Suspected file and startup in MSCONFIG: taskhost.exe


  1. Machariel
    Posts : 34
    Windows 7 Pro x64 OEM
       New #1

    Suspected file and startup in MSCONFIG: taskhost.exe


    Hi,

    MSCONFIG has now a startup entry called: c:\Users\Administrator\AppData\Local\Microsoft Windows\taskhost.exe

    I don't trust this. Why would MS Windows load such an executable via the registry (in HKCU). It didn't before and it doesn't load other surrogates this way. However, my Avast (I just ran it) didn't remove it or mentions it's unsafe. I'm not sure about that.

    Do I have more tougher scans or detection methods at my disposal? Or do you have other suggestions for me?

    Cheers!
      My Computer
    Quote Quote

  3. winini
    Posts : 51
    Ubuntu 18.04 LTS
       New #2

    Hmm. Starting off with some basic questions, did you install any programs or have any suspicious behavior on sites or any suspicious sites?
      My Computer
    Quote Quote

  4. Machariel
    Posts : 34
    Windows 7 Pro x64 OEM
    Thread Starter
       New #3

    winini said:
    Hmm. Starting off with some basic questions, did you install any programs or have any suspicious behavior on sites or any suspicious sites?
    Yes, good question. Youtube occasionally ran choppy for a few seconds. Knowing my system, this was dubious. On startup, said suspicious file ran at 15% CPU usage for a few seconds which was also suspicious. Also, yes, I did install programs. Lot of them.

    Edit: solved with Malwarebytes. Turns on a language learning helper utility I installed, which I downloaded from a torrent site, added a password stealer according to malwarebytes. And guess what, it was exactly the file and registry entry I suspected! MB removed it after the required reboot. I'm downloading bitdefender now for other types of scans.

    Although I solved it, i do wish you to to thank you most gracefully for your interest in helping out.
    Last edited by Machariel; 30 Jun 2017 at 05:26.
      My Computer
    Quote Quote

  6. winini
    Posts : 51
    Ubuntu 18.04 LTS
       New #4

    Your welcome! I'm starting to not trust avast...
      My Computer
    Quote Quote

  7. winini
    Posts : 51
    Ubuntu 18.04 LTS
       New #5

    Suspected file and startup in MSCONFIG: taskhost.exe


    Pressed post button... Oops [emoji53]
      My Computer
    Quote Quote

  8. Machariel
    Posts : 34
    Windows 7 Pro x64 OEM
    Thread Starter
       New #6

    winini said:
    Your welcome! I'm starting to not trust avast...
    The proof is in the pudding I'd say. I'm combining Malwarebytes with Bitdefenderr now.
      My Computer
    Quote Quote

  10. winini
    Posts : 51
    Ubuntu 18.04 LTS
       New #7

    Meh, good point
      My Computer
    Quote Quote

 

  Related Discussions
My problem is that my shutdown and booting speed can get slow and my laptop often fails to connect to the wifi network. I heard that one of the way to speed up the shutdown and booting process is to reduce a number of startup programs. So I did msconfig and de-selected some programs under...
Hello everyone, I have a HP ENVY 15, 3040nr with switchable graphics (product specifics available at this link). EXISTING SITUATION: Switching between AMD and INTEL always happened with no problems, when you switch off the notebook it will switch back on with the last selected configuration. ...
Hi, long story short - this morning i decided to pretend to know what i'm doing and tried to cut down on processes running on my lappy. Now i went into good ol' msconfig and messed around in the services tab. I turned stuff off that seemed rather useless. Afterwards rebootedand noticed that my...
I changed BitComet settings not to start up at starting up Windows. It is unchecked to start in Msconfig. It is not in the Startup folder in Start Menu. Why it is still starting up when starting Windows?
MSConfig - Startup items
in Performance & Maintenance

Hi all, I have windows 7 ultimate 32-bit installed on a Samsung N210 netbook with 2GB RAM, and have a question whether it's safe to un-check/disable the following items under 'Startup' tab via MSConfig: Synaptics Pointing Device Driver Intel(R) Common User Interface igfxtray.exe Intel(R)...
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 12:31.
Find Us