RoDaBaFilms Posted October 7, 2016 ID:1065803 Share Posted October 7, 2016 I have been working on various console programs for clients and servers. But when I booted up my pc this day and ran one of my console applications it did nothing. A waited for a while and suddenly this popped up: Windows Error Reporting Message (WerFault.exe) Also I looked into Task Manager for something weird and I did: Modified conhost.exe So I think that a virus corrupted the console host application and broke my whole PC. When pressing cancel the last thing that pops up is this: Console Application Crash Error But without the good conhost.exe I can't do anything on my PC. Any help is appreciated. Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted October 7, 2016 ID:1065810 Share Posted October 7, 2016 Hello and Link to post Share on other sites More sharing options...
RoDaBaFilms Posted October 8, 2016 Author ID:1065922 Share Posted October 8, 2016 FRST.txt Addition.txt Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted October 9, 2016 ID:1065995 Share Posted October 9, 2016 Are you familiar with this? Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\pwdonstartup.jar [2016-10-07] () Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\server.jar [2016-09-28] () Link to post Share on other sites More sharing options...
RoDaBaFilms Posted October 9, 2016 Author ID:1066001 Share Posted October 9, 2016 (edited) Yes, I put those two files in the startup But I removed the pwdonstartup.jar because it wasn't working properly Edited October 9, 2016 by RoDaBaFilms Changes to PC Link to post Share on other sites More sharing options...
TwinHeadedEagle Posted October 9, 2016 ID:1066017 Share Posted October 9, 2016 Your computer isn't infected. Link to post Share on other sites More sharing options...
RoDaBaFilms Posted October 9, 2016 Author ID:1066020 Share Posted October 9, 2016 Why are my console applications broken then? Because I still can't access my cmd, or other console applications. Link to post Share on other sites More sharing options...
RoDaBaFilms Posted October 9, 2016 Author ID:1066021 Share Posted October 9, 2016 EDIT: I found the virus: Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 9, 2016 Root Admin ID:1066041 Share Posted October 9, 2016 (edited) Hello @RoDaBaFilms That file did not exist at the time you provided the logs. It is also not a virus. If you upload it to virustotal.com they will scan the file for you. At most it's probably a batch file converted to an exe, but again. It was not there or the logs were edited to remove it being shown. You can also do a repair install of Windows 7 to verify that all the Operating System files are valid. How to Do a Repair Install to Fix Windows 7 Is there anything else we can assist you with ? Edited October 9, 2016 by AdvancedSetup Link to post Share on other sites More sharing options...
RoDaBaFilms Posted October 10, 2016 Author ID:1066110 Share Posted October 10, 2016 (edited) I found a copy of the original conhost.exe in a hidden folder inside of %temp% and found out that the other conhost.exe was not only for breaking console applications but also started at startup and infected other exe files, but the virus wasn't able to get access to those, so I'm very lucky This virus should now be 100% off my system and my system is back to what is was. Edited October 10, 2016 by RoDaBaFilms Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 11, 2016 Root Admin ID:1066272 Share Posted October 11, 2016 Okay then. If there is nothing else I'll go ahead and close your topic now. Thank you and take care Ron Link to post Share on other sites More sharing options...
Recommended Posts