/default.aspx?scid=kb;en-us;314056&FR=1&PA=1&SD=HSCH

I see lots of recommendations here for programs like -

Malwarebytes' Anti-Malware

http://www.malwarebytes.org/mbam.php

SuperAntispyware

http://superantispyware.com/

 

[goombawaho]

Ha ha ha - MintJulep. He was either being hilariously sarcastic or cluelessly funny, but I laughed either way.

I would agree though that software should be linked/sourced from "name brand" web sites or from the manufacturer rather some other site that is also hosting it. You can't be too careful.

A "cat" may indeed be just a tabby, but it could also be a lion, and rip your face off.