Fake dllhost.exe malware keeps coming back

Status
Not open for further replies.

piotr25691

New Member
Thread author
May 29, 2022
2
This executable placed in my AppData uses up 20-25% CPU power constantly, and it seems like it automatically puts itself back when I remove it.
Help me please
 

Attachments

  • 1653809916677.png
    1653809916677.png
    46 KB · Views: 30
  • Addition.txt
    21.6 KB · Views: 27
  • FRST.txt
    54.3 KB · Views: 26

nasdaq

Moderator
Verified
Staff Member
Nov 5, 2019
1,425
Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

Clean the Windows Defender Quarantine folder.

Comment: Delete/Restore quarantined files.

How to: Delete quarantined files.

Follow the directives on the page to delete all the files in the quarantine folder.

Restart the computer when done.
<<<>>>


Please post the Fixlog.txt and let me know what problem persists.
 

Attachments

  • Fixlist.txt
    1.8 KB · Views: 28

piotr25691

New Member
Thread author
May 29, 2022
2
Seems like doing that and treating it with MalwareBytes done the trick, thanks!
 

Attachments

  • Fixlog.txt
    6.5 KB · Views: 25
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top