Help me understand if this is a risk

Page 1 of 2 12 LastLast

  1. Posts : 149
    Windows 10 Pro x64
       #1

    Help me understand if this is a risk


    Hi. Please check my picture and tell me im not being hacked/spied on. I inserted text information to the picture and by what i read it seems like im compromised. But i need you to confirm. I'll give you more info if you need it. Both processes are running in system32 folder. What got me thinking was the session 1 and 0.

    Thanks.

    Picture: Imgur: The magic of the Internet

    Running windows 10 x64 version 2004 19041.388

    - - - Updated - - -

    Edit. I took this screenshot for more information. Here you can see my username that has 1 session and SYSTEM having session 0 and 1.

    Pic: Imgur: The magic of the Internet
      My Computer


  2. Posts : 6,976
    windows 10
       #2

    They are both running as system so should be ok but to be sure download the 64bit file Download Farbar Recovery Scan Tool

    Run it and you get 2 files as output post both reports and we will check
      My Computer


  3. Posts : 149
    Windows 10 Pro x64
    Thread Starter
       #3

    Thank you! Ok but before you check Farbar, Is it normal for the same user SYSTEM to be logged in on both so SYSTEM session 1 and SYSTEM session 0 at the same time?

    Please ignore the Eset error becuase eset know about this and its nothing to worry about.
    Help me understand if this is a risk Attached Files
      My Computer


  4. Posts : 6,976
    windows 10
       #4

    You have 3 anti virus sytems running and they tend to block each other defender has failed and EST has a file fault which doesnt look good you have a lot of unsigned drivers and other problems. If you bear with us I will ask a malware expert we have to check the file she what she thinks please be patient.

    In the mean time it may be worh running a online virus scan as you Av isnt orking
      My Computer


  5. Posts : 1,604
    Win 10 home 20H2 19042.1110
       #5

    I don't see a problem but please run ESET Online Scanner | ESET ...... copy and past the results back in your next reply.
      My Computers


  6. Posts : 5,200
    Windows 11 Home
       #6

    BlackVen0m said:
    Is it normal for the same user SYSTEM to be logged in on both so SYSTEM session 1 and SYSTEM session 0 at the same time?.
    I have the same.
    Attached Thumbnails Attached Thumbnails Help me understand if this is a risk-capture_07162020_102845.jpg  
      My Computer


  7. Posts : 149
    Windows 10 Pro x64
    Thread Starter
       #7

    Samuria said:
    You have 3 anti virus sytems running and they tend to block each other defender has failed and EST has a file fault which doesnt look good you have a lot of unsigned drivers and other problems. If you bear with us I will ask a malware expert we have to check the file she what she thinks please be patient.

    In the mean time it may be worh running a online virus scan as you Av isnt orking
    Thank you for your time. But my AV is working it finds and warns me of viruses if it finds one. And i dont have other running AV, i only have ESET the other ones i only use once to scan my pc before installing ESET. They are not installed anymore. Maybe you can help me uninstall it completely if there is any files left as you could see? My eset also blocks in firewall perfectly nothing wrong there. Eset forum said that the error for ESET file is nothing to worry about.

    - - - Updated - - -

    Jacee said:
    I don't see a problem but please run ESET Online Scanner | ESET ...... copy and past the results back in your next reply.
    Hi Jacee. Thank you, but i already scanned my system with it, there is not problem found. Do you know what kind of error this is in the Farbar Addition scan? "Error: (07/15/2020 09:45:43 PM) (Source: CertEnroll) (EventID: 86) (User: NT AUTHORITY)
    Description: SCEP Certificate enrollment initialization for WORKGROUP\DESKTOP-GNUAPNG$ via https://INTC-KeyId-6ca9df62a1aae23e0...lates/Aik/scep failed:"

    And i have enabled these things because they where not enabled with fresh install. Should it be disabled or enabled, and is that error something to do with it? This windows is fresh install installed on 13th. I enabled these things because of security, i thought maybe it makes my pc more secure?

    Pic1: Imgur: The magic of the Internet

    Pic2: Imgur: The magic of the Internet

    - - - Updated - - -

    TairikuOkami said:
    I have the same.
    Oh, so i guess its normal? I wonder why the person said its not normal (the text on my picture that you could read) he warned about it, that it should be SYSTEM session 0 then my user name LOVE session 1 not SYSTEM in both sessions. Or any other user being 2 sessions. if i understood it right
      My Computer


  8. Posts : 11,642
    Windows 10 Home x64 Version 21H2 Build 19044.1776
       #8

    BlackVen0m said:
    Hi. Please check my picture and tell me im not being hacked/spied on. I inserted text information to the picture and by what i read it seems like im compromised. But i need you to confirm. I'll give you more info if you need it. Both processes are running in system32 folder. What got me thinking was the session 1 and 0.

    Thanks.

    Picture: Imgur: The magic of the Internet

    Running windows 10 x64 version 2004 19041.388

    - - - Updated - - -

    Edit. I took this screenshot for more information. Here you can see my username that has 1 session and SYSTEM having session 0 and 1.

    Pic: Imgur: The magic of the Internet
    If you ever want to post diagrams of any kind then you can refer to any of this set of guidance articles. Just select the appropriate tool for any particular job.

    Take a screenshot- TenForumsTutorials
    Take a screen snip with Snip and Sketch - TenForumsTutorials
    Steps Recorder - TenForumsTutorials

    and A basic guide to using the Snipping tool - TenForums
    and, for photos, How to tidy up computer screen photo - TenForums

    How to upload and post screenshots and files - TenForumsTutorials
    How to remove a screenshot or image from a TenForums post - TenForumsTutorials

    How to post a screenshot of Disk management - TenForumsTutorials

    Denis
      My Computer

  9.   My Computer


  10. Posts : 5,208
    21H1 64 Bit Home
       #10

    FYI:

    I have the same.

    Help me understand if this is a risk-csrss.jpg
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 15:44.
Find Us




Windows 10 Forums