allbeeeee

I have finished the clean-up. Thank you for your help!😄

Hi, my laptop seems to be doing better now, no more loud fan noise when idling and malwarebytes scan does not detect WR64.sys anymore after restarting. I assume this issue is fixed? Thank you 😀

I have ran another fix and attached the log. Fixlog.txt

Additionally, it seems like my fan noise is no longer loud when I close my task manager. To let you know 😀

I have applied the fix and ran the Dr. Web scan as instructed. Dr. Web did not detect any threats. I have attached the logs. cureit.log Fixlog.txt

Thanks for the swift response, I have attached the AdwCleaner log in the above reply post. However, it is S04 instead of C04 though.

I have restarted my laptop, so the WR64.sys should re-appear again. Then I did the scans mentioned above: Adwcleaner: no items were detected. Log is attached. Malwarebytes: Found the WR64.sys and quarantined. There is only one. Log is attached. FRST: Ran the scan as admin. Log attached. So far, there are only 4 logs produced. I don't know about the fifth log mentioned and couldn't find it. AdwCleaner[S04].txt Malwarebytes Scan Report 2024-08-22 074148.txt FRST.txt Addition.txt

I am not experienced, but I have done some research on this and tried some fixes, to no avail. I think has been a month or two where I noticed that my laptop would have loud fan noise even though it is idle. When I opened task manager, it will have high CPU load at around 40% - 70%, which will then immediately drop down to around 7% after opening, and the fan noise will go quiet. When I closed task manager, the fan noise will get louder and CPU load increased again. I used HWinfo to track the CPU load, and indeed the CPU load will maintain at around 40% after I closed task manager, and less than 10% when task manager is open. I suspect I have a cryptomining malware. As the title says, the WR64.sys always re-appear in the path System32\..\AppData\Roaming\Google\Libs\WR64.sys Additionally, I have tried scanning with: FRSTEnglish.exe: I will attach the logs FRST.exe and Addition.txt microsoft safety scanner: "Threat Detected: TrojanDownloader:JS/Swabfex.P and Removed!" but will always get detected again after restart. I will attach the log. adwcleaner.exe: no detection esetonlinescanner.exe: unable to download update module, will always crash or progress resetting to 1% and have tried multiple times. When launching the .exe in %appdata%, then I can get it to do full scan, which resulted in some detections. I will also attach the log. I have also turned off sync on my google account and cleared the sync data before doing these scans. After restart (without turning on the sync), the WR64.sys is back. FRST.txt Addition.txt msert.log esetscanlog.txt