I looked at a computer today which was reported to be running mega slow. Given that this was a computer I setup several months ago, I know it shouldn't be slow. When checking the Task Manager I noticed a large number of suspect processes running.. cmd.exe, net.exe, net1.exe. Each of these were running about 40 instances. The computer was running... Avira Premier Security Suite Prevx Safe Online Malware Bytes I ran a scan with Avira, PrevX, and MalwareBytes but nothing came up. However, every few minutes Avira alerted me to a trojan VBKrypt. Even when selecting delete, the alerts continued every so often. There is nothing unusual listed in HiJackThis or msconfig. In Windows Safe Mode the computer was a lot faster and the unusual processes weren't running. However the three applications still didn't find anything malicious. Again, nothing in HiJackThis to suggest any problems. So why could the three anti-malware applications not find any malware? Surely there was at least 1 malicious process running to cause the virus alerts. Could I be right in assuming these malicious processes are being hidden by a rookit? If so, what would you consider the next step in removing them? For the record, I have already re-installed Windows but I would just like to know the processes involved.