Windows 10: Suspicious MoUsoCoreWorker.exe, is it part of System or Skinwalker Virus?

Hello!I caught such a program on Process Explorer. I say I caught it because it suddenly turned red and closed itself, so I pulled PAUSE before it closed after long time waiting. I cannot access the PATH section and it does not provide any information in other tabs. Does anyone know what it is?I Googled it and there are some written about "Part of Windows etc." but the company name does not appear and the file does not allow me to follow itself. My computer getting slower, I was playing Skyrim V with good graphics but now I can only play at 20 fps. Is it causes that?I ADDED SCREENSHOT

:)

 

How to remove Gallery.exe (Virus)

I've been dealing with a virus named "Gallery.exe," and despite my best efforts, it keeps coming back. I've taken several steps to remove it, including formatting my disk, but it still manages to return. I was able to spot this suspicious exe running in my background, I tried my best to find it's location but it kept opening File Explorer with no signs of that exe. When I opened the exe location using Task Manager it opened 'C:\Users\[username]\AppData\Roaming". I could not see the exe in that location, I somehow opened the exe properties and saw the hidden option on it was greyed out. So I used the command "attrib -h -s /s /d" to unhide the file and then I was able to see it. I deleted the file but then, it kept coming back with every restart. Since then, my windows is going insane, the Windows anti-virus keeps deleting genuine files like, AMD Software, Google Chrome, and windows apps itself. My different apps started behaving weird and all.

What I've Tried So Far:

• Formatting the disk and performing a clean install of the operating system.
  
• Running multiple antivirus and anti-malware scans.
  
• Installing all available Windows updates and patches.
  

Unfortunately, none of these attempts have been successful in permanently removing this pesky virus.

System Information:

• Operating System: Windows 11
  

Specific Questions:

1. Has anyone encountered a similar virus issue and successfully removed it? If so, could you please share your experience and the steps you took?
   
2. Are there any known vulnerabilities or software that "Gallery.exe" may exploit to keep reappearing?
   

I'm open to any advice, suggestions, or guidance you can provide. My goal is to get my computer back to a virus-free state and ensure it remains that way.

Thank you in advance for your help and support. Your expertise is greatly appreciated!

Best regards, Rehan Ramay

 

"Suspicious Software Blocked" rundll32.exe

I keep getting this popup message from my TrendMicro that a suspicious software has been blocked and the name is rundll32.exe and it is from Microsoft. The message says "For your protection, the program named below was prevented from performing an action
that could pose a security risk." I realize this is probably a virus but a full system scan on TrendMicro failed to detect anything. Anyone know what this could be and a remedy?

 

NESHTA.A VIRUS REMOVED BUT .EXE NOT WORKING

Hi Khaled,

It is possible that you .exe is not working due to corrupted system files or account. To assist you better, kindly answer the following questions:

• Does this happen with a specific application or with all of your application?
• Have you tried creating a new admin account to check if the issue also with new account or only with the current account?

In the meantime, we suggest that you follow the steps in this article on how
to create a new admin account.

Let us know if you need further assistance.