3,086 questions
Make sure fully update the Windows and then run the Windows Defender and run a full system scan with it.
Do you know the location of the unknown process?
Windows 10 keeps getting moddified
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 60%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Alexandru Stefan
1
Reputation point
My windows 10 keeps getting trashed
please advise
Windows for business Windows Client for IT Pros Devices and deployment Configure application groups
{count} votes
-
Joseph Workman 11 Reputation points2021-11-26T21:33:00.617+00:00 You need to provide more information on the situation and the symptoms to get a meaningful answer. "My windows 10 keeps getting trashed please advise" doesn't provide any details on what isn't working or what you think is broken.
-
Alexandru Stefan 1 Reputation point
2021-11-27T15:59:32.687+00:00 whenever I install a fresh copy of windows I keep getting those processes with unknown , if I try to stop them the remote attacker takes control of windows
windows 10 x64 latest updates nothing installed just drivers and opera in antivirus settings core isolation is enabled memory protection as well
-
MotoX80 36,291 Reputation points2021-11-27T16:36:41.55+00:00 Did you launch Currports with "Run as administrator"? Try using Tcpview.
https://learn.microsoft.com/en-us/sysinternals/downloads/tcpview
Based on the remote host names and the "time wait" status, it just looks like you were browsing some sites on the internet and you closed the browser. The process is unknown because it's no longer running.
To echo @Joseph Workman 's comments, what exactly happens when "remote attacker takes control of windows"?
Sign in to comment
2 answers
Sort by: Most helpful
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 81%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERA%3C/text%3E%3C/svg%3E)
Reza-Ameri 17,336 Reputation points Volunteer Moderator2021-11-28T16:36:04.787+00:00 -
Alexandru Stefan 1 Reputation point
2021-11-28T21:19:51.277+00:00 windows 10 x64 latest updates nothing installed just drivers and opera in antivirus settings core isolation is enabled memory protection as well
it doesn't show a location just unknown process ,they all come from the internet as far I can distinguish if I try to kill one it crashes currports
after windows defender comes up with a message saying svchost.exe tried to access protected memory
original microsoft windows 10 iso from msdn , offline installed just one hard drive installed after installation windows defender , controlled folder access , core isolation and memory protection turned on and windows updated to latest version thru windows update
@MotoX80 if I turn off memory protection and controlled folder access some processes get changed it's like a syringe like it's windows but it's not high cpu usage in idle sometimes the mouse cursor gets stuck for a fraction of a second , processes use more than normal memory ( ram )
did try scanning with third party antivirus software and nothing comes up
the system I;m using is a microsoft surface 3 whats strange I installed windows 8.1 pro x64 offline using a cd and after I connected the surface to the internet I started to install the drivers everything ok , stumbled TPM version 62 on microsoft website I was running version 41 something to update the TPM it need a usb stick to install it before windows loads booted the usb stick and by some magic the loader was showing that I already have version 62 it's like in windows when I was loading drivers windows automatically updated the TPM
-
Reza-Ameri 17,336 Reputation points Volunteer Moderator
2021-11-29T16:35:10.833+00:00 Open the Task Manager and see if you are seeing this process?
It might be a normal and trusted communication between your PC and the internet and your monitoring tools is unable to read the name of the processor.
You may try run it as administrator and see if there is a different result.
Sign in to comment -
-
MotoX80 36,291 Reputation points
2021-11-29T16:36:22.517+00:00 it doesn't show a location just unknown process ,they all come from the internet as far I can distinguish if I try to kill one it crashes currports
It's not FROM the internet, it's TO the internet. Port 443 is HTTPS. And it's not an unknown process, it's no process at all. There is nothing to kill. That's what a TIME WAIT state indicates. That's how Windows networking works.
https://superuser.com/questions/173535/what-are-close-wait-and-time-wait-states
Browse a site or 2 and then check currports. You should see connections to those sites. Then close all browser windows. Watch currports for a few minutes. Those connections will change to an "unknown" process in a time wait. They should all go away when you refresh currports a few times.
some processes get changed it's like a syringe like it's windows but it's not high cpu usage in idle
Sorry, I don't understand what you mean by "like a syringe". If you're changing the setting for memory protection then I would not be surprised that you would also see some change in the amount of memory a process uses.
The rest of your comments seem to all run together and I'm having trouble understanding what you are trying to say. What does Windows 8.1 have to do with your problem on Win10? What does TPM have to do with your problem? Use tpm.msc to verify that the update was installed.
Timeline is also important. When did your problem start? Did the Surface initially come with 8.1 and you upgraded to Win10? Or did the problem start after you updated the TPM? Do you have all outstanding Windows Update patches installed?
My windows 10 keeps getting trashed
What specifically is getting trashed?