Multiple instances of services

[drunknut]

My machine seems to have slowed down a little bit lately.  I have Norton Antivirus, Adaware SE and Spybot, all with the latest definitions and they are detecting nothing.  While investigating I noticed that I have multiple instances of some services running.  csrss.exe is running twice.  They are running from the same folder and there is only one copy of the file in it.  Services.exe is running twice from two different folders.  I'm not sure which one is the right one or if both are legit.  Winlogon.exe is running three times, two from one folder and one from another which seems odd.  And wintasks is not telling me where one of the instances of svchost.exe is running from which also seems strange.  I'm really not sure where to go from here.  Here is a screenshot of wintasks.

Okay, this forum must not let noobs post attachments, so here is a link to the screenshot of wintasks.

http://www.gun-squad.com/interactive/forum...-1117304804.jpg

[drunknut]

Hmmm... Now that I look the screenshot that I posted again, I see that the locations of 2 of the winlogon.exe's and one of the services.exe's are the only ones given in lower cased letters.  Doesn't that seem a little odd.  Should the be in that folder?

[drunknut]

Does anyone else have this directory on your machine?

C:\WINDOWS\system32\dllcache\win32

I have another computer with xp on it and it has the dllcache folder but it doesn't have the win32 folder. BTW, you have to configure your browser to allow you to view protected operating system files to view it. You can also just paste C:\WINDOWS\system32\dllcache\win32 into the address bar. This is a screenshot of the contents of the folder and I don't like it. I think it is some remote access and ftp server crap. If this folder doesn't belong there, I have no idea how it got there because I'm usually pretty good about keeping my machine free of pests.



http://www.gun-squad.com/interactive/forum...-1117308816.jpg

[drunknut]

Okay, my problem is taken care of (in case anyone cares).  There should be no subfolders in the dllcache folder.  I deleted it and all the associated registry entries and everything is back to normal.  Thanks though for the help that you would have given me if I didn't figure it out first. http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/wink.gif\' class=\'bbc_emoticon\' alt=\'\' />

[guestolo]

Glad to hear you got it figured out

If you would like to post a Hijackthis log for a double check
By all means do so
Instructions to post a log are HERE

If you decide not too post a log, that's ok too  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/smile.gif\' class=\'bbc_emoticon\' alt=\'\' />