NoBot Security showing conhost.exe as a threat.

[adamzbaileyz]

I used a program called NoBot Security that is good for detecting rats and scanning... it showed up that my conhose.exe was a threat, but when i right clicked on it and clicked on the file location it was in system 32 where it should be and nothing looked wrong... should i be worried and was it just a glitch?

 

[mdd1963]

you can run SysInternals' Process Explorer, and it should show the conhost.exe instances (my WIn10 shows two, currently) with valid MS signatures, although there was one (out of 64 or so) hit on Virus Total, which can likely therefore be discounted.

 

[adamzbaileyz]

you can run SysInternals' Process Explorer, and it should show the conhost.exe instances (my WIn10 shows two, currently) with valid MS signatures, although there was one (out of 64 or so) hit on Virus Total, which can likely therefore be discounted.

The one you found on virus total... does it not do anything to your pc?
Also can you tell me which virus scanner on virus total came up with red

 

[mdd1963]

You should run your own processexplorer results, as my results might differ.

(on my two running instances of conhost.exe, the VT detection was by Cylance, whoever that is....)