Odd process running, virus?

[jnelsoninjax]

So I have been having some really odd issues with my system for the last 2 weeks or so, and today I was looking in Process Lasso for something completely unrelated and discovered this:

I killed the process and then rebooted the system, and it comes back. That is the only process running under that user, and there is only one user account on my system, jnels, but when I run scans with Malware Bytes and Webroot SecureAnywhere, nothing comes up as suspect. Even more odd is that this user name when I search Google only shows up once, and it is about a possible exploit in Win10, otherwise it all comes back as UMDF not UMFD. At this point in time I have everything backed up and am ready to reinstall. Is that the safest course of action?

[TheReaperMan]

UMFD =  User-mode Driver Framework Host Process so in it self is not suspect.

 

but it can cause high memory use and could be what is causing your problems, due to a memory leak.

 

No other strange process running on the machine, nothing in the startup group etc?

[jnelsoninjax]

  On 22/05/2017 at 21:05, TheReaperMan said:

UMFD =  User-mode Driver Framework Host Process so in it self is not suspect.

 

but it can cause high memory use and could be what is causing your problems, due to a memory leak.

 

No other strange process running on the machine, nothing in the startup group etc?

Expand  

No, in fact when I terminated that instance, some of the issues I was having with Malware Bytes (Web Protection would not turn on) went away and now MWB is working fine.

[TheReaperMan]

Two copies of that file running are normal, if you check windows 10 it should  show like below:

 

 

 

I think is has something to do with window font cache service, from the top of my head

[jnelsoninjax]

OK, I see that now. I do not recall seeing it before, so that was my concern.

[TheReaperMan]

yeah, from my quick look up it is normal, but can sometimes bug out and cause a memory leak.

[LUTZIFER]

A Google search couldn't come up with anything?

[jnelsoninjax]

  On 22/05/2017 at 22:13, LUTZIFER said:

A Google search couldn't come up with anything?

Expand  

 

  On 22/05/2017 at 20:38, jnelsoninjax said:

Even more odd is that this user name when I search Google only shows up once, and it is about a possible exploit in Win10, otherwise it all comes back as UMDF not UMFD. At this point in time I have everything backed up and am ready to reinstall. Is that the safest course of action?

Expand