toosalty Posted February 20, 2019 ID:1299748 Share Posted February 20, 2019 Hello, iv noticed over the the last few weeks my computer really seems to be slowing up, i ran performance monitor and got this msg, Process taskhostw.exe [ProcessId: 3804] has a high CPU consumption of 99.5%. Iv researched a bit and seen there is a malware version of this also. On my task manager it tells me my cpu usage is 7% idle so im not to sure whats going on. I tried the cleaning method https://www.bleepingcomputer.com/virus-removal/remove-taskhostw.exe-and-windows-update-checker-miner#self-help, but did not have no luck. Any help would be really awesome. Thankyou Link to post Share on other sites More sharing options...
toosalty Posted February 20, 2019 Author ID:1299755 Share Posted February 20, 2019 FRST.txt Addition.txt mwb_log.txt AdwCleaner[C00].txt Link to post Share on other sites More sharing options...
nasdaq Posted February 21, 2019 ID:1299895 Share Posted February 21, 2019 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Process taskhostw.exe [ProcessId: 3804] has a high CPU consumption of 99.5%. This is not caused by malware. Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === Reset Chrome... Open Google Chrome, click on menu icon or the 3 vertical dots located right side top of the google chrome. Click "Settings" then "Show advanced settings" at the bottom of the screen. Click "Reset and clean up" > "Restore settings to their original defaults" Restart Chrome. <<<>>> Check the integrity of the operating system files. How to run sfc /Scannowhttp://support.microsoft.com/kb/929833 When completed refer to the Microsoft article again and follow the instructions to view details of the System File Checker process Post the contents of the sfcdetails.txt file for my review. Let me know if the problem persists. <<<>> Please post the Fixlog.txt and let me know what problem persists. fixlist.txt Link to post Share on other sites More sharing options...
toosalty Posted February 22, 2019 Author ID:1300061 Share Posted February 22, 2019 Hello nasdaq and thankyou for your help. i ran the fix and reset chrome, r and p monitor after and got this - Process taskhostw.exe [ProcessId: 8768] has a high CPU consumption of 98.5%. Fixlog.txt CBS.log Link to post Share on other sites More sharing options...
nasdaq Posted February 22, 2019 ID:1300100 Share Posted February 22, 2019 Please download the Process Explorer from this site.https://technet.microsoft.com/en-us/sysinternals/bb896653 Run the tool and look at the Svchost.exe processes that are using a log of resources. Let me know what you can find. There is a good help file that will will you in the search. Link to post Share on other sites More sharing options...
toosalty Posted February 23, 2019 Author ID:1300196 Share Posted February 23, 2019 not really sure what im looking at 😕 also when i shut my computer down it reboots with all the programmes open. Link to post Share on other sites More sharing options...
nasdaq Posted February 23, 2019 ID:1300238 Share Posted February 23, 2019 We will check your BIOS and Master boot record. Read carefully and follow these steps.TDSS Download TDSSKiller and save it to your Desktop. Doubleclick on TDSSKiller.exe to run the application. Then click on Start Scan. If a suspicious file is detected, the default action will be Skip, click on Continue. If an infected file is detected, the default action will be Cure, click on Continue. Important: Do NOT change the default action on your own unless instructed by a malware Helper! Doing so may render your computer unbootable. It may ask you to reboot the computer to complete the process. Click on Reboot Now. If no reboot is required, click on Report. A log file should appear. Please copy and paste the contents of that file here. If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here. === Download http://public.avast.com/~gmerek/aswMBR.exe (aswMBR.exe) to your desktop. Double click the aswMBR.exe to run it. Click the "Scan" button to start scan. Upon completion of the scan, click Save log, and save it to your desktop. (Note - do not select any Fix at this time) <- IMPORTANT Please paste the contents of that log in your next reply. There shall also be a file on your desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) folder. Please attach that zipped file in your next reply. === Wait for further instructions. Link to post Share on other sites More sharing options...
toosalty Posted February 23, 2019 Author ID:1300270 Share Posted February 23, 2019 So i ran TDSSKILLER fine but when i tired to run the avast programme i blue screened with this msg - Stop code: DRIVER_IRLQ_NOT_LESS_OR_EQUAL What failed: aswMBR.sys TDSSKiller.2.8.16.0_23.02.2019_17.02.24_log.txt Link to post Share on other sites More sharing options...
nasdaq Posted February 23, 2019 ID:1300291 Share Posted February 23, 2019 (edited) Hi, The TDsskiller log is clean. the avast programme i blue screened with this msg - Stop code: DRIVER_IRLQ_NOT_LESS_OR_EQUAL If you use a CD emulator disable it. Disable the CD emulators.... Please download DeFogger to your desktop. Double click DeFogger to run the tool. The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OK DeFogger will now ask to reboot the machine - click OK IMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_disable which will appear on your desktop. Do not re-enable these drivers until otherwise instructed. Or when this computer is clean. HOW TO: Enable the CD Emulators... < restore only when we are finished. To re-enable your Emulation drivers, double click DeFogger to run the tool. The application window will appear Click the Re-enable button to re-enable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OK DeFogger will now ask to reboot the machine - click OK IMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_enable which will appear on your desktop. Your Emulation drivers are now re-enabled. === Try to run the aswMBR program. Post the log if you can. If this is not the issue and the problem persists. I suspect that it's a hardware problem.' I suggest you start a new topic in the forum.https://www.bleepingcomputer.com/forums/f/7/internal-hardware/ If not a member you will have to register. I work with Malware there and and trust them. Edited March 1, 2019 by nasdaq Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted March 4, 2019 Root Admin ID:1301990 Share Posted March 4, 2019 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts