I caught 4 of these processes running in task manager a few minutes ago, all using about 112K-150K of memory. Google searching says it's either a backdoor trojan or a normal Microsoft file.
Comodo's logs show it was created when I installed Microsoft Security Essentials and there are 2 locations, Windows/System32 and Windows/sysWOW64.
The syswow location was where this was running from. These are said to be the real locations of the files but I do not have any Asian languages installed on my computer so that's why I'm not trusting the process's appearance.
MSE and MBAM scans turn up nothing unusual but I've blocked the file in Defense + until I figure out what's going on.
Anyone have any experience with MSE and conime.exe together?
Thanks in advance.
-
Chinese keyboard support is installed by default on many (most?) computers sold recently. You should doublecheck your language settings, and remove the chinese keyboard under control panel>keyboards, the second tab iirc. If you press ctrl+space and get some funky chinese popup, you have chinese keyboard support active.
4 of them running does raise flags though, only a few processes are supposed to be replicated (svchost) if they are working properly. Chances are though, that they are harmless and are little more than bloat. -
Thanks for the response. I have 2 languages installed (European) but the language bar has been 'broken' for me for a while and cannot switch so I've got English only now.
Ctrl+shift doesn't show anything at all, neither does the usual alt+shift.
Apparently when the conime.exe is the trojan version, there is a startup registry entry made and a few other processes running and located in the System32 folder. I don't have any of these so I seem to be clean. I'm still trying to figure out why MSE installed this thing to begin with.
Conime.exe problems if no Asian language used?
Discussion in 'Security and Anti-Virus Software' started by RWUK, Jan 22, 2011.