Re: uninstalling

[Ken Moffat]

On Sat, Sep 12, 2020 at 10:18:49AM +0200, gunnar.wagner wrote:
> now when that is clarified .... can we suggest any solution?
> 
> @Narcis Garcia ... can you tell us more about your the operating system
> your computer is running on? what may help us to suggest a possible
> solution.
> 

Umm, it was Liz C who has the problem.

Sounds like a windows 64-bit file, so probably windows 10.

I see that Liz uses gmail, so not Cc'ing becasue my post will
probably end up marked as spam - with luck, sending via the lsit
might get through.

Google found
 
https://itsafety.net/report/20190802-77d29db5357775b675b0bbe7f4184b61-host-services-64-exe_process-partofthreat
 but that links to some tool for removing thins - probably
legitimate, but I have no idea and there is always the possibility
that it is itself compromised.

See also
https://www.file.net/process/host%20services%20x64.exe.html

which has a link to what is (I hope) the same anti-malware tool, and
to Security Test Manager which will apparently tell you what that
runing Host Services is actually doing.  Again, I have no idea if
that S T M is legitimate.

Oh, I suppose that for windows 10, trying to run a download will at
least tell you who signed it.

ĸen

> 
> 
> On 12.09.20 06:09, Christopher William Snowhill wrote:
> > It sounds as if the user has installed a trojan monero miner, either
> > through not updating their machine like is recommended, or from
> > installing pirated audio production software from bittorrent trackers
> > or shady web sites, which have been bundling such miner virtual
> > machines for at least two years now. They boot a Linux virtual machine
> > that gobbles up at least an entire cpu core mining for an anonymous
> > pool, and therefore probably isn't traceable. It used to be that the
> > variant, LoudMiner, used qemu with hvf on macOS, and VirtualBox on
> > Windows, but now it seems variants are branching out to using qemu
> > with intel haxm on Windows machines.
> >
> > On Fri, Sep 11, 2020, at 2:09 AM, Narcis Garcia via wrote:
> >> How is "Host services 64.exe" related to Qemu?
> >>
> >>
> >>
> >> Narcis Garcia
> >> El 10/9/20 a les 20:51, Liz C ha escrit:
> >> > Hi.
> >> >  I’ve never installed your app but I have it in my computer (I don’t
> >> > know why). My antivirus says that Host services 64.exe is a troyan
> >> > virus. I uninstalled it many times and deleted everything but it keeps
> >> > showing after a few days. How can I deleted forever? I don’t have
> >> > nothing against you but I don’t want this app. 
> >> > Hope you can help me!
> >> > Liz
> >>

-- 
I could not live without Champagne.  In victory I deserve it, in
defeat I need it.  -- Churchill