Crypto-Mining Trojans May Masquerade as the Legitimate ‘AggregatorHost.exe’ Process.

Computer Infected with Malware? Detect & Remove Malware for FREE with SpyHunter! Visit https://www.enigmasoftware.com/products/spyhunter-twim-yt/ to download your FREE SpyHunter today!

Watch more #thisweekinmalware episodes:

WATCH NEXT: TWIM Full Episode 125 ► https://www.youtube.com/watch?v=m14NS9ymZJU
WATCH NEXT: TWIM Episode 125 Part 1 ► https://www.youtube.com/watch?v=K8xGcxQNo1U
WATCH NEXT: TWIM Episode 125 Part 2 ► https://www.youtube.com/watch?v=6bTmVwRXe8s

Learn more about…

AggregatorHost.exe Removal Report – https://www.enigmasoftware.com/aggregatorhostexe-removal/

There have been reports by Windows users about the AggregatorHost.exe process running quietly in the background of their systems. While the process seems to be related to the Windows system, its purpose is not always clear. It may lack information about its publisher in the ‘Properties’ window. The lack of data can be interpreted as the process being potentially unsafe. It is common for legitimate process names being used by potentially harmful third-parties to inject their own programs into the Windows OS.

Usually, AggregatorHost.exe is a legitimate Windows process related to Windows Defender. In other words, although it is possible that the #AggregatorHost.exe process is perfectly legitimate, it is not uncommon for malware to disguise using real files names. Therefore, you should check AggregatorHost.exe for any unexpected behavioral patterns. The legitimate version of this process file should be small in size and exclusively stored in the ‘C://Windows//System32’ folder. The active legitimate process also takes up practically zero CPU and GPU resources.

Please take the opportunity to connect and share this video with your friends and family if you find it useful.