Opening a program

[Sinster]

and then I shut down the program the program is still running under "Process" Tab of Win Task Mgr but not Application.

 

[cpugeniusmv]

which program?

 

[Sinster]

Outlook, Kali and a few others.

 

[cpugeniusmv]

for Outlook, that's normal. if you close it while it's writing to your PST file, it will stay open to finish what it was doing. it will close eventually.

i've never heard of Kali, so i can't explain that one.

 

[Sinster]

www.kali.net

Its like the All seeing eye.. But has been around much longer..been around since the quake days.

 

[Sinster]

The problem still exist. If I open OUTLOOK 3 instance are open and when I close OUTLOOK 2 remain.

Here is a picture of what is happening
http://www.orderofronin.com/forums/showthread.php?t=4282

 

[Sinster]

Anyone?

 

[ApparitionX]

well, I hate to say it, but it could POSSIBLY be some kind of virus, they're often disguised to look like something that's relatively standard in any windows tskmngr...try going here : http://www.answersthatwork.com/ they have a pretty good "task list", and it sometimes has an explanation what more than one instance of a proccess can be. dunno if this'll help, but good luck.

 

[Sinster]

Hmmm..
Thx Apparition

So Far its only a few programes Kali and Outlook. I don't know if some of those svchost are dual instances.

 

[ApparitionX]

np, just a stab in the dark really. hope you get it worked out. also hope I'm wrong about the poss. of it being a virus. anyway, I wouldn't worry too much about svchost, it's actually a host proccess for applications that run from dll's, so it's pretty normal to have more than one of them. what I mean you should look for is something like this..(very generic example)

outlook.exe - spelled right
0utl00k.exe - spelled with zeros

at a glance you may not think anything of it, but subtle differences in files names are a common trick by the creators of viri to keep them hidden.

good luck.

 

[Sinster]

Nope they are all the same "Outlook" . I can close them all them down, but once I open "Outlook" back up with my task manager open all 3 of them show up in tm.

 

[Mastershakes]

If you end the process, does it reappear or appear to do nothing? If so, it may be running a service.

Start->Run-> 'services.msc' (no quotes) and hit Enter. Eyeball the services, and google any suspicious looking ones. Hope this helps.