Not what you were looking for? Ask our experts!
Reply
Newbie
Aphex
Posts: 1
Registered: ‎06-23-2011

Conime.exe shows up in Startup list - located at %windir%\system32\conime.exe - Virus? or no?

[ Edited ]

I've heard and seen mixed reviews about this same question - some about where its specifically located to differentiate whether its the backdoor trojan or it being the real program
I've scanned my system with MalwareBytes and Norton 360

Heres a few lists pertaining to my system:

 

Tasklist: tasklist - Pastebin.com
Processes List: processlist - Pastebin.com
Startup List: startup - Pastebin.com
MalwareBytes results: mbam-log-2011-06-21 (23-41-40) - Pastebin.com
Jotti-VirusScan: Jotti-Virusscan - Pastebin.com
VirusTotal: VirusTotal - Pastebin.com

 

------------------------------------------------------------------------------

A few things I noticed is that some have said that it depends where the Conime.exe is located, can anyone confirm this?

 

Super Spam Squasher
Bombastus
Posts: 1,795
Registered: ‎11-16-2009

Re: Conime.exe shows up in Startup list - located at %windir%\system32\conime.exe - Virus? or no?

conhost.exe is in the system32 folder.

 

Just right-click on it and select properties. Under the "Details" tab, you should see that it is a Microsoft file.

mp3jo
Posts: 1,471
Topics: 269
Kudos: 100
Solutions: 113
Registered: ‎06-27-2009

Re: Conime.exe shows up in Startup list - located at %windir%\system32\conime.exe - Virus? or no?