Poweliks infection

[Chaython]

Every time I open process hacker, a DLLHOST is just closing

C:\WINDOWS\system32\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

If I search this ID, it's commonly associated with the powerlinks trojan.

Bleeping computers recommend FRST, but using FRST, how can you determine there's something malicious?

MB 3.71 / MBAR / Windows Defender / KVRT / NPE

Don't detect any viruses

[Chaython]

So am I just being paranoid? It's quite an old trojan[2014] is it still active?

I am on WIndows 10 1903, and if I go to the reg there's only 2 keys

Thumbnail Cache Class Factory for Out of Proc Server

{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}

So it seems it's just the thumbnail cache acting normally.

[exile360]

Greetings,

Both Malwarebytes (with rootkit scanning enabled under Settings>Protection in the Scan Options section) as well as Malwarebytes Anti-Rootkit are quite proficient at detecting Poweliks and it is quite an old threat so I expect it would have been detected if your system was actually infected with it.  You can learn more about the threat in this Malwarebytes Labs article.

With that said, if you suspect that your system might be infected with any sort of malware then please follow the instructions in this topic and create a new topic in the malware removal area including the requested logs and information by clicking here and one of our malware removal specialists will assist you in checking and cleaning the system of any threats as soon as one is available.

I hope this helps set your mind at ease and if there is anything else we might assist you with please let us know.

Thanks