Conhost.exe opening and closing, possible virus?

[Randysaysmoo]

I'm having a problem with a program called "conhost.exe", the program is constantly opening and closing itself causing the windows to become unselected. I've tried to research a fix this but the majority of the cases me here. So rather then use the fixes given to other people I felt it safer to my own.

This may or may not be relevant as of lately malwarebytes has been acting strangely. It won't allow me to update it or use the scans unless I first restart the program. I have tried re-installing it but didn't seem to help. This has been going on for awhile now but this new conhost.exe problem just started today after I restated my computer because it was randomly freezing up on me. 

 

After reviewing other cases I went ahead and took the first step and have added the MalwareBytes scan log to this post.

 

Thank you.

ScanLog.txt

[Randysaysmoo]

And here's the FRST logs.

FRST.txt

Addition.txt

[deeprybka]

Hi &

My name is Jürgen and I will be assisting you with your Malware related problems.

Before we move on, please read the following points carefully.

• My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.
• Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
• Perform everything in the correct order. Sometimes one step requires the previous one.
• If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
• Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
• Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
• If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
• Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.

P2P/Piracy Warning:

• If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.
• Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.
• If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now and read the policy on Piracy.

Step 1

Please download the ESET Online Scanner and save it to your Desktop.

• Disable the realtime-protection of your antivirus and anti-malware programs because they might interfere with the scan.
• Start esetsmartinstaller_enu.exe with administartor privileges.
• Select the option Yes, I accept the Terms of Use and click on Start.
• Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
• Now click on Advanced Settings and select the following:
  • Scan for potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth Technology
• Click on Start. The virus signature database will begin to download. This may take some time.
• When completed the Online Scan will begin automatically.

  Note: This scan might take a long time! Please be patient.

• When completed select Uninstall application on close if you so wish, but make sure you copy the logfile first!
• Now click on Finish
• A log file is created at C:\Program Files\ESET\EsetOnlineScanner\log.txt.

  Copy and paste the content of this log file in your next reply.

Note: Do not forget to re-enable your antivirus application after running the above scan!

[Randysaysmoo]

Thank you for the reply, here is the info you requested.

 

C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\sppsm.dll.vir a variant of MSIL/Toolbar.Linkury.G potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\spusm.dll.vir a variant of MSIL/Toolbar.Linkury.G potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\srbs.dll.vir a variant of MSIL/Toolbar.Linkury.C potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\srbu.dll.vir a variant of MSIL/Toolbar.Linkury.F potentially unwanted application

C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\srpt.dll.vir a variant of MSIL/Toolbar.Linkury.G potentially unwanted application

C:\Users\Randy\Desktop\Pixel Piracy\steam_api.dll a variant of Win32/Packed.VMProtect.ABD trojan

C:\Windows\Installer\31b9e89.msi a variant of MSIL/Toolbar.Linkury.G potentially unwanted application

C:\Windows\Installer\MSI390B.tmp-\sppsm.dll a variant of MSIL/Toolbar.Linkury.G potentially unwanted application

C:\Windows\Installer\MSI390B.tmp-\spusm.dll a variant of MSIL/Toolbar.Linkury.G potentially unwanted application

C:\Windows\Installer\MSI390B.tmp-\srbs.dll a variant of MSIL/Toolbar.Linkury.C potentially unwanted application

 

[deeprybka]

Hi,

 

2014-08-07 15:42 - 2014-05-02 16:19 - 00000000 ____D () C:\Users\Randy\AppData\Local\SKIDROW

P2P/Piracy Warning:

• If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.
• Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.
• If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now and read the policy on Piracy.

[AdvancedSetup]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!