Windows 10: DataExchangeHost.exe, signs of rat?

I've noticed that DataExchangeHost.exe is running on my computer, and I'm unsure if this is a normal process or a sign of an infection. I've never used a virtual machine or an emulator before, so I'm a bit uncertain about what's going on.

:)

 

How to Remove RAT

I'm not sure if these Revenge-RAT v0.3 file detections have anything to do with what you are having:

What is this exe file? Is this file safe? Check here

When you're clicking on the red "Not trusted" you'll see more details and also links to respective VirusTotal scans.

Suggestion to run the Emsisoft Emergency Kit, see item 3 here:
List of Malware Removal Tools

Perhaps it's best to ask for free expert help in a specialized forum, see i.e. here:

• Emsisoft Help
• Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help - Virus, Trojan, Spyware, and Malware Removal Help
• I'm infected - What do I do now?

Might be best to do a clean reinstall, please do read through
this thread.

 

When does the Operating system verify the Authenticode Signatures for signed EXEs and signed DLLs?

When PE Files (exes, dlls etc.) are code signed using signtool, they can be verified to check if they have been authored by trusted publishers. In which scenarios does the Operating system actually verify signed EXEs and DLLs?

1. Are signatures of EXEs verified every time they are run?
2. If an EXE has a dynamically linked DLL, is the DLL's signature verified when the EXE is run?
   
3. If the EXE dynamically loads a DLL using LoadLibrary, is the DLL's signature verified when the EXE is run?
4. When an EXE requires elevated privilege (UAC), is the signature of the EXE and the DLL dependencies verified as well? (1-3)

If this questions belongs in a different category or community, please let me know. Thanks.

 

password sign in

Hi,

About your concern with typing the password after being idle, it is actually recommended to activate for security reasons.

If you wish to disable it, I suggest you to follow the below steps and check if it helps.

• Go to Settings.
• Click on Accounts.
• Click on Sign in options.
• On the right side, you will see required sign in.
• Change it to Never.

Let us know how it goes.