Windows 10: SIHOST64.exe Mining Trojan

Discus and support SIHOST64.exe Mining Trojan in AntiVirus, Firewalls and System Security to solve the problem; Hi. I recently found a virus in my computer, sihost64 and sihost32 running on the background. I dont know how to remove it. Please help me, especially... Discussion in 'AntiVirus, Firewalls and System Security' started by andhika058, Nov 4, 2022.

  1. ANDHIKA058
    andhika058 Win User

    SIHOST64.exe Mining Trojan


    Hi. I recently found a virus in my computer, sihost64 and sihost32 running on the background. I dont know how to remove it. Please help me, especially @_AW_ who was helped people with the same problem.Here i attached my FRSTlog.https://drive.google.com/drive/folders/1FdKVTFNAIGp7u6IoFMkKa_PEXNuESB3V?usp=share_linkThank you.

    :)
     
    andhika058, Nov 4, 2022
    #1
  2. _AW_
    _AW_ Win User

    /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihost64.exe Malware

    Hi Navy, that has definitely fixed it. Here's the VirusTotal report for the malware (sumcheck32.exe) removed that was writing sihost64.exe

    VirusTotal

    If you could mark the post that answered/resolved the issue, it would be much appreciated.
     
    _AW_, Nov 4, 2022
    #2
  3. NAVY 108
    NAVY 108 Win User
    /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihost64.exe Malware

    Fixlog.zip

    I really think it's worked, but I'm not 100% sure. For one, the Telemetry Folder no longer exists, and I can't find sihost64.exe, so thanks!

    Edit: For some reason it's still not gone, since it still sends phishing links to my friends on discord
     
    NAVY 108, Nov 4, 2022
    #3
  4. SERJZARNESCU
    serjzarnescu Win User

    SIHOST64.exe Mining Trojan

    miner virus sihost64.exe - telemetry - how do i remove it?

    i did run a full scan with administrator privileges on Windos Defender and it only blocks the miners that are created by the virus that are called sihost64 and or sihost32 and they are located in /appdata in the telemetry folder by microsoft. so it doesnt resolve the core problem, it kills only those soldiers that are created by the virus!

    I also run a scannow and it repaired some .net framework things but thats it. i also run a chkdsk and no errors there.

    I instaled then a trial version of eset antivirus and it didnt resolve anything. I also run it on full admin privilege - FULL SCAN

    Now im running MICROSOFT SAFETY SCANNER 1.377 on full admin privilege and give it a FULL SCAN after the quick scan didnt find a problem.

    9 mil files scan and found 33 infected files so i will let it run till it finishes and see if it resolves the problem

    the "sihost32.exe" and "sihost64.exe" are still created and blocked while this scan is performed - this worries me that this scan will not resolve the problem

    I checked the Startup and is all good - i uninstaled alot of what it tought are "suspicious" or "problematic" software i use in my 3d artist workflow and so my system runs preety clean now.

    for more details about the virus i found this on the internet - preety acurate - Automated Malware Analysis Report for sihost64.exe - Generated by Joe Sandbox
     
    serjzarnescu, Nov 4, 2022
    #4
Thema:

SIHOST64.exe Mining Trojan

Loading...

  1. SIHOST64.exe Mining Trojan - Similar Threads - SIHOST64 exe Mining

  2. sihost64.exe virus?

    in Windows 10 Gaming
    sihost64.exe virus?: My antivirus avast marks ths file: C:/windows/system32/microsoft/libs/sihost64.exe as trojan and ijfected fileasking because its in system32 folder. https://answers.microsoft.com/en-us/windows/forum/all/sihost64exe-virus/cbb55d6c-178e-40b3-b76d-2c85bdfbf6cc

  3. sihost64.exe virus?

    in Windows 10 Software and Apps
    sihost64.exe virus?: My antivirus avast marks ths file: C:/windows/system32/microsoft/libs/sihost64.exe as trojan and ijfected fileasking because its in system32 folder. https://answers.microsoft.com/en-us/windows/forum/all/sihost64exe-virus/cbb55d6c-178e-40b3-b76d-2c85bdfbf6cc

  4. miner virus sihost64.exe - telemetry - how do i remove it?

    in Windows 10 Software and Apps
    miner virus sihost64.exe - telemetry - how do i remove it?: i recently contacted this miner virus and i could not remove it with eset antivirus or windows defender . at the moment im running a full scan with Microsoft Safety Scanner 1.377 - and i hope it will fix it but... while the scanning is happening the virus popped up 3 or 4...

  5. SIHOST64.exe...

    in AntiVirus, Firewalls and System Security
    SIHOST64.exe...: Hi, I recently found a virus in my computer, I think I block it momentarily with windows defender, but at each restart it regenerates, it is located in the directory C:\Windows\System32\config\systemprofile\AppData\Roaming\Google\Telemetry/Sihost64.exei have no idea how to...

  6. SIHOST64.exe Mining Trojan @_AW_ Please read

    in AntiVirus, Firewalls and System Security
    SIHOST64.exe Mining Trojan @_AW_ Please read: Assuming you are _AW_, who helped the OP user in this articlehttps://answers.microsoft.com/en-us/windows/forum/all/usersappdataroamingmicrosofttelemetrysihost64exe/bce0a1d5-db3a-493e-bbda-9b34a242d311?page=1, I am facing the same issue, downloading an unremovable trojan...

  7. /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihos t64.exe Malware

    in AntiVirus, Firewalls and System Security
    /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihos t64.exe Malware: Hi, so recently I got some malware, and it spam messages links on social media. I found the file location /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihost64.exe and I can't get rid of it. Malwarebytes tries to delete it, but then when I restart my PC it pops back up. I...

  8. /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihos t64.exe Malware

    in Windows 10 Gaming
    /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihos t64.exe Malware: Hi, so recently I got some malware, and it spam messages links on social media. I found the file location /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihost64.exe and I can't get rid of it. Malwarebytes tries to delete it, but then when I restart my PC it pops back up. I...

  9. /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihos t64.exe Malware

    in Windows 10 Software and Apps
    /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihos t64.exe Malware: Hi, so recently I got some malware, and it spam messages links on social media. I found the file location /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihost64.exe and I can't get rid of it. Malwarebytes tries to delete it, but then when I restart my PC it pops back up. I...

  10. Reoccuring pcds32.exe trojan

    in AntiVirus, Firewalls and System Security
    Reoccuring pcds32.exe trojan: Hello, I've been getting a lot of notifications from bitdefender that i have viruses named: pcds32.exe, pcds64.exe, and rv32.exe. Bitdefender usually finds it in my temp folder and it'll keep disinfecting it and blocking it and I've manually deleted it as well but it keeps...