Most antivirus programs identify MicrosoftShellHost.exe as malware—e.g. Avast identifies it as Win64:MdeClass, and Microsoft identifies it as Trojan:Win32/CoinMiner.
The free file information forum can help you find out how to remove it. If you have additional information about this file, please leave a comment or a suggestion for other users.
The process known as Microsoft Outlook Communications or Application Frame Host or Shell Infrastructure Host appears to belong to software Microsoft Outlook Communications or Application Frame Host or Shell Infrastructure Host by Microsoft Outlook Communications or Application Frame Host or Windows Security Health Service.
Description: MicrosoftShellHost.exe is not essential for Windows and will often cause problems. The MicrosoftShellHost.exe file is located in a subfolder of "C:\ProgramData" (for example C:\ProgramData\WindowsTask\).
Known file sizes on Windows 10/8/7/XP are 4,886,528 bytes (25% of all occurrences), 3,389,952 bytes, 5,306,880 bytes, 3,104,256 bytes or 2,878,464 bytes.
The program has no visible window. The application uses ports to connect to or from a LAN or the Internet. The file is not a Windows core file. MicrosoftShellHost.exe is able to monitor applications. Therefore the technical security rating is 84% dangerous.
Recommended: Identify MicrosoftShellHost.exe related errors
If MicrosoftShellHost.exe is located in a subfolder of Windows folder for temporary files, the security rating is 92% dangerous. The file size is 1,896,448 bytes (50% of all occurrences) or 3,289,088 bytes. The program is not visible. The application listens for or sends data on open ports to a LAN or the Internet. The file is not a Windows core file. MicrosoftShellHost.exe is able to monitor applications. MicrosoftShellHost.exe appears to be a compressed file.
If MicrosoftShellHost.exe is located in a subfolder of the user's profile folder, the security rating is 84% dangerous. The file size is 1,542,144 bytes. The program is not visible. The process listens for or sends data on open ports to a LAN or the Internet. The file is not a Windows system file.
Important: You should check the MicrosoftShellHost.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.
The following programs have also been shown useful for a deeper analysis: ASecurity Task Manager examines the active MicrosoftShellHost process on your computer and clearly tells you what it is doing. Malwarebytes' well-known Banti-malware tool tells you if the MicrosoftShellHost.exe on your computer displays annoying ads, slowing it down. This type of unwanted adware program is not considered by some antivirus software to be a virus and is therefore not marked for cleanup.
A clean and tidy computer is the key requirement for avoiding PC trouble. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows' 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.
Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.