Search the Community
Showing results for tags 'print driver host'.
Found 2 results
I managed to somehow infect myself with the "Print driver host/wmcagent" virus(es). As you can see in the pictures, these are running in my task manager. When attempting to close them, it says "Access Denied," the same applies if I try to open their location. I have found their folder locations, however I get the same error when attempting to delete them. I've used RogueKiller, Malwarebytes, Avast, McAfee, CCleaner, MBAR, AdwCleaner, and FRST. At this point, I'm desperate to do anything to get this thing off of my computer. This error shows for all of the folders shown in the screenshot above, and is the same error that occurs when attempting to end the process. I've tried changing permissions, however even that won't solve the issue. Any help, guys?
Have a nearly identical problem to the one in the linked topic above. Was installing DVD editor/menu creation tool that supposedly worked with a legitimate editing tool. Can post link to the site that sold the malware alongside the legitmate tool if you think it'd help to educate people moving forward. Not sure if you have a running list of programs/sites to not download stuff from. Anyway some of the specific file and folder names are different but the obviously fake TOSHIBA CORPORATION ownership, and weird names (Print driver host, Windows Process Manager, etc.) were the same. Was able to delete some of the registry keys, and run MBAR earlier today (see attached logs) but the malicious processes and folders are still alive even after MBAR supposedly deleted a bunch more registry keys and deleted some files. Curiously MBAR didn't find the three malicious folders in my Appdata\Local (see screenshot) mbar-log-2018-01-28 (08-08-46).txt system-log.txt malwarefolders.pdf