Terminal Error Pops-Up on Start Up

[WeekendWarrior99]

Hi there.. I’m not exactly sure what’s going on here or how to fix it.
Basically, every time I turn on the PC (Windows 11, 12900k, MSI MPG Z690 Carbon), this Terminal window pops up with the following message:

[ATTACH type=“full” width=“749px” alt=“Terminal Error.jpg”]13413[/ATTACH]
I blurred my username (not sure if that matters)
I’ve looked in those folders and none of those .json files exist.
The “title” of the Terminal window says this: “C:\Users\REDACTED\AppData\Roaming\Dll\dlIhost.exe ”
That “dllhost.exe” file does exist.

I was recently testing out some new apps/utilities, and it seemed to show up around that time. So I think it’s trying to reference something that I’ve since uninstalled.
FWIW, they were various external download managers for my internet browser.
Anyways, all it does is pop up and I just have to close it, so not a big deal. I would just like to get rid of it for good, if possible.

[xrobwx71]

I’ve looked in those folders and none of those .json files exist.

That is precisely why you are receiving the error. I would start by looking in your startups and see if anything is auto starting left over from one of those apps you mentioned and delete it/them from startup.

Win +X >Task Manager>Startup Apps

Xmrig is a crypto mining app that can cause all kinds of issues.

If it continues use a program like BulkCrapUninstaller to uninstall the apps and remove remnants as well.

I’ve used this program and method for quite a few years with success.

Let us know how it pans out.

If you did not install any mining software, I’d let the Security experts have a look here.

[WeekendWarrior99]

That is precisely why you are receiving the error. I would start by looking in your startups and see if anything is auto starting left over from one of those apps you mentioned and delete it/them from startup.

Win +X >Task Manager>Startup Apps

Xmrig is a mining app that can cause all kinds of issues.

If it continues use a program like BulkCrapUninstaller to uninstall the apps and remove remnants as well.

I’ve used this program and method for quite a few years with success.

Let us know how it pans out.

If you did not install any mining software, I’d let the Security experts have a look here.

Thanks very much, I’ll try that now.
Mining.. do you mean crypto mining? nope, nothing. Or am I misunderstanding?
The answer is probably no, anyway. So maybe I should be concerned.
Thanks again. Will update.

[WeekendWarrior99]

Was just looking over some recently installed apps and I did in fact install 2 crypto wallet apps recently.. not sure if those would be related.
The apps are Electrum-LTC and Litecoin Core.

[xrobwx71]

Yes, crypto mining. Sometimes those wallets will install mining software as well.
Remove those and reboot.

[Bruce]

Wouldn’t hurt to check, but let me know and I’ll move this over to our Malware Removal thread just to make sure you have nothing lingering from your previous efforts.
Then our expert can guide you through some steps to see if your PC is clean.

[WeekendWarrior99]

Update: So I did a bunch of junk removal with that BulkCrapUninstaller app.. Hadn’t heard of that one. Super useful, thanks.
It didn’t seem to fix my particular issue, however, I followed it up with a deep scan using Malwarebytes (which I hadn’t done in a couple months admittedly) and a couple files popped up that seem to corelate with @xrobwx71 's “crypto miner” suggestion.

[ATTACH type=“full”]13414[/ATTACH]

Primarily, “DLIHOST.EXE”… which looks very similar to “DLLHOST.EXE” when typed in lower case (except for the “i”)… “dlIhost.exe” ??? Sneaky ba***rds!!
I googled it and, sure enough, it has something to do with crypto mining… THANK YOU! @xrobwx71
My final question is, should I also remove the file below it? It looks related but I’m not sure.

Thanks again to both of you and feel free to move this to the Malware Removal thread if appropriate.

[Bruce]

In my experience, malware can be like an iceberg - if you find something, it’s usually the tip of the iceberg and they may be more lingering below!

Better safe than sorry - let’s get @Malnutrition involved.

I’ll move this thread now - when Mal has done his magic, we can move it back if more discussion is warranted. (y)

[WeekendWarrior99]

In my experience, malware can be like an iceberg - if you find something, it’s usually the tip of the iceberg and they may be more lingering below!

Better safe than sorry - let’s get @Malnutrition involved.

I’ll move this thread now - when Mal has done his magic, we can move it back if more discussion is warranted. (y)

Good point.. Sounds good. Thanks again, I appreciate it!

[Bruce]

@Malnutrition - knock knock…
I know you’re busy with work, but just checking you have time for this.

[Malnutrition]

Sorry for the huge delay.

Please post FRST and Addition.txt logs. Instructions below.

[HEADING=2]Information - [Prework] Please Read Before Posting[/HEADING]

[Malnutrition]

@WeekendWarrior99 If there is no reply to this thread in 48 hours, I will close due to lack of feedback.

[Bruce]

Closing - no activity.
To request a re-open, go to Members > Staff Members, click a Staffer then Start Conversation and quote thread name.