My computer is infected but AV software does not find anything


I still would like to see some of the printscreen i asked for. Just telling us.. 🤷‍♂️ Also would like to see the totalvirus url of the scanned file: wlanext.exe

Most cases malware uses powershell or conhost on the first run of infection to get the payload on the machine, and then stops doing those things. So you won't see it constantly running... And then just inserts/hijacks a running process at startup without it running its own.exe file, and you won't even see it.

If it is really an infection, i would do a fresh reinstall.

If you want to figure it really out, i would attach a debugger to all processes, and see if debugger detaches, or getting access violoation on the attached programs..

Also install a firewall that reports on all outgoing traffic, and then only allow processes to access internet you trust. like 70% can be defaultly block.
A free firewall, can be as simple as the malwarebytes firewall control: https://forums.malwarebytes.com/topic/296798-malwarebytes-windows-firewall-control-wfc/ Then when you get a virus/malware, it cannot defaultly connect to the internet.
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Computer type
PC/Desktop
You mentioned dllhost starts with a command..... Look at dllhost.exe dllhost.exe - What is dllhost.exe?

If you used this computer for banking I would notify the Bank. I also suggest you do a clean install and change all passwords using a known clean computer.
 

My Computers My Computers

  • At a glance

    Windows 11 Home 25H2 26200.8875AMD Ryzen 3 5300G8gbRadeon Graphics 4.00GHZ
    OS
    Windows 11 Home 25H2 26200.8875
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP Pavilion TP01-2xxx
    CPU
    AMD Ryzen 3 5300G
    Memory
    8gb
    Graphics Card(s)
    Radeon Graphics 4.00GHZ
    Monitor(s) Displays
    ViewSonic
    Keyboard
    HP
    Mouse
    wireless Microsoft
    Browser
    FireFox
    Antivirus
    Avira
  • At a glance

    Updated Windows 10 to 11 25H2 26200.8875Intel Core i3 8100 @3.60 GHz8.GBIntel UHD 360 (HP)
    Operating System
    Updated Windows 10 to 11 25H2 26200.8875
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP
    CPU
    Intel Core i3 8100 @3.60 GHz
    Motherboard
    HP 8653 (U3E1)
    Memory
    8.GB
    Graphics card(s)
    Intel UHD 360 (HP)
    Sound Card
    Realtek High Def
    Monitor(s) Displays
    ViewSonic
    Other Info
    #3 System: HP laptop Windows 25H2 11Pro 26200.8524
  • HP Omni laptop Windows 11 home
    11 25H2 26200.8737
    Intel Core 5 120U
Kaspersky does not find anything...
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
1740189334729.webp
Normal!
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Computer type
PC/Desktop
Kaspersky does not find anything...
Why are you telling us that Kaspersky doesn't find anything? If you know how to copy and paste any of the results from anti-virus programs you've run, please do so, or ask how to do it. :-)
 

My Computers My Computers

  • At a glance

    Windows 11 Home 25H2 26200.8875AMD Ryzen 3 5300G8gbRadeon Graphics 4.00GHZ
    OS
    Windows 11 Home 25H2 26200.8875
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP Pavilion TP01-2xxx
    CPU
    AMD Ryzen 3 5300G
    Memory
    8gb
    Graphics Card(s)
    Radeon Graphics 4.00GHZ
    Monitor(s) Displays
    ViewSonic
    Keyboard
    HP
    Mouse
    wireless Microsoft
    Browser
    FireFox
    Antivirus
    Avira
  • At a glance

    Updated Windows 10 to 11 25H2 26200.8875Intel Core i3 8100 @3.60 GHz8.GBIntel UHD 360 (HP)
    Operating System
    Updated Windows 10 to 11 25H2 26200.8875
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP
    CPU
    Intel Core i3 8100 @3.60 GHz
    Motherboard
    HP 8653 (U3E1)
    Memory
    8.GB
    Graphics card(s)
    Intel UHD 360 (HP)
    Sound Card
    Realtek High Def
    Monitor(s) Displays
    ViewSonic
    Other Info
    #3 System: HP laptop Windows 25H2 11Pro 26200.8524
  • HP Omni laptop Windows 11 home
    11 25H2 26200.8737
    Intel Core 5 120U
Avast also does not find anything. What's the purpose of pasting "all is OK"?
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Okay, so I found a directory structure with circular references in Firefox profile folder, which cannot be deleted. Inside are files looking like folders with name "https+++you.com." which cannot be entered or deleted.

The structure is located at
C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\<my profile>\storage\archives
 
Last edited:

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
I would do a clean install of windows for peace of mind.
Keep it as a local account.
Change your passwords to all your accounts.
 

My Computer My Computer

At a glance

Windows 11 Home X-lite versionIntel Core i5 (3rd Gen) 3570 / 3.4 GHz32 GB of 1600 MHz non-ECC DDR3 SDRAMIntel HD Graphics 2500 Dynamic Video Memory
OS
Windows 11 Home X-lite version
Computer type
PC/Desktop
Manufacturer/Model
Dell OptiPlex 9010
CPU
Intel Core i5 (3rd Gen) 3570 / 3.4 GHz
Motherboard
Intel Q77 Express
Memory
32 GB of 1600 MHz non-ECC DDR3 SDRAM
Graphics Card(s)
Intel HD Graphics 2500 Dynamic Video Memory
Monitor(s) Displays
22" veiwsonic
I would do a clean install of windows for peace of mind.
Keep it as a local account.
Change your passwords to all your accounts.
So, I rolled back to a snapshot from half a year ago.
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Okay, so I formatted the hard drive, and after that robocopied the system from a snapshot of 7 months ago. Never started or opened any file from the old system. But now I again experience disappearance of sound, keyboard stopping auto-repeat, conhost.exe, lots of RuntimeBroker processes and LockApp program running. I never inserted a new hard drive before formatting the old one.
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
The same symptoms repeat: wlanext runs conhost.exe on system start, with window appearing, inverted function of Fn key on the laptop keyboard, bitlocker UI quickly starts and exits on startup.
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Okay, so I still have a folder C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\<my profile>\storage\archives\0
dated with 27.02.2024. But I FORMATTED THIS PARTITION after this date.
And before the formatting I could not delete this folder even after booting from a flash drive!
I again cannot delete it due to "unknown error".
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
So, I cannot delete this file even after booting from flash or by Lockhunter utility on OS restart.
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
so I formatted the hard drive, and after that robocopied the system from a snapshot of 7 months ago.
dated with 27.02.2024. But I FORMATTED THIS PARTITION after this date.
7 months ago, that folder of 2024 should have been inside the snapshot/image.
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Computer type
PC/Desktop
So, I cannot delete this file even after booting from flash or by Lockhunter utility on OS restart.
If I were you Id start here..theres other expert forums to where techs donate time and really do understand how to fix these things. especially since many of them will write scripts just for your scenario and you run em and bam baddies be gone...lol. Anyway heres 1 site as I say google free expert virus forums etc..Im not saying that people on this forum arent qualified or smart enough etc its just that sometimes there are those Specialists like in any field and on these other forums thats those kinda special help people you may need.
Geekstogo

another..
Bleeping Computer Forums

and Lastly..
TechSupport Forum
 

My Computer My Computer

At a glance

Windows 11 Pro Version 23H2(OS Build 22631.4890)12-Core AMD Ryzen 9 5900X, 4950 MHz (49.5 x 100)4 - G Skill Trident Z Neo F4-3600C16-16GTZNCPCI Express 4.0 x16: PowerColor RX 6800
OS
Windows 11 Pro Version 23H2(OS Build 22631.4890)
Computer type
PC/Desktop
Manufacturer/Model
AMD
CPU
12-Core AMD Ryzen 9 5900X, 4950 MHz (49.5 x 100)
Motherboard
Gigabyte X570 Aorus Master
Memory
4 - G Skill Trident Z Neo F4-3600C16-16GTZNC
Graphics Card(s)
PCI Express 4.0 x16: PowerColor RX 6800
Sound Card
Realtek ALC1220 @ AMD K19.2 - High Definition Audio Controller
Monitor(s) Displays
2 - 27 inch Westinghouse
Screen Resolution
1920 x 1080
Hard Drives
2 SSD - 2 TB each
1 SSD - 4TB
1 HDD - 2TB
Keyboard
logitech
Mouse
logitech
Internet Speed
1 GB
Browser
Firefox
Antivirus
Eset Endpoint Security
7 months ago, that folder of 2024 should have been inside the snapshot/image.
Yea. Looks like this. Anyway, I have deleted it using absolute path. Maybe it is not related to the current symptoms, just a damaged folder.

I also substituted rundll32.exe for wlanext.exe in the registry (image file execution options) so that it could not run.

What bothers me now are:

* Sudden diasappearance of sound.
* When it happens, keyboard auto-repeat also disappears.
* The computer shuts off instead of reboot
* The Fn key function gets inverted and cannot be inverted back even by pressing the required combination. It becomes opposite of what is set in BIOS. Now I prohibited in BIOS switching this behavior and so far it remains default.

Could be hardware problems? Maybe...
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
What happens in safe mode? What happens with a clean boot?

And again, running autoruns with the options > scan options > virustotal check and unknown images check should find any suspicious entries / issues

You have a image. Clean install on the system. See what happens. Swap back to image etc.
 

My Computers My Computers

  • At a glance

    Windows 11 ProRyzen 7 5700 X3D64 GB DDR4 3600mhz Gskill Ripjaws VRTX 4070 Super , 12GB VRAM Asus EVO Overclock
    OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom Built
    CPU
    Ryzen 7 5700 X3D
    Motherboard
    MSI MPG B550 GAMING PLUS
    Memory
    64 GB DDR4 3600mhz Gskill Ripjaws V
    Graphics Card(s)
    RTX 4070 Super , 12GB VRAM Asus EVO Overclock
    Monitor(s) Displays
    Gigabyte M27Q (rev. 2.0) 2560 x 1440 @ 170hz HDR
    Hard Drives
    2TB Samsung nvme ssd
    4TB Western Digital nvme ssd
    PSU
    CORSAIR RMx SHIFT Series™ RM750x 80 PLUS Gold Fully Modular ATX Power Supply
    Case
    CORSAIR 3500X ARGB Mid-Tower ATX PC Case – Black
    Cooling
    ID-COOLING FROSTFLOW X 240 CPU Water Cooler
    Keyboard
    Logitech G213
    Mouse
    Logitech G203
    Internet Speed
    1.2gbps Fiber 😎
  • At a glance

    Chrome OSIntel Pentium Quad Core4GB LPDDR4
    Operating System
    Chrome OS
    Computer type
    Laptop
    Manufacturer/Model
    HP Chromebook
    CPU
    Intel Pentium Quad Core
    Memory
    4GB LPDDR4
    Monitor(s) Displays
    14 Inch HD SVA anti glare micro edge display
    Hard Drives
    64 GB emmc
keyboard auto-repeat also disappears.
go to settings, ease of access, keyboard, set filter keys to off. Does this work then?

Sudden diasappearance of sound.
Any errors in eventvwr when this happens?

After restoring the image, did you do all windows updates? on what version win11 version are you know?
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Computer type
PC/Desktop
go to settings, ease of access, keyboard, set filter keys to off. Does this work then?


Any errors in eventvwr when this happens?

After restoring the image, did you do all windows updates? on what version win11 version are you know?
The keyboard filter is off. No. I did not do all updates yet as I currently have no fast internet. The version is Win 11 23H2 10.0.22631.3593
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Use the free File Checker tool to upload a hash of the file to our servers and scan it for hidden malware.
You can check a file that you're not sure of by using a free scan here: File checker: Scan files for viruses
 

My Computers My Computers

  • At a glance

    Windows 11 Home 25H2 26200.8875AMD Ryzen 3 5300G8gbRadeon Graphics 4.00GHZ
    OS
    Windows 11 Home 25H2 26200.8875
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP Pavilion TP01-2xxx
    CPU
    AMD Ryzen 3 5300G
    Memory
    8gb
    Graphics Card(s)
    Radeon Graphics 4.00GHZ
    Monitor(s) Displays
    ViewSonic
    Keyboard
    HP
    Mouse
    wireless Microsoft
    Browser
    FireFox
    Antivirus
    Avira
  • At a glance

    Updated Windows 10 to 11 25H2 26200.8875Intel Core i3 8100 @3.60 GHz8.GBIntel UHD 360 (HP)
    Operating System
    Updated Windows 10 to 11 25H2 26200.8875
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP
    CPU
    Intel Core i3 8100 @3.60 GHz
    Motherboard
    HP 8653 (U3E1)
    Memory
    8.GB
    Graphics card(s)
    Intel UHD 360 (HP)
    Sound Card
    Realtek High Def
    Monitor(s) Displays
    ViewSonic
    Other Info
    #3 System: HP laptop Windows 25H2 11Pro 26200.8524
  • HP Omni laptop Windows 11 home
    11 25H2 26200.8737
    Intel Core 5 120U
Back
Top Bottom