Solved vmhost.exe sounds off unexpectedly?

Gateway desktop Dx4870
June 17, 2014 at 18:49:27
Specs: Windoze 7 64bit, Intel i5 3.00 Ghz 8 Gigs RAM
Windoze 7 Home Premium with 8gigs of RAM

Periodically I hear someone speaking/reading through my laptop. CTRL-ALT-DEL reveals NO running Applications.

Further examination reveals "vmhost.exe" is running near 800,000 in Services. Shutting down vmhost.exe silences the voices, until I reboot.

How can I shut them out permanently?

_________________________
Embrace paranoia, they ARE out to get you!

message edited by Martin Crandall


See More: vmhost.exe sounds off unexpectedly?

Report •

#1
June 17, 2014 at 19:44:16
Have you run a full system scan with an up-to-date virus scanner?

Please let us know if you found someone's advice to be helpful.


Report •

#2
June 17, 2014 at 19:52:32
✔ Best Answer
Based on a little research, there seems to be a very small chance that this is malware. There IS a chance though, and it definitely wouldn't hurt to do a scan. I suggest Malwarebytes:

http://www.malwarebytes.org/

Especially since the audio seems to be coming from it, and it's high number of services, I'd say that there is a fair likelihood that your'e infected.

Can you make out what the 'voices' are saying?


Report •

#3
June 17, 2014 at 19:55:25
Norton AV
Malwarebytes
Glary Utilities
AdAware
Spybot S&D

I've run them all in the last 6 hours.

I ran regedit and found vmhost.exe twice, deleted both. it's back after a reboot.

Sounds like commercials/advertisements. The last was for State Farm or Allstate.

_________________________
Embrace paranoia, they ARE out to get you!

message edited by Martin Crandall


Report •

Related Solutions

#4
June 18, 2014 at 11:35:09
I have the same issue! did you fix it and how?

Report •

#5
June 18, 2014 at 13:43:17
Run regedit.exe.

Search for vmhost.exe

Delete EVERY instance it finds.

Mine had two separate entries.

Haven't heard it today!

_________________________
Embrace paranoia, they ARE out to get you!


Report •

#6
June 18, 2014 at 14:27:02
The version of vmhost.exe that plays sounds through your PC speakers could be a Trojan horse (siggen6) which uses a rootkit to disguise its activities from a malware scanner.

This would explain why the scanners you are using are refusing to detect the malware.

If your PC is infected with the siggen6 Trojan chances are that there are more unwelcome nasties lurking within.

Hopefully one of the malware experts stops by to offer assistance.

Specific scans need to be run to identify and eliminate the presence of a rootkit if found then removal of any malicious software that piggy backed its way in.

I wish I could offer further help but this requires the trained eye of a specialised helper.


Report •

#7
June 23, 2014 at 19:42:31
I finally found it. One by one I have been uninstalling programs in the reverse order that I installed them.

About an hour ago, I uninstalled MS Silverlight, the uninstall asked if I wanted to dump "vmhost" as it was no longer needed.

Bingo, so that's where it came from!

Apparently MicroShaft is using Silverlight as a SPAM delivery system.

_________________________
Embrace paranoia, they ARE out to get you!

message edited by Martin Crandall


Report •

Ask Question