1

If using the nirsoft’s OpenedFilesViewer, which prints file handles. There are some “processes” with strange chinese characters that have a handle on inexistent files on C: drive. I haven’t paid much attention to it, since I can’t find the files nor the process, of which one has PID 4 i.e. the NT Kernel & System process. But it still doesn’t look right and I am worried if it in fact is malware, since it appears on every boot.

Examples:

C:躋 (appears every boot)

C:ᅐ鎩￿ᅐ鎩￿Ј (other files vary in names)

OpenedFilesViewer list

If I try to close the handle C:躋 or kill the process it won’t work.

8
  • Maybe delete the files with Unlocker (MajorGeeks)
    – John
    Mar 31, 2022 at 23:02
  • @John How would that work if the files do not exist/can't be found?
    – Gantendo
    Mar 31, 2022 at 23:08
  • Download and run MalwareBytes (it is free) malwarebytes.com
    – Gantendo
    Mar 31, 2022 at 23:08
  • It seems the files must exist somewhere on your computer.
    – John
    Mar 31, 2022 at 23:10
  • Thanks for the tip but as stated, Unlocker can’t find the file, in fact it doesn’t list any file on the C: drive root. I have run Malwarebytes @Gantendo. First I thought it’s a bug on openedfilesview, or a mistranslation of hex, but it seems to only affect me.
    – psisis
    Mar 31, 2022 at 23:32

0

You must log in to answer this question.

Browse other questions tagged .