Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Suspected file and startup in MSCONFIG: taskhost.exe

15 Jun 2017   #1
Machariel

Windows 7 Home Premium x64
 
 
Suspected file and startup in MSCONFIG: taskhost.exe

Hi,

MSCONFIG has now a startup entry called: c:\Users\Administrator\AppData\Local\Microsoft Windows\taskhost.exe

I don't trust this. Why would MS Windows load such an executable via the registry (in HKCU). It didn't before and it doesn't load other surrogates this way. However, my Avast (I just ran it) didn't remove it or mentions it's unsafe. I'm not sure about that.

Do I have more tougher scans or detection methods at my disposal? Or do you have other suggestions for me?

Cheers!


My System SpecsSystem Spec
.
15 Jun 2017   #2
winini

Windows XP Professional 32 bit, Windows 10 Home 64 bit
 
 

Hmm. Starting off with some basic questions, did you install any programs or have any suspicious behavior on sites or any suspicious sites?
My System SpecsSystem Spec
15 Jun 2017   #3
Machariel

Windows 7 Home Premium x64
 
 

Quote   Quote: Originally Posted by winini View Post
Hmm. Starting off with some basic questions, did you install any programs or have any suspicious behavior on sites or any suspicious sites?
Yes, good question. Youtube occasionally ran choppy for a few seconds. Knowing my system, this was dubious. On startup, said suspicious file ran at 15% CPU usage for a few seconds which was also suspicious. Also, yes, I did install programs. Lot of them.

Edit: solved with Malwarebytes. Turns on a language learning helper utility I installed, which I downloaded from a torrent site, added a password stealer according to malwarebytes. And guess what, it was exactly the file and registry entry I suspected! MB removed it after the required reboot. I'm downloading bitdefender now for other types of scans.

Although I solved it, i do wish you to to thank you most gracefully for your interest in helping out.
My System SpecsSystem Spec
.

29 Jun 2017   #4
winini

Windows XP Professional 32 bit, Windows 10 Home 64 bit
 
 

Your welcome! I'm starting to not trust avast...
My System SpecsSystem Spec
29 Jun 2017   #5
winini

Windows XP Professional 32 bit, Windows 10 Home 64 bit
 
 
Suspected file and startup in MSCONFIG: taskhost.exe

Pressed post button... Oops Suspected file and startup in MSCONFIG: taskhost.exe
My System SpecsSystem Spec
30 Jun 2017   #6
Machariel

Windows 7 Home Premium x64
 
 

Quote   Quote: Originally Posted by winini View Post
Your welcome! I'm starting to not trust avast...
The proof is in the pudding I'd say. I'm combining Malwarebytes with Bitdefenderr now.
My System SpecsSystem Spec
14 Jul 2017   #7
winini

Windows XP Professional 32 bit, Windows 10 Home 64 bit
 
 

Meh, good point
My System SpecsSystem Spec
Reply

 Suspected file and startup in MSCONFIG: taskhost.exe




Thread Tools




Similar help and support threads
Thread Forum
Msconfig Normal Startup or Selective Startup
My problem is that my shutdown and booting speed can get slow and my laptop often fails to connect to the wifi network. I heard that one of the way to speed up the shutdown and booting process is to reduce a number of startup programs. So I did msconfig and de-selected some programs under...
Performance & Maintenance
BSOD at startup and waking up from sleep, suspected Video Card Issue
Hello everyone, I have a HP ENVY 15, 3040nr with switchable graphics (product specifics available at this link). EXISTING SITUATION: Switching between AMD and INTEL always happened with no problems, when you switch off the notebook it will switch back on with the last selected configuration. ...
BSOD Help and Support
laptop FN key function partially working. suspected msconfig/services
Hi, long story short - this morning i decided to pretend to know what i'm doing and tried to cut down on processes running on my lappy. Now i went into good ol' msconfig and messed around in the services tab. I turned stuff off that seemed rather useless. Afterwards rebootedand noticed that my...
General Discussion
Bitcomet is not in msconfig startup and startup but still starts up!
I changed BitComet settings not to start up at starting up Windows. It is unchecked to start in Msconfig. It is not in the Startup folder in Start Menu. Why it is still starting up when starting Windows?
Software
MSConfig - Startup items
Hi all, I have windows 7 ultimate 32-bit installed on a Samsung N210 netbook with 2GB RAM, and have a question whether it's safe to un-check/disable the following items under 'Startup' tab via MSConfig: Synaptics Pointing Device Driver Intel(R) Common User Interface igfxtray.exe Intel(R)...
Performance & Maintenance


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 17:10.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App