Hai I am having 23 processes running in my computer including firefox.exe This is a winpatrol log file hope this gives information needed Running processes: C:\WINDOWS\system32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\RTHDCPL.exe C:\WINDOWS\Samsung\ComSMMgr\SSMMgr.exe C:\PROGRAM FILES\KASPERSKY LAB\KASPERSKY ANTI-VIRUS 2009\avp.exe D:\TAKEABREAK.exe C:\WINDOWS\system32\nvsvc32.exe C:\PROGRAM FILES\SITEADVISOR\6261\SASERVICE.exe C:\PROGRAM FILES\MOZILLA FIREFOX\firefox.exe D:\CCleaner\ccleaner.exe D:\WINPATROL\WINPATROL.exe D:\WINPATROL\WINPATROLEX.exe D:\FREE DOWNLOAD MANAGER\fdm.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.orbitdownloader.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ O2 - BHO: SiteAdv - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll O2 - BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - D:\Free Download Manager\iefdm2.dll O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll O4 - HKLM\..\Run: [NvCplDaemon]C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz]nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter]C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL]RTHDCPL.exe O4 - HKLM\..\Run: [Alcmtr]ALCMTR.exe O4 - HKLM\..\Run: [Samsung Common SM]C:\WINDOWS\Samsung\ComSMMgr\ssmmgr.exe /autorun O4 - HKLM\..\Run: [AVP]C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe O4 - HKCU\..\Run: [TakeABreak]D:\\TakeABreak.exe O8 - Extra context menu item: Download all with Free Download Manager - file://D:\Free Download Manager\dlall.htm O8 - Extra context menu item: Download selected with Free Download Manager - file://D:\Free Download Manager\dlselected.htm O8 - Extra context menu item: Download video with Free Download Manager - file://D:\Free Download Manager\dlfvideo.htm O8 - Extra context menu item: Download with Free Download Manager - file://D:\Free Download Manager\dllink.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\Program Files\Yahoo!\Messenger\YPager.exe O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\Program Files\Yahoo!\Messenger\YPager.exe O11 - Options group: [] - O14 - IERESET.INF: START_PAGE_URL = http://www.microsoft.com/isapi/redi... O14 - IERESET.INF: SEARCH_PAGE_URL = http://www.microsoft.com/isapi/redi... O14 - IERESET.INF:HKCU, Start Page = %START_PAGE_URL% O14 - IERESET.INF:HKLM, Default_Page_URL = %START_PAGE_URL% O14 - IERESET.INF:HKLM, Default_Search_URL = %SEARCH_PAGE_URL% O14 - IERESET.INF:HKLM, Search Page = %SEARCH_PAGE_URL% O14 - IERESET.INF:HKCU, Search Page = %SEARCH_PAGE_URL% O23 - Service: IPv6 Helper Service - Microsoft Corporation - C:\WINDOWS\system32\6to4svc.dll O23 - Service: Alerter - Microsoft Corporation - C:\WINDOWS\system32\alrsvc.dll O23 - Service: Application Layer Gateway Service - Microsoft Corporation - C:\WINDOWS\system32\alg.exe O23 - Service: Application Management - Microsoft Corporation - C:\WINDOWS\system32\appmgmts.dll O23 - Service: ASP.NET State Service - Microsoft Corporation - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe O23 - Service: Windows Audio - Microsoft Corporation - C:\WINDOWS\system32\audiosrv.dll O23 - Service: Kaspersky Anti-Virus - - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe -r O23 - Service: Background Intelligent Transfer Service - Microsoft Corporation - C:\WINDOWS\system32\qmgr.dll O23 - Service: Computer Browser - Microsoft Corporation - C:\WINDOWS\system32\browser.dll O23 - Service: Indexing Service - Microsoft Corporation - C:\WINDOWS\system32\cisvc.exe O23 - Service: ClipBook - Microsoft Corporation - C:\WINDOWS\system32\clipsrv.exe O23 - Service: .NET Runtime Optimization Service v2.0.50727_X86 - Microsoft Corporation - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe O23 - Service: COMODO Firewall Pro Helper Service - - C:\Program Files\Comodo\Firewall\cmdagent.exe O23 - Service: COM+ System Application - - C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} O23 - Service: Cryptographic Services - Microsoft Corporation - C:\WINDOWS\system32\cryptsvc.dll O23 - Service: DCOM Server Process Launcher - Microsoft Corporation - C:\WINDOWS\system32\rpcss.dll O23 - Service: DHCP Client - Microsoft Corporation - C:\WINDOWS\system32\dhcpcsvc.dll O23 - Service: Logical Disk Manager Administrative Service - - C:\windows\System32\dmadmin.exe /com O23 - Service: Logical Disk Manager - Microsoft Corp. - C:\WINDOWS\system32\dmserver.dll O23 - Service: DNS Client - Microsoft Corporation - C:\WINDOWS\system32\dnsrslvr.dll O23 - Service: Error Reporting Service - Microsoft Corporation - C:\WINDOWS\system32\ersvc.dll O23 - Service: Event Log - Microsoft Corporation - C:\WINDOWS\system32\services.exe O23 - Service: COM+ Event System - Microsoft Corporation - C:\WINDOWS\system32\es.dll O23 - Service: Fast User Switching Compatibility - Microsoft Corporation - C:\WINDOWS\system32\shsvcs.dll O23 - Service: Human Interface Device Access - - C:\windows\System32\hidserv.dll O23 - Service: HTTP SSL - Microsoft Corporation - C:\WINDOWS\system32\w3ssl.dll O23 - Service: IMAPI CD-Burning COM Service - Microsoft Corporation - C:\WINDOWS\system32\imapi.exe O23 - Service: iolo FileInfoList Service - - C:\Program Files\iolo\common\lib\ioloServiceManager.exe O23 - Service: iolo System Service - - C:\Program Files\iolo\common\lib\ioloServiceManager.exe O23 - Service: Server - Microsoft Corporation - C:\WINDOWS\system32\srvsvc.dll O23 - Service: Workstation - Microsoft Corporation - C:\WINDOWS\system32\wkssvc.dll O23 - Service: TCP/IP NetBIOS Helper - Microsoft Corporation - C:\WINDOWS\system32\lmhsvc.dll O23 - Service: Messenger - Microsoft Corporation - C:\WINDOWS\system32\msgsvc.dll O23 - Service: NetMeeting Remote Desktop Sharing - Microsoft Corporation - C:\WINDOWS\system32\mnmsrvc.exe O23 - Service: Distributed Transaction Coordinator - Microsoft Corporation - C:\WINDOWS\system32\msdtc.exe O23 - Service: Windows Installer - - C:\WINDOWS\system32\msiexec.exe /V O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: Network DDE - Microsoft Corporation - C:\WINDOWS\system32\netdde.exe O23 - Service: Network DDE DSDM - Microsoft Corporation - C:\WINDOWS\system32\netdde.exe O23 - Service: Net Logon - Microsoft Corporation - C:\WINDOWS\system32\lsass.exe O23 - Service: Network Connections - Microsoft Corporation - C:\WINDOWS\system32\netman.dll O23 - Service: Network Location Awareness (NLA) - Microsoft Corporation - C:\WINDOWS\system32\mswsock.dll O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe O23 - Service: NT LM Security Support Provider - Microsoft Corporation - C:\WINDOWS\system32\lsass.exe O23 - Service: Removable Storage - Microsoft Corporation - C:\WINDOWS\system32\ntmssvc.dll O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Client Service for NetWare - Microsoft Corporation - C:\WINDOWS\system32\nwwks.dll O23 - Service: Office Source Engine - Microsoft Corporation - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.exe O23 - Service: Plug and Play - Microsoft Corporation - C:\WINDOWS\system32\services.exe O23 - Service: IPSEC Services - Microsoft Corporation - C:\WINDOWS\system32\lsass.exe O23 - Service: Protected Storage - Microsoft Corporation - C:\WINDOWS\system32\lsass.exe O23 - Service: Remote Access Auto Connection Manager - Microsoft Corporation - C:\WINDOWS\system32\rasauto.dll O23 - Service: Remote Access Connection Manager - Microsoft Corporation - C:\WINDOWS\system32\rasmans.dll O23 - Service: Remote Desktop Help Session Manager - Microsoft Corporation - C:\WINDOWS\system32\sessmgr.exe O23 - Service: Routing and Remote Access - Microsoft Corporation - C:\WINDOWS\system32\mprdim.dll O23 - Service: Remote Registry - Microsoft Corporation - C:\WINDOWS\system32\regsvc.dll O23 - Service: Remote Procedure Call (RPC) Locator - Microsoft Corporation - C:\WINDOWS\system32\locator.exe O23 - Service: Remote Procedure Call (RPC) - Microsoft Corporation - C:\WINDOWS\system32\rpcss.dll O23 - Service: QoS RSVP - Microsoft Corporation - C:\WINDOWS\system32\rsvp.exe O23 - Service: Security Accounts Manager - Microsoft Corporation - C:\WINDOWS\system32\lsass.exe O23 - Service: Smart Card - Microsoft Corporation - C:\WINDOWS\system32\scardsvr.exe O23 - Service: Task Scheduler - Microsoft Corporation - C:\WINDOWS\system32\schedsvc.dll O23 - Service: Secondary Logon - Microsoft Corporation - C:\WINDOWS\system32\seclogon.dll O23 - Service: System Event Notification - Microsoft Corporation - C:\WINDOWS\system32\sens.dll O23 - Service: Windows Firewall/Internet Connection Sharing (ICS) - Microsoft Corporation - C:\WINDOWS\system32\ipnathlp.dll O23 - Service: Shell Hardware Detection - Microsoft Corporation - C:\WINDOWS\system32\shsvcs.dll O23 - Service: SiteAdvisor Service - - C:\Program Files\SiteAdvisor\6261\SAService.exe O23 - Service: Print Spooler - Microsoft Corporation - C:\WINDOWS\system32\spoolsv.exe O23 - Service: System Restore Service - Microsoft Corporation - C:\WINDOWS\system32\srsvc.dll O23 - Service: SSDP Discovery Service - Microsoft Corporation - C:\WINDOWS\system32\ssdpsrv.dll O23 - Service: Windows Image Acquisition (WIA) - Microsoft Corporation - C:\WINDOWS\system32\wiaservc.dll O23 - Service: MS Software Shadow Copy Provider - - C:\WINDOWS\system32\dllhost.exe /Processid:{04F7EFDC-9A4A-438D-8A2C-0A39D94B8A34} O23 - Service: Performance Logs and Alerts - Microsoft Corporation - C:\WINDOWS\system32\smlogsvc.exe O23 - Service: Telephony - Microsoft Corporation - C:\WINDOWS\system32\tapisrv.dll O23 - Service: Terminal Services - Microsoft Corporation - C:\WINDOWS\system32\termsrv.dll O23 - Service: Themes - Microsoft Corporation - C:\WINDOWS\system32\shsvcs.dll O23 - Service: Telnet - Microsoft Corporation - C:\WINDOWS\system32\tlntsvr.exe O23 - Service: Distributed Link Tracking Client - Microsoft Corporation - C:\WINDOWS\system32\trkwks.dll O23 - Service: Universal Plug and Play Device Host - Microsoft Corporation - C:\WINDOWS\system32\upnphost.dll O23 - Service: Uninterruptible Power Supply - Microsoft Corporation - C:\WINDOWS\system32\ups.exe O23 - Service: Volume Shadow Copy - Microsoft Corporation - C:\WINDOWS\system32\vssvc.exe O23 - Service: Windows Time - Microsoft Corporation - C:\WINDOWS\system32\w32time.dll O23 - Service: WebClient - Microsoft Corporation - C:\WINDOWS\system32\webclnt.dll O23 - Service: Windows Management Instrumentation - Microsoft Corporation - C:\WINDOWS\system32\wbem\wmisvc.dll O23 - Service: Portable Media Serial Number Service - Microsoft Corporation - C:\WINDOWS\system32\mspmsnsv.dll O23 - Service: Windows Management Instrumentation Driver Extensions - Microsoft Corporation - C:\WINDOWS\system32\advapi32.dll O23 - Service: WMI Performance Adapter - Microsoft Corporation - C:\WINDOWS\system32\wbem\wmiapsrv.exe O23 - Service: Security Center - Microsoft Corporation - C:\WINDOWS\system32\wscsvc.dll O23 - Service: Automatic Updates - Microsoft Corporation - C:\WINDOWS\system32\wuauserv.dll O23 - Service: Windows Driver Foundation - User-mode Driver Framework - Microsoft Corporation - C:\WINDOWS\system32\WudfSvc.dll O23 - Service: Wireless Zero Configuration - Microsoft Corporation - C:\WINDOWS\system32\wzcsvc.dll O23 - Service: Network Provisioning Service - Microsoft Corporation - C:\WINDOWS\system32\xmlprov.dll --- Additional WinPatrol Info --- Default Browser: Internet Explorer - Internet Explorer version 6.00.2900.2180 MSIE: Internet Explorer (6.00.2900.2180) Firefox 3.0.3 installed in C:\Program Files\Mozilla Firefox. 0 IE Cookies in Folder: C:\Documents and Settings\Jowin\Cookies\ 0 Mozilla Cookies in Folder: C:\Documents and Settings\Jowin\Application Data\Mozilla\FireFox\Profiles\n9d6ebta.default WP00 - HKLM\CS1: BootExecute = autocheck autochk * WP00 - HKLM\CCS: BootExecute = autocheck autochk * WP00 - HKLM\CS2: BootExecute = autocheck autochk * WP00 - HKLM\CS3: BootExecute = autocheck autochk * WP02 - HKLM\CCS: Command = C:\windows\system32\cmd.exe WP03 - Windows Automatic Update = 1:Turn off Automatic Updates. WP06 - Delayed Start: [Free Download Manager]D:\FREE DOWNLOAD MANAGER\fdm.exe WP08 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix: Default = http:// WP08 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes: www = http:// WP32 - Hidden File: C:\IO.SYS WP32 - Hidden File: C:\MSDOS.SYS WP32 - Hidden File: C:\NTDETECT.COM WP32 - Hidden File: C:\ntldr WP32 - Hidden File: C:\pagefile.sys WP32 - Hidden File: C:\WINDOWS\WindowsShell.Manifest WP32 - Hidden File: C:\WINDOWS\winnt.bmp WP32 - Hidden File: C:\WINDOWS\winnt256.bmp WP32 - Hidden File: C:\WINDOWS\system32\cdplayer.exe.manifest WP32 - Hidden File: C:\WINDOWS\system32\config\default.LOG WP32 - Hidden File: C:\WINDOWS\system32\config\SAM.LOG WP32 - Hidden File: C:\WINDOWS\system32\config\SECURITY.LOG WP32 - Hidden File: C:\WINDOWS\system32\config\software.LOG WP32 - Hidden File: C:\WINDOWS\system32\config\system.LOG WP32 - Hidden File: C:\WINDOWS\system32\config\TempKey.LOG WP32 - Hidden File: C:\WINDOWS\system32\config\userdiff.LOG WP32 - Hidden File: C:\WINDOWS\system32\drivers\fidbox.dat WP32 - Hidden File: C:\WINDOWS\system32\drivers\fidbox.idx WP32 - Hidden File: C:\WINDOWS\system32\drivers\fidbox2.dat WP32 - Hidden File: C:\WINDOWS\system32\drivers\fidbox2.idx WP32 - Hidden File: C:\WINDOWS\system32\logonui.exe.manifest WP32 - Hidden File: C:\WINDOWS\system32\ncpa.cpl.manifest WP32 - Hidden File: C:\WINDOWS\system32\nwc.cpl.manifest WP32 - Hidden File: C:\WINDOWS\system32\Restore\filelist.xml WP32 - Hidden File: C:\WINDOWS\system32\sapi.cpl.manifest WP32 - Hidden File: C:\WINDOWS\system32\WindowsLogon.manifest WP32 - Hidden File: C:\WINDOWS\system32\wuaucpl.cpl.manifest WP32 - Hidden File: C:\WINDOWS\system32\zllictbl.dat WP32 - Hidden File: C:\Documents and Settings\Jowin\Local Settings\Temp\etilqs_kLoakBQKzGqbqmGQwrdO WP32 - Hidden File: C:\Documents and Settings\Jowin\Local Settings\Temp\etilqs_T19wLXtD72VoX3dtrgOH WP33 - File Type .BAT: [MS-DOS Batch File]%1 %* WP33 - File Type .CAT: [Security Catalog]rundll32.exe cryptext.dll,CryptExtOpenCAT %1 WP33 - File Type .CHM: [Compiled HTML Help file]C:\WINDOWS\hh.exe %1 WP33 - File Type .COM: [MS-DOS Application]%1 %* WP33 - File Type .CMD: [Windows NT Command Script]%1 %* WP33 - File Type .DOC: [Microsoft Word Document]C:\Program Files\Microsoft Office\OFFICE11\WINWORD.exe /n /dde WP33 - File Type .EML: [Internet E-Mail Message]C:\Program Files\Outlook Express\msimn.exe /eml:%1 WP33 - File Type .EXE: [Application]%1 %* WP33 - File Type .INF: [Setup Information]C:\windows\System32\NOTEPAD.exe %1 WP33 - File Type .JS: [JScript Script File]NOTEPAD.exe %1 WP33 - File Type .LOG: [Text Document]C:\windows\system32\NOTEPAD.exe %1 WP33 - File Type .MSI: [Windows Installer Package]C:\windows\System32\msiexec.exe /i %1 %* WP33 - File Type .MSG: [Outlook Item]C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.exe /f %1 WP33 - File Type .MID: [AIMP MID File]D:\AIMP\AIMP2.exe %1 WP33 - File Type .MP3: [AIMP MP3 File]D:\AIMP\AIMP2.exe %1 WP33 - File Type .PIF: [Shortcut to MS-DOS Program]%1 %* WP33 - File Type .REG: [Registration Entries]regedit.exe %1 WP33 - File Type .RTF: [Rich Text Format]C:\Program Files\Microsoft Office\OFFICE11\WINWORD.exe /n /dde WP33 - File Type .SCR: [Screen Saver]%1 /S WP33 - File Type .TXT: [Text Document]C:\windows\system32\NOTEPAD.exe %1 WP33 - File Type .URL: [Internet Shortcut]rundll32.exe shdocvw.dll,OpenURL %l WP33 - File Type .VBS: [VBScript Script File]NOTEPAD.exe %1 WP33 - File Type .VBE: [VBScript Encoded Script File]NOTEPAD.exe %1 WP33 - File Type .WSF: [Windows Script File]NOTEPAD.exe %1 WP33 - File Type .WSH: [Windows Script Host Settings File]NOTEPAD.exe %1 WP33 - File Type .XLS: [Microsoft Excel Worksheet]C:\Program Files\Microsoft Office\OFFICE11\EXCEL.exe /e Memory currently in use: 27% Physical Memory Free: 1,330,264 KB Paging File Free: 3,474,632 KB Virtual Memory Free: 2,055,216 KB -- End of file I am great

0

What is takeabreak.exe? edit Never mind I found out.

0

I have sent a technical support request to kaspersky support team hope they help I am great

0