Is this a virus?

Senden · 1 Nov 2013 at 10:16

Hope this is the right section but anyhow, seeing how everyone here seems to be pretty knowledgeable on computers, I was wondering if you all could take a look at this and tell me if you think this is suspicious?

Basically it's the conhost.exe which I'm worried about. It's only came up recently and I can't open file location, check properties of it, close process or anything. I noticed it a few days ago after I was fiddling around with VPN programs to let me play Battlefield 4 early.

Anyway, does this look like a virus? If so, any advice on the best course of action for getting rid of it? I'm running AVG virus and it hasn't picked it up.

SexyGreyFox · 1 Nov 2013 at 10:21

If you see something you don't understand then just Google it - https://www.google.co.uk/#q=conhost.exe&safe=off

I use a program called STARTER to look at programs running and from there it will Google search for you.

I also often go into Programs & Features from Control Panel to see if anything has been installed I don't know about.

Senden · 1 Nov 2013 at 10:23

Dimple said:
If you see something you don't understand then just Google it - https://www.google.co.uk/#q=conhost.exe&safe=off

I use a program called STARTER to look at programs running and from there it will Google search for you.

I also often go into Programs & Features from Control Panel to see if anything has been installed I don't know about.

I've googled it, it's a legit process but seeing how I can't see any information on it through the processes screen has left me a little skeptical.

And looking on here: http://www.file.net/process/conhost.exe.html has mixed views with a few claiming it's a trojan.

InertProtocol · 1 Nov 2013 at 10:49

More information here: http://www.howtogeek.com/howto/4996/what-is-conhost.exe-and-why-is-it-running/

Gav_881 · 1 Nov 2013 at 17:29

its legit mate

dunn2010 · 1 Nov 2013 at 17:47

Looks like the automatic update process

its fine

wuau - windows update automatic update I think it stands for going off memory.

demonix · 2 Nov 2013 at 15:13

dunn2010 said:
Looks like the automatic update process

its fine

wuau - windows update automatic update I think it stands for going off memory.

The OP is talking about the item at the bottom of the list (conhost.exe) not the one that is selected.

It looks like whatever it is is mimicking a legitimate windows process, but it's likely to be running from a different location (the temp folder in application data is the usual place) so checking any startup processes for anything that looks like a legit process but isn't running from the correct location.

Also, I suggest that you change your anti-virus since I don't rate AVG that highly (in fact I wouldn't rate that placebo at all).