[dbg144]

Can someone please help me to identify which of the folloing files shown in the Processes tab of Windows Task Manager are parasites of one kind or another (don't know enough to understand the distinction, if any, between spyware, malware, &c)? Very grateful for any help received. Thx.

svchost.exe
taskmgr.exe
WINWORD.EXE
msmsgs.exe
CursorXP.exe
swdoctor.exe
TOSCDSPD.exe
ccApp.exe
AVGNT.EXE
avgcc.exe
hkcmd.exe
igfxtray.exe
links.exe
PadExe.exe
SmoothView.exe
SynTPEnh.exe
SynTPLpr.exe
ctfmon.exe
alg.exe
wscntfy.exe
CFSvcs.exe
AVWUPSRV.EXE
avgupsvc.exe
avgamsvr.exe
AVGUARD.EXE
MULTIS~2.EXE
spoolsv.exe
explorer.exe
ccEvtMgr.exe
SPBBCSvc.exe
SNDSrvc.exe
ISSVC.exe
ccSetMgr.exe
SDMCP.exe
ccProxy.exy
svchost.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
lsass.exe
services.exe
winlogon.exe
csrss.exe
smss.exe
wdfmgr.exe
snmp.exe
sdhelp.exe
navapsvc.exe
System.exe
System Idle Process

NB. Of the 5 entries for svchost.exe, one has User Name LOCAL SERVICE, two have NETWORK SERVICE and the remaining two have SYSTEM as their User Name.

Thanks in advance for any help offered. If you need further information, please let me know. I'm using a Toshiba laptop less than a year old. I connected it to the Internet only once, in an Internet Cafe, and it's got infected with something and is working very slowly and doing some funny (peculiar!) things.

[GTO]

Hi, dbg144. Welcome to 2-Spyware.com forums!

Your log will be moved to a more appropriate section.

[GTO]

Hi, dbg144. Sorry for the delay .

I can answer to your post. However, my answer would be much more accurate, if I would have your HijackThis log. Malicious processes can have the same name as legitimate ones, and your list lacks some important details. So, please download the HijackThis program, run a system scan and post a fresh log here.

As for different svchost.exe instances of several types - don't worry, this is normal.

[TerryT]

hi dbg144.

According to processlibrary(free process recognizer)::
links.exe = depress worm variant

so far,you have 1 malicious process running.try removing the file itself in safe mode
_________________
Prevention is always better than cure