Terminal Error Pops-Up on Start Up

Hi there.. I'm not exactly sure what's going on here or how to fix it.
Basically, every time I turn on the PC (Windows 11, 12900k, MSI MPG Z690 Carbon), this Terminal window pops up with the following message:


I blurred my username (not sure if that matters)
I've looked in those folders and none of those .json files exist.
The "title" of the Terminal window says this: "C:\Users\REDACTED\AppData\Roaming\Dll\dlIhost.exe"
That "dllhost.exe" file does exist.

I was recently testing out some new apps/utilities, and it seemed to show up around that time. So I think it's trying to reference something that I've since uninstalled.
FWIW, they were various external download managers for my internet browser.
Anyways, all it does is pop up and I just have to close it, so not a big deal. I would just like to get rid of it for good, if possible.

xrobwx71 said:

That is precisely why you are receiving the error. I would start by looking in your startups and see if anything is auto starting left over from one of those apps you mentioned and delete it/them from startup.

Win +X >Task Manager>Startup Apps

Xmrig is a mining app that can cause all kinds of issues.

If it continues use a program like BulkCrapUninstaller to uninstall the apps and remove remnants as well.

I've used this program and method for quite a few years with success.

Let us know how it pans out.

If you did not install any mining software, I'd let the Security experts have a look here.

Click to expand...

Thanks very much, I'll try that now.
Mining.. do you mean crypto mining? nope, nothing. Or am I misunderstanding?
The answer is probably no, anyway. So maybe I should be concerned.
Thanks again. Will update.

Was just looking over some recently installed apps and I did in fact install 2 crypto wallet apps recently.. not sure if those would be related.
The apps are Electrum-LTC and Litecoin Core.

Update: So I did a bunch of junk removal with that BulkCrapUninstaller app.. Hadn't heard of that one. Super useful, thanks.
It didn't seem to fix my particular issue, however, I followed it up with a deep scan using Malwarebytes (which I hadn't done in a couple months admittedly) and a couple files popped up that seem to corelate with @xrobwx71 's "crypto miner" suggestion.



Primarily, "DLIHOST.EXE"... which looks very similar to "DLLHOST.EXE" when typed in lower case (except for the "i")... "dlIhost.exe" 🤨 Sneaky ba***rds!!
I googled it and, sure enough, it has something to do with crypto mining... THANK YOU! @xrobwx71
My final question is, should I also remove the file below it? It looks related but I'm not sure.

Thanks again to both of you and feel free to move this to the Malware Removal thread if appropriate.

Bruce said:

In my experience, malware can be like an iceberg - if you find something, it's usually the tip of the iceberg and they may be more lingering below!

Better safe than sorry - let's get @Malnutrition involved.

I'll move this thread now - when Mal has done his magic, we can move it back if more discussion is warranted.

Click to expand...

Good point.. Sounds good. Thanks again, I appreciate it!