Two unknown processes

[Joseph_Batna]

Hello,

In the Kaspersky app manager i found two processes (System, Registry) that are neither in a trusted group (grey square) nor have any popularity level (five grey busts), are they legtimate?

Meanwhile, Console Window Host is using 12% of the cpu (in windows task manager), and 8% in Kaspersky app manger.

I uploaded a screenshot of the items. Could there be a threat?

Edited April 28, 2023 by Joseph_Batna

[Schulte]

Hello @Joseph_Batna, Welcome.

If 'Console Window Host' is listed in the task manager, probably an input window (cmd.exe) is active or a program was started in it. Be careful: this can also be open invisible.

As for the other entries: can you double click on 'Registry' or 'System'? Then more detailed data should be displayed.

[Joseph_Batna]

10 minutes ago, Schulte said:

If 'Console Window Host' is listed in the task manager, probably an input window (cmd.exe) is active or a program was started in it. Be careful: this can also be open invisible.

I see no cmd.exe window, might be invisible.

 

Quote

As for the other entries: can you double click on 'Registry' or 'System'? Then more detailed data should be displayed.

 

Doublic clicks work for all process exept these two, furthermore, right clicking on system open an inactive element:

[Schulte]

36 minutes ago, Joseph_Batna said:

Doublic clicks work for all process exept these two, furthermore, right clicking on system open an inactive element:

This seems to be normal.
I could also find 'System' on my computer (Win7), but not 'Registry'. The behavior is like yours, no reaction on double click, no options by right clicking. I assume that these are regular Windows services.

Are you possibly running a Windows update, a hard disk optimization or something similar in the background? This could also explain the cmd.
Please wait until tomorrow, maybe it will look different then.
I don't think it's malware, but you can contact the support. They are allowed to request and evaluate the crucial logs, we here in the forum unfortunately not.

[Flood and Flood's wife]

11 hours ago, Joseph_Batna said:

In the Kaspersky app manager i found two processes (System, Registry) that are neither in a trusted group (grey square) nor have any popularity level (five grey busts), are they legtimate?

Hello @Joseph_Batna, 

Also, yes, both System & Registry are legitimate Windows Operating system processes.

Both are GREY = LOCKED - to prevent *users* from messing around with them. 

Another also, when posting screen images, please post the full screen, use the Search field (1 in our image below) to filter for the process that's concerning (you), heavily cropped images are very difficult to work with. 

Thank you?
Flood?+?

[Joseph_Batna]

Thank you guys that's reassuring. As for the cmd it seems back to normal today.
 

[Flood and Flood's wife]

9 minutes ago, Joseph_Batna said:

Thank you guys that's reassuring. As for the cmd it seems back to normal today.

Excellent @Joseph_Batna, 

Thank you for posting back & sharing with the Community, cmd is no longer a concern & you're reassured regarding Windows Operating system processes: System & Registry, being grey & locked.

Flood?+?