Windows 10: Suspicious Conhost.exe

Discus and support Suspicious Conhost.exe in AntiVirus, Firewalls and System Security to solve the problem; Hello Everyone.I was looking into process explorer when I found a new instance of conhost.exe that has no parent and runs with SYSTEM permissions.I... Discussion in 'AntiVirus, Firewalls and System Security' started by KennyGeneva8, Sep 17, 2021.

  1. KENNYGENEVA8
    KennyGeneva8 Win User

    Suspicious Conhost.exe


    Hello Everyone.I was looking into process explorer when I found a new instance of conhost.exe that has no parent and runs with SYSTEM permissions.I inspect my PC with Process explorer every now and then and I had never seen a solo instance of conhost let alone one with no parent.As far as I can tell it does not do anything but I am afraid that it could be a Remote Access Tool in disguise.I have a minidump of this process but I do not know how to attach it to this message.Neither Windows Defender nor MBAM detect this as malware.I was wondering if any specialists could explain why this solo proc

    :)
     
    KennyGeneva8, Sep 17, 2021
    #1
  2. JUSTINUA
    JustinUA Win User

    "Suspicious Software Blocked" rundll32.exe

    I keep getting this popup message from my TrendMicro that a suspicious software has been blocked and the name is rundll32.exe and it is from Microsoft. The message says "For your protection, the program named below was prevented from performing an action
    that could pose a security risk." I realize this is probably a virus but a full system scan on TrendMicro failed to detect anything. Anyone know what this could be and a remedy?
     
    JustinUA, Sep 17, 2021
    #2
  3. JSSSSSSSSS
    Jsssssssss Win User
    "Suspicious Software Blocked" rundll32.exe

    a) Please do not download anything from the link which was posted by
    Nwz     . It's one of the many SpyHunter pushing sites. SpyHunter is a commercial program which is not recommended here in Microsoft Community.

    The post by Nwz will soon either be deleted or at least the link will be removed.

    b) Since this is a detection by your AV TrendMicro it's best to ask either their support and/or their community.

    Contact Us | Trend Micro Help Center

    https://en.community.trendmicro.com/tm_en

    c) You might want to upload the "suspicious" file to any of the second opinion services listed here:

    List of Online File analyzers & services

    d) You might want to do steps 1, 2 and 5 in this multi-step removal guide:
    https://malwaretips.com/blogs/remove-potentially-unwanted-program/

    e) You might want to run a scan with:
    http://blog.emsisoft.com/2015/06/09/how-to-find-and-clean-malware-infections-with-emsisoft-emergency-kit/
     
    Jsssssssss, Sep 17, 2021
    #3
  4. RELDEL
    Reldel Win User

    Suspicious Conhost.exe

    Turn On Windows Defender Block Suspicious Behaviors in Windows 10  

    The DWORD is set to 0 and I cannot get the process you suggested in the "NOTE" portion of the tutorial to work. Two attached screen shoots will show the before and after attempts to change the Permissions necessary for access to the DWORD change.
    Suspicious Conhost.exe [​IMG]

    Suspicious Conhost.exe [​IMG]

    Access is denied. (Note-Protected folder in Defender is turned off)
     
    Reldel, Sep 17, 2021
    #4
Thema:

Suspicious Conhost.exe

Loading...

  1. Suspicious Conhost.exe - Similar Threads - Suspicious Conhost exe

  2. Conhost using more then 60% CPU

    in Windows 10 Gaming
    Conhost using more then 60% CPU: Hello, lately my laptop has been very loud, also it was hot after 2 minutes since I started it, I checked the task manager and figured out that my conhost.exe is using +60% CPU without anything running. I ran multiple scans but could not figure it out, tried everything that...

  3. conhost,exe using IMMENSE amount of memory.

    in Windows 10 Gaming
    conhost,exe using IMMENSE amount of memory.: conhost.exe as shown in the screenshot is using high amounts of memory. When I first booted up my laptop Lenovo Ideapad Gaming 3 it was at 2000 MEGABYTES! 2 WHOLE gigabytes of ram...Things I have tried:Step 1: Run the SFC.Click on the Start button, Type CMD.Right click on CMD...

  4. conhost,exe using IMMENSE amount of memory.

    in Windows 10 Software and Apps
    conhost,exe using IMMENSE amount of memory.: conhost.exe as shown in the screenshot is using high amounts of memory. When I first booted up my laptop Lenovo Ideapad Gaming 3 it was at 2000 MEGABYTES! 2 WHOLE gigabytes of ram...Things I have tried:Step 1: Run the SFC.Click on the Start button, Type CMD.Right click on CMD...

  5. Suspicious .exe program found in Program Files x86

    in Windows 10 Network and Sharing
    Suspicious .exe program found in Program Files x86: Hi, I found a folder in my Program Files x86 folder called MonthPigana. The only thing it contains is a .exe file called MonthPigana.exe. There seems to be nothing else I can find on my pc related to this program, nor could I find any information about it on the internet. I...

  6. Suspicious .exe program found in Program Files x86

    in Windows 10 Gaming
    Suspicious .exe program found in Program Files x86: Hi, I found a folder in my Program Files x86 folder called MonthPigana. The only thing it contains is a .exe file called MonthPigana.exe. There seems to be nothing else I can find on my pc related to this program, nor could I find any information about it on the internet. I...

  7. Suspicious .exe program found in Program Files x86

    in Windows 10 Software and Apps
    Suspicious .exe program found in Program Files x86: Hi, I found a folder in my Program Files x86 folder called MonthPigana. The only thing it contains is a .exe file called MonthPigana.exe. There seems to be nothing else I can find on my pc related to this program, nor could I find any information about it on the internet. I...

  8. CMD flashes after suspicious exe launch

    in AntiVirus, Firewalls and System Security
    CMD flashes after suspicious exe launch: Recently i was doing some research on additional software for a game. I saw some vidos on YT and decided to download it even though i knew it could be a shady one. After i downloaded it, i laucnhed .exe file and nothing happened at first. Then it started flashing cmd on my...

  9. Conhost programm isnt starting?

    in Windows 10 BSOD Crashes and Debugging
    Conhost programm isnt starting?: Hello guys, if i try to start a specific .exe the cmd pops up for 0.5 sec, closes immediately and thats it.. its not starting or something.. i tried to reset my Bios, i tried turn off my AV.. i tried Admin permission.. i actually tried everything and dont know how to fix...

  10. Conhost programm isnt starting?

    in Windows 10 Software and Apps
    Conhost programm isnt starting?: Hello guys, if i try to start a specific .exe the cmd pops up for 0.5 sec, closes immediately and thats it.. its not starting or something.. i tried to reset my Bios, i tried turn off my AV.. i tried Admin permission.. i actually tried everything and dont know how to fix...