If using the nirsoft’s OpenedFilesViewer, which prints file handles. There are some “processes” with strange chinese characters that have a handle on inexistent files on C: drive. I haven’t paid much attention to it, since I can’t find the files nor the process, of which one has PID 4 i.e. the NT Kernel & System process. But it still doesn’t look right and I am worried if it in fact is malware, since it appears on every boot.
Examples:
C:躋 (appears every boot)
C:ᅐ鎩ᅐ鎩Ј (other files vary in names)
If I try to close the handle C:躋 or kill the process it won’t work.