This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
While watching some movies on my computer from a flash drive I as usual decided to randomly check processes running. I found that there were two taskhost.exe's running, 1 of course was the normal 1 I always see, while a new second 1 had the command line of "$(Arg0)". This process was only up for a little while so I'm glad I wrote it down while I could. It should also be noted that I virus scanned my entire flash drive & the movies stored on it several times with MSE & as always it says it's clean. Is it normal to sometimes have more then 1 taskhost.exe & does this particular 1 have a normal command line? Due to my research (a quick Google search) I've found that "$(Arg0)" relates to experimental file encryption. Although I have not visited the site to my knowledge I do not have any of this software or any related on my computer anyways. Unless it was placed here by my computer manufactures (cyberpowerpc) for legit reasons. Can any 1 shed some light on this issue to help me clarify it's not a virus in any way?
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
hi,
I would do a search on the file name to find out as much as I could about it before doing anything. Also, always make sure you backup your system before adding/removing programs or editing your system. That way you can do a quick restore if there is a problem.
Eddie B.
Well that is definitely part of programing, a string - object value. It doesn't appear to be a specific function, rather it is a everyday function. In other words, I don't think that is the problem, more than likely it shows up as an acknowledgement to the issue.
Here is a link to the MSDN forum where you can search/post that issue for a more precise answer:
http://social.msdn.microsoft.com/Search/en-us?query=arg0&x=0&y=0
Eddie B.
Well the taskhost.exe with the command line of $(Arg0) just made another appearance. I noticed however that like last time it showed up when I temporarily lost internet connection & had to reset my modem. Unfortunately upon trying to recreate this by manually disconnecting & reconnecting my internet it did not appear again. It seems to only show up when my internet loses random connection via a problem with the signal itself. I also checked the image path which is in fact C:Windows\System23\taskhost.exe just like the regular taskhost.exe that I see all the time. Along with the location being C:\Windows\System32 just like the regular 1 as well. Could it be that it's something to do with my internet disconnecting and a component on my computer having to recheck for updates or something due to the connection loss?
So you're saying that it could be a threat? If so how will Process Monitor help me determine if it is a threat or something normal?
Hi,
I would suggest you to download and run Process Monitor software. Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity.
