Share via

How can I fix the problem with this file? -C:\Windows\System32\DomainAuthHost\node.exe

Juan David Zuloaga Farromeque 0 Reputation points
2025-08-08T04:48:47.1933333+00:00

While I'm checking my Microsoft Defender, I notice a detected threat, DomainAuthHost\node.exe.

As soon as I try to delete it from Safe Mode and empty it from my trash, the files are automatically restored, making it impossible for me to get rid of the file. I've been getting "suspicious activity from my Gmail account like others" issues for a while now.

Would someone be so kind as to help me with my problem; I've tried everything.

Thank you in advance.

Windows for home | Windows 10 | Security and privacy
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Sumit D - IA 132.5K Reputation points Independent Advisor
    2025-08-08T05:29:42.4766667+00:00

    Hi Juan,

    I'm Sumit, here to help with your query on the Microsoft Q&A forums.

    Apologies for any inconvenience you are experiencing. I am happy to help you today.

    Yes, this appears to be a malware infection.

    https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

    Add the files generated by it, i.e. FRST.txt and Addition.txt, to a Zip and share in the next reply.

    Standard 3rd party link disclaimer:

    There may be links to non-Microsoft websites that provide accurate and safe information. Watch out for ads on websites frequently classified as PUP (Potentially Unwanted Products). There is no need to buy paid products to fix your computers, as they sometimes do more harm than good.

  2. Juan David Zuloaga Farromeque 0 Reputation points
    2025-08-08T15:23:10.0466667+00:00

    Hello, thank you very much for responding. I'm sending you the documents you requested.
    Addition.txt FRST.txt

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.