Today while watching nexflix I noticed my connection slow. I checked task manager and noticed conhost.ext *32. under the details tab i see. Is this a normal program? It always reappears in task manager after a few sec. McAee or spybot does not see anything wrong with it.
File description Lamp Pajama Stung
Type Application
File version 3.5.0.0
Product name Hues
Product version 3.5
Copyright brew unite 1995-2008
language English (united states)
Orignial filename Gash.exe
Avast! picked it up for me, but it wouldn't remove it. It spoofs a legit application (conhost.exe) and hides in Appdata\Roaming\Microsoft\
It also downloaded/generated other malicious .exe's into Appdata\Local\Temp\ in my case. I'm sure these came from conhost.exe, as their description in my task manager was also "Lamp pajama stung". Furthermore, it liked to adjust proxy settings in Firefox which gave the appearance of interrupting connections. This was easily fixed by reconfiguring Firefox's proxy settings (I just turned mine off). This is not the only browser affected, as it's screwing with my Steam browser too. I'm still working to resolve this.
Funny thing I just installed steam again this morning. Running full spybot scan upon restart to see what it gets. Long scan 40 min
I Think I got rid of it, at least my pc is now slowing down now and the conhost does not say lamp pamaja stung now.
First I ended task on it, deleted the conhost out of the app folder and ran CCleaner reg cleaner before it booted back up. Then I ran spybot search and destroy and it found a couple things removed them and it asked me to reboot my pc to check for other things.
After the over hour scan it found nothing else and things seem to be back to normal for now.
What is it, you asked.
Read THIS from howtogeek.com - conhost.exe is fine, perfectly okay, as long as it's in the Windows\System32 directory.
Message was edited by: Hayton on 06/07/11 00:24:13 ISTI just did a reinstall of windows 7 becasue it was still popping back up as conhost but with no details and linking my browsing through some other site when I was looking at stuff.
After reinstalling windows 7 from a fresh install and doing all the updates the conhost does not appear at all in the task mananger.
Hi Vash, on 7/10/2011 my daughter was online with facebook using Cityville, Fishville or something similar and somehow something downloaded to my laptop. Similar to your situation, my original file name is Guam.exe, by Wasps Lure, Description is Harley Octave Vicky, Wait Urine. I've searched online for all keywords and found only Conhost.exe. I'm hoping I don't have to do a complete reinstall. I had to do that the last time McAfee let something slip through. I'm really struggling here whether to continue my subscription with McAfee. I know not all software catches everything but this is the 2nd time I've gotten something nasty.
I suggest uploading this file to VirusTotal. That site will run it through more than 40 virus scanners and tell you how many of them (if any) find it suspect.
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.
Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership: