[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: uninstalling

From: Ken Moffat
Subject: Re: uninstalling
Date: Sat, 12 Sep 2020 15:28:05 +0100
User-agent: Mutt/1.14.7 (2020-08-29)

On Sat, Sep 12, 2020 at 10:18:49AM +0200, gunnar.wagner wrote:
> now when that is clarified .... can we suggest any solution?
> @Narcis Garcia ... can you tell us more about your the operating system
> your computer is running on? what may help us to suggest a possible
> solution.

Umm, it was Liz C who has the problem.

Sounds like a windows 64-bit file, so probably windows 10.

I see that Liz uses gmail, so not Cc'ing becasue my post will
probably end up marked as spam - with luck, sending via the lsit
might get through.

Google found
 but that links to some tool for removing thins - probably
legitimate, but I have no idea and there is always the possibility
that it is itself compromised.

See also

which has a link to what is (I hope) the same anti-malware tool, and
to Security Test Manager which will apparently tell you what that
runing Host Services is actually doing.  Again, I have no idea if
that S T M is legitimate.

Oh, I suppose that for windows 10, trying to run a download will at
least tell you who signed it.


> On 12.09.20 06:09, Christopher William Snowhill wrote:
> > It sounds as if the user has installed a trojan monero miner, either
> > through not updating their machine like is recommended, or from
> > installing pirated audio production software from bittorrent trackers
> > or shady web sites, which have been bundling such miner virtual
> > machines for at least two years now. They boot a Linux virtual machine
> > that gobbles up at least an entire cpu core mining for an anonymous
> > pool, and therefore probably isn't traceable. It used to be that the
> > variant, LoudMiner, used qemu with hvf on macOS, and VirtualBox on
> > Windows, but now it seems variants are branching out to using qemu
> > with intel haxm on Windows machines.
> >
> > On Fri, Sep 11, 2020, at 2:09 AM, Narcis Garcia via wrote:
> >> How is "Host services 64.exe" related to Qemu?
> >>
> >>
> >>
> >> Narcis Garcia
> >> El 10/9/20 a les 20:51, Liz C ha escrit:
> >> > Hi.
> >> >  I’ve never installed your app but I have it in my computer (I don’t
> >> > know why). My antivirus says that Host services 64.exe is a troyan
> >> > virus. I uninstalled it many times and deleted everything but it keeps
> >> > showing after a few days. How can I deleted forever? I don’t have
> >> > nothing against you but I don’t want this app. 
> >> > Hope you can help me!
> >> > Liz
> >>

I could not live without Champagne.  In victory I deserve it, in
defeat I need it.  -- Churchill

reply via email to

[Prev in Thread] Current Thread [Next in Thread]