Your computer is infected with malicious software? Do you have pop-ups on your PC?
If so, search this blog for removal instructions or browse computer threats by category.

Wednesday, July 9, 2014

What is vmhost.exe and how to remove it?

Tell your friends:

vmhost.exe - by Square Network Tech Co.,LTD.

What is vmhost.exe?

Vmhost.exe is adware that plays audio ads in the background and may also display pop-up ads. The program doesn't start immediately when you turn on your computer. It starts 3-5 minutes later in Program Data\Update Task folder and may be also listed as VM file module. I takes up at least 100k memory and may crash your web browser. Multiple anti-virus engines have detected malware in this file, here are a few of the most frequently detection: Riskware.Agent!, Adware.Downware.4176, Win32/SquareNet.B and PUP.OPTIONAL.VMHOST.A. It's distributed mainly in the United States using various pay-per-install networks which means that there's a great chance that some other adware and PUP could have been installed with vmhost.exe on your computer. You can remove the file manually but I it would be a good idea to run a full system scan with recommended anti-malware software too. Needles to say, it's not essential for Windows and may cause lots of problems including annoying audio ads and system crashes.

File name: vmhost.exe
Publisher: Square Network Tech Co.,LTD.
File Location Windows XP: C:\Documents and Settings\All Users\Application Data\UpdateTask\
File Location Windows 7: C:\ProgramData\UpdateTask\
Startup file: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run → vmhost.exe


Anonymous said...

The problem I had with vmhost.exe is that it was detected and dealt with by my antivirus, but a restart was necessary to complete the delete. 5 or so minutes after restart, it would appear again. Delete/shred all occurrences by all means ( and regedit entries, but look out for the program which is generating vmhost in the first place. In my case in was SV.EXE and it was residing in the same Directory as vmhost.exe. It, too had a couple of regedit entries. Getting rid of it seems to have cured.
Note that vmhost.exe does not start up if you're not connected to the network. It would appear that SV.EXE downloads it.