Windows 10: /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihost64.exe Malware

Discus and support /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihost64.exe Malware in Windows 10 Software and Apps to solve the problem; Hi, so recently I got some malware, and it spam messages links on social media. I found the file location... Discussion in 'Windows 10 Software and Apps' started by NAVY 108, Jan 9, 2022.

  1. NAVY 108
    NAVY 108 Win User

    /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihost64.exe Malware


    Hi, so recently I got some malware, and it spam messages links on social media. I found the file location /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihost64.exe and I can't get rid of it. Malwarebytes tries to delete it, but then when I restart my PC it pops back up. I tried ending the process, and then completely deleting it, but then it reappears. I also tried to restore the PC to a time when I KNOW it wasn't there, and it pops back up. Does anyone know a way I can remove it?Thanks

    :)
     
    NAVY 108, Jan 9, 2022
    #1
  2. KNE THOMPSON
    kne thompson Win User

    Suspected infection in AppData\Roaming\.exe

    Original title: AppData\Roaming\.exe

    Can someone tell me what this is?

    • C:\Users\knenina\AppData\Roaming\522001c91a0ba0c96d004d78\522001c91a0ba0c96d004d78.exe

    My Antivirus said Application.Downloader.AAB (Suspected infection) but then it also says

    "Cannot open file" error occurred: The "Cannot open file" error message means that the scanner was unable to open a file and that this file was not scanned. You can normally ignore this error message as there are many reasons for this message
    that do not imply a security threat, including:

    • The file was a system file. System files are protected by the operation system by design. You can ignore this message in this case.
    • You do not have permission to read the file. To scan the file, log in with a user account with sufficient permissions (for example the computer's administrator account) and rescan.
    • The file was in use by an application when the scan was performed. To scan this file, close all applications and rescan.
    Said I have to manually remove i'm unsure how to do that exactly.

    Or is this a valid file? This just appeared today.
     
    kne thompson, Jan 9, 2022
    #2
  3. JAMIETHORNHILL
    jamiethornhill Win User
    users\appdata\roaming\microsoft\windows\werfcedh\erdbgirc.exe

    i have this message and not sure what to do

    users\appdata\roaming\microsoft\windows\werfcedh\erdbgirc.exe
     
    jamiethornhill, Jan 9, 2022
    #3
  4. SHAWN 'CMDR' KEENE [MVP]
    Shawn 'Cmdr' Keene [MVP] Win User

    /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihost64.exe Malware

    Windows cannot find C:/Users/User/Appdata/Roaming/Microsoft/Windows...

    That looks very much like a virus to me.

    I would open the C:\Users\JeroCC\AppData\Roaming\Microsoft\Windows folder, then DELETE the folder named BTFVBFGF

    Then I would run a full scan with your antivirus program.

    As well as open the run box and type MRT to run the built-in Malware Removal Tool.
     
    Shawn 'Cmdr' Keene [MVP], Jan 9, 2022
    #4
Thema:

/Users/%appdata%/Roaming/Microsoft/Telemetry/Sihost64.exe Malware

Loading...

  1. /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihost64.exe Malware - Similar Threads - Users %appdata% Roaming

  2. sihost64.exe virus?

    in Windows 10 Gaming
    sihost64.exe virus?: My antivirus avast marks ths file: C:/windows/system32/microsoft/libs/sihost64.exe as trojan and ijfected fileasking because its in system32 folder. https://answers.microsoft.com/en-us/windows/forum/all/sihost64exe-virus/cbb55d6c-178e-40b3-b76d-2c85bdfbf6cc

  3. sihost64.exe virus?

    in Windows 10 Software and Apps
    sihost64.exe virus?: My antivirus avast marks ths file: C:/windows/system32/microsoft/libs/sihost64.exe as trojan and ijfected fileasking because its in system32 folder. https://answers.microsoft.com/en-us/windows/forum/all/sihost64exe-virus/cbb55d6c-178e-40b3-b76d-2c85bdfbf6cc

  4. miner virus sihost64.exe - telemetry - how do i remove it?

    in Windows 10 Gaming
    miner virus sihost64.exe - telemetry - how do i remove it?: i recently contacted this miner virus and i could not remove it with eset antivirus or windows defender . at the moment im running a full scan with Microsoft Safety Scanner 1.377 - and i hope it will fix it but... while the scanning is happening the virus popped up 3 or 4...

  5. miner virus sihost64.exe - telemetry - how do i remove it?

    in Windows 10 Software and Apps
    miner virus sihost64.exe - telemetry - how do i remove it?: i recently contacted this miner virus and i could not remove it with eset antivirus or windows defender . at the moment im running a full scan with Microsoft Safety Scanner 1.377 - and i hope it will fix it but... while the scanning is happening the virus popped up 3 or 4...

  6. miner virus sihost64.exe - telemetry - how do i remove it?

    in AntiVirus, Firewalls and System Security
    miner virus sihost64.exe - telemetry - how do i remove it?: i recently contacted this miner virus and i could not remove it with eset antivirus or windows defender . at the moment im running a full scan with Microsoft Safety Scanner 1.377 - and i hope it will fix it but... while the scanning is happening the virus popped up 3 or 4...

  7. SIHOST64.exe...

    in AntiVirus, Firewalls and System Security
    SIHOST64.exe...: Hi, I recently found a virus in my computer, I think I block it momentarily with windows defender, but at each restart it regenerates, it is located in the directory C:\Windows\System32\config\systemprofile\AppData\Roaming\Google\Telemetry/Sihost64.exei have no idea how to...

  8. /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihos t64.exe Malware

    in AntiVirus, Firewalls and System Security
    /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihos t64.exe Malware: Hi, so recently I got some malware, and it spam messages links on social media. I found the file location /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihost64.exe and I can't get rid of it. Malwarebytes tries to delete it, but then when I restart my PC it pops back up. I...

  9. /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihos t64.exe Malware

    in Windows 10 Gaming
    /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihos t64.exe Malware: Hi, so recently I got some malware, and it spam messages links on social media. I found the file location /Users/%appdata%/Roaming/Microsoft/Telemetry/Sihost64.exe and I can't get rid of it. Malwarebytes tries to delete it, but then when I restart my PC it pops back up. I...

  10. c:\User\Users\Appdata\Roaming\shiersg

    in Windows 10 BSOD Crashes and Debugging
    c:\User\Users\Appdata\Roaming\shiersg: Dear Team,since last days When i open any application like VLC, photoshop ,Word ,Excel etc, there will be a command window opening suddenly as C:\User\Users\Appdata\Roaming\shiersg , following to this my system is slowing down automatically and shows weird response, Can...