Conhost.exe cannot be terminated from Task Manager at system reboot

Page 1 of 2 12 LastLast

  1. Posts : 114
    Windows 7 Pro 64-bit Service Pack 1
       #1

    Conhost.exe cannot be terminated from Task Manager at system reboot


    Every time I reboot my Win 7 Pro, I have high system resources and disk usage for at least 5 minutes. Looking into the problem I find that, using task manager, there's a conhost.exe running. I cannot terminate this task from the task manager window. However, if I go into Resources, from Task Manager, I find the only way to terminate this task is by terminating the task tree.

    Is there any way I can find what process triggers this program at start up? I wouldn't think a conhost.exe running immediately at start up and using high system resources would be a good thing!
      My Computer


  2. Posts : 18,415
    windows 7 home 64bit
       #2

    Hi there ... Read the Link below .. You may have to many programs running at Startup !

    What is conhost.exe and Why Is It Running?
      My Computer


  3. Posts : 114
    Windows 7 Pro 64-bit Service Pack 1
    Thread Starter
       #3

    Thanks for the link.

    I can see the way it works and usually, in the past, conhost only ran when some other program (like BOINC) used it. Then, if BOINC ended its process, I could terminate conhost directly from the Task Manager without any problem.

    However, in this case, conhost is running at start up and using vast memory and HDD resources for up to 5 minutes or so. Ans in this case, I can't terminate it from Tast Manager. I have to go through the Resource Monitor and terminate the task tree. I cannot see what resources conhost is using at this point either.

    This just started up a week or so ago and I'm told that conhost running could also be a bad thing as a rootkit, malware, or virus could be using it. So far, MalwareBytes and Norton 2013 have come up clean so I'm at a loss as to why this is running so soon after system boot.

    I've tried to look for the 'tree' but conhost does not return anything. Is there anything else out there that would let me see the tree so I can maybe figure out what's triggering it?
      My Computer


  4. Posts : 18,415
    windows 7 home 64bit
       #4

    Hi there ... As you say this could be some thing else ... So i have asked a System Security Expert to have a look at this post ... You will get excellent advise from him .. Better to be safe than sorry
      My Computer


  5. Posts : 114
    Windows 7 Pro 64-bit Service Pack 1
    Thread Starter
       #5

    Thanks. I will look forward to what they have to say.
      My Computer


  6. Posts : 2,470
    Windows 7 Home Premium
       #6

    rzn6jw,

    Did you look at the conhost.exe file properties, and see if it is running from the system32 folder?
    Is it a Microsoft file?

    Please post the General and Detail tabs of the file's Properties.
    To post the images, try using the Snipping Tool:
    How to Use the Snipping Tool in Vista
    (Also applies to Windows 7)

    Also, is your Windows 7 system 32-bit, or 64-bit?
      My Computer


  7. Posts : 18,415
    windows 7 home 64bit
       #7

    Thanks for posting Cottonball
      My Computer


  8. Posts : 114
    Windows 7 Pro 64-bit Service Pack 1
    Thread Starter
       #8

    Yes, it looks like it's coming from the system 32 folder (I'm running 64 bit Win 7 Pro).
    Attached Thumbnails Attached Thumbnails Conhost.exe cannot be terminated from Task Manager at system reboot-conhost.jpg   Conhost.exe cannot be terminated from Task Manager at system reboot-conhost1.jpg  
      My Computer


  9. Posts : 2,470
    Windows 7 Home Premium
       #9

    Size = 0 Bytes!!! Oh boy!!

    Please go to the ComboFix Download

    Save ComboFix.exe to the Desktop

    Disable your AntiVirus and AntiSpyware applications as they will interfere with ComboFix.
    Info: http://www.techsupportforum.com/secu...lications.html

    Double click combofix.exe and follow the prompts.
    Please be patient, it will take a while.

    When finished, it produces a log.

    Please include the C:\ComboFix.txt in your reply.


    NOTE: If you encounter a message "Illegal operation attempted on registry key that has been marked for deletion" and no programs run, please reboot to resolve the error.
      My Computer


  10. Posts : 114
    Windows 7 Pro 64-bit Service Pack 1
    Thread Starter
       #10

    Sorry this is taking so long. I've been working long hours and the only time I'll have to do this is tomorrow evening (Wednesday the 2nd). Will post the data then.
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 21:55.
Find Us