Myrdhinn Posted December 10, 2008 Share Posted December 10, 2008 Since superantispyware doesn't work, I put on latest spybot S&D and defs. Did a scan for jollies and it found this conhost.exe in /system32 and said it's "win32:sober". Just wondering if others have this file and if they get the same result. I bet it's a FP but always a chance it somehow got in with something else besides 6956. Link to comment https://www.neowin.net/forum/topic/708246-conhostexe/ Share on other sites More sharing options...
Brandon Live Veteran Posted December 10, 2008 Veteran Share Posted December 10, 2008 Well conhost.exe is a new binary on Win7. It hosts the command prompt window that cmd.exe runs in. Link to comment https://www.neowin.net/forum/topic/708246-conhostexe/#findComment-590250738 Share on other sites More sharing options...
Myrdhinn Posted December 10, 2008 Author Share Posted December 10, 2008 Thanks Brandon. Good to know it's a FP from spybot. Link to comment https://www.neowin.net/forum/topic/708246-conhostexe/#findComment-590252312 Share on other sites More sharing options...
Me Myself and I Posted December 11, 2008 Share Posted December 11, 2008 Well conhost.exe is a new binary on Win7. It hosts the command prompt window that cmd.exe runs in. i hope im not being inappropriate by posting in this thread, i thought that it would save me clutttering up the board any further by adding topics, when it already exists. if i should have posted this in a new thread, then apologies for that. Spybot also picking up conhost.exe for me, and i was pretty sure that it was a FP, so excluded it. i just checked my running processes, and there are 15 instances of conhost.exe running, why would this be? i havent run a cmd prompt window since yesterday. i am running Windows 7 6801 anyone know why this is? thanks Link to comment https://www.neowin.net/forum/topic/708246-conhostexe/#findComment-590257350 Share on other sites More sharing options...
Brandon Live Veteran Posted December 11, 2008 Veteran Share Posted December 11, 2008 I'm gonna have to guess it's a bug. Link to comment https://www.neowin.net/forum/topic/708246-conhostexe/#findComment-590257772 Share on other sites More sharing options...
Me Myself and I Posted December 11, 2008 Share Posted December 11, 2008 I'm gonna have to guess it's a bug. thanks for your reply Brandon :) a bug as in virus? or bug as in windows errors? im guessing you mean the latter i have terminated them all, with no adverse reaction so far anyway Link to comment https://www.neowin.net/forum/topic/708246-conhostexe/#findComment-590257792 Share on other sites More sharing options...
Alexoh Posted December 25, 2008 Share Posted December 25, 2008 Me too : Spybot reports conhost as a malware... Link to comment https://www.neowin.net/forum/topic/708246-conhostexe/#findComment-590316832 Share on other sites More sharing options...
Panda X Posted December 25, 2008 Share Posted December 25, 2008 There's conhost, dllhost, taskhost, and svchost now in 7. Link to comment https://www.neowin.net/forum/topic/708246-conhostexe/#findComment-590316914 Share on other sites More sharing options...
limok Posted December 25, 2008 Share Posted December 25, 2008 yeh taskhost is a cpu killer, so I removed it from the system32 folder. 7 working fine at the momo Link to comment https://www.neowin.net/forum/topic/708246-conhostexe/#findComment-590317072 Share on other sites More sharing options...
Brandon Live Veteran Posted December 25, 2008 Veteran Share Posted December 25, 2008 yeh taskhost is a cpu killer, so I removed it from the system32 folder. 7 working fine at the momo What??? Taskhost doesn't even do anything, it's whatever task is hosted there that you must have had a problem with. You can't just delete the file, I'm assuming WFP put it back as soon as you deleted it (otherwise your system would be in a ridiculously broken state). If you're having problems with a task eating CPU, you should find out what task it is and disable it. After you submit the hung app bug report of course. Link to comment https://www.neowin.net/forum/topic/708246-conhostexe/#findComment-590317772 Share on other sites More sharing options...
limok Posted December 25, 2008 Share Posted December 25, 2008 well I have restarted multiple times and taskhost hasn't popped up in the processes tab as of yet. All my apps seem to be working fine. taskhost used to pop up and take 50% cpu (dualcore) with no apps running in background. Once I end tasked it it was another 20 mins or so when it popped up again. Link to comment https://www.neowin.net/forum/topic/708246-conhostexe/#findComment-590317810 Share on other sites More sharing options...
MagicAndre1981 Posted December 25, 2008 Share Posted December 25, 2008 Start processExplorer as admin and move the mouse over the taskhost.exe and you'll see which tasks are being started from the exe. Link to comment https://www.neowin.net/forum/topic/708246-conhostexe/#findComment-590318134 Share on other sites More sharing options...
y_notm Posted December 25, 2008 Share Posted December 25, 2008 Start processExplorer as admin and move the mouse over the taskhost.exe and you'll see which tasks are being started from the exe. Or just open task scheduler and click view running tasks. Link to comment https://www.neowin.net/forum/topic/708246-conhostexe/#findComment-590318156 Share on other sites More sharing options...
limok Posted December 26, 2008 Share Posted December 26, 2008 looked it up and its got something to do with racengn.dll Link to comment https://www.neowin.net/forum/topic/708246-conhostexe/#findComment-590318600 Share on other sites More sharing options...
MagicAndre1981 Posted December 26, 2008 Share Posted December 26, 2008 looked it up and its got something to do with racengn.dll this is the Reliability analysis engine. Link to comment https://www.neowin.net/forum/topic/708246-conhostexe/#findComment-590319532 Share on other sites More sharing options...
Recommended Posts