Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Latest News: NSA shares zero-trust guidance to limit adversaries on the network

Featured Deal: Enjoy quick, compatible data transfers with this $59.99 portable SSD

Latest Buyer's Guide: Hotspot Shield VPN review

Please help > What is AggregatorHost.exe

Started by pcblues , Feb 22 2024 08:06 PM

This topic is locked

5 replies to this topic

#1 pcblues

Members
174 posts
OFFLINE

Gender:Female
Local time:02:56 PM

Posted 22 February 2024 - 08:06 PM

Hello ,

PC specs : Windows 10 Home

OS build 19045.4046

I've just come across AggregatorHost.exe running in task manager.

Checked properties. .. file is located in the Windows System 32 folder

but not digitally signed.. I assume it came with Windows update on 16 Feb,

Have tried searching online to find out more.. most results show that

it's a Window process.. but if it was, it would be digitally signed by MS ..

I'd appreciate some info & help with this..

Thanks in advance...

pcblues...

Attached Files

aggrhostexe1.png 14.5KB 0 downloads
aggrhostexe2.png 29.99KB 0 downloads
aggrhostxe3.png 21.44KB 0 downloads

Back to top"> Back to top

BC AdBot (Login to Remove)

BleepingComputer.com
Register to remove ads

#2 MoxieMomma

BC Advisor
2,346 posts
OFFLINE

Gender:Not Telling
Local time:10:56 PM

Posted 22 February 2024 - 08:11 PM

Hi:

https://www.makeuseof.com/what-is-aggregatorhostexe-windows/

Having said that....

If you think you might be infected, we cannot work on malware removal in this forum section.

I suggest starting with this guide, following the instructions as best you can:
https://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

Then please post both requested FRST logs in a NEW, SEPARATE topic here in the Malware Removal section:
https://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-help/

A trained expert will guide you through diagnosis and (if need be) cleanup.

Thanks

Back to top"> Back to top

#3 cryptodan

Bleepin Madman

Members
33,826 posts
OFFLINE

Gender:Male
Location:USA
Local time:04:56 AM

Posted 22 February 2024 - 09:05 PM

Download and install min-toolbox from here: https://www.bleepingcomputer.com/download/minitoolbox/

With the following:

Last 10 error messages from the logs
Installed Application
Problematic Devices
List users and partitions

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra

Back to top"> Back to top

#4 pcblues

Topic Starter

Members
174 posts
OFFLINE

Gender:Female
Local time:02:56 PM

Posted 23 February 2024 - 01:19 AM

Hello MoxiMomma & Bleepin Madman

Thanks for the quick response.. I have started a new topic

@ the Malware section..attached the Farbar scan txt..

Strange that this AggrevatorHost.exe file was created

the same time as two Cumulative Windows update on the 16 feb..

Hoping for the best..

Thanks again for the help !

Attached Files

winupdate16-2.png 25.77KB 0 downloads

Back to top"> Back to top

#5 Secret-Squirrel

Members
310 posts
OFFLINE

Gender:Male
Location:United Kingdom
Local time:04:56 AM

Posted 23 February 2024 - 02:53 AM

pcblues, my 100% malware-free Windows 10 PC also has that file with exactly the same properties. My copy arrived on February 19 and coincides with the installation of the cumulative .Net Framework update on the same day.

I don't think there's anything sinister going on.