
The "modified" files are always picture files in the same folderĬ:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Dlna\DeviceIcons\Ĭhecking these files revealed no hint for any malware.

However, the Acronis agent detects again some obviously suspicious file changes by "dasHost.exe", always immediately after reboot / start of the PC. I replaced the file "dasHost.exe", which was identified by Acronis as root cause, by a version from a previous backup. Indeed, I use Bitdefender, and a full malware screen didn´t detect any suspicious file on my PC.

Is the behavoir of "dasHost.exe" correct?Ī) ignore the detection (because the Antivirus checks were negative)ī) replace the file by a backup version (is this possible by Acronis backup even if the file is protected by the system) Starting Windows again, the message pops up again, but with another 14 files.Ī system check with Antivirus Bitdefender and, in addition, a check of the Windows System file "dasHost.exe" on the VirusTotal website was both negative!ĭoes anybody has a similar detection right now? I cannot rename the Windows System file "dasHost.exe" to replace it afterwards by an backup file version.

These files, however, lie in a System folder which I cannot access, even not as Windows Admin (see screenshot). It states after every Windows start that 14 files have been changed. Acronis True Image 2021 detects since yesterday a potential ransomware code in the Windows System file "dasHost.exe".
