Microsoft Register Server (regsvr32.exe) is using 50% of cpu power

[Axerol]

This is happening second time. I deleted all the adware that was possible to delete, once 3 months random applications are installed on my pc and after deleting them i see the regsvr32 using 50% of my cpu. Last time i tried fixing the issue, the regsvr32 all of a sudden stoped using so much cpu power, but recently another adware got installed on my pc although i did not downloaded anything suspicious from the internet it just appeared on itself meaning that the remains of the adware virus were sitting somewhere in my computer. I need help!

[kevinf80]

Hello Axerol and welcome to Malwarebytes,

Complete the instructions in the following link and post the produced logs:

 

Thank ypu,

Kevin

[Axerol]

Here's the logs

Addition.txt FRST.txt

[kevinf80]

What about Malwarebytes threat scan, did you run that..?

[Axerol]

12 minutes ago, kevinf80 said:

What about Malwarebytes threat scan, did you run that..?

Yeah i did and i deleted all the threats but regsvr32 is still using 50% of cpu

[kevinf80]

Can I see that log please... Did you run FRST after Malwarebytes threat scan..?

[Axerol]

I ran it before the threat scan. do i have to run FRST again just to double check or i have to do something else?

[kevinf80]

Yes please run FRST again.....

Run FRST one more time, ensure all boxes are checkmarked under "Whitelist" but only Addition.txt under "Optional scan" Select scan, when done post the new logs. "FRST.txt" and "Addition.txt"

Thank you,

Kevin

[Axerol]

Here they are

Addition.txt FRST.txt

[kevinf80]

How is your system responding since running malwarebytes, has the regsvr32 issue cleared..?

[Axerol]

Nope it didn't, still randomly appearing and using 50% of my cpu. Also can we contact some other way? This forum doesn't like when i reply too frequently, it thinks i'm spamming

[kevinf80]

I can only contact you through the forum, just checking FRST logs, back shortly...

[kevinf80]

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file when running FRST fix" NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work. Open FRST and press the Fix button just once and wait. The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply. Next, Please download AdwCleaner by Malwarebytes and save the file to your Desktop. https://downloads.malwarebytes.com/file/adwcleaner Right-click on the program and select RunAsAdmin.jpg Run as Administrator to start the tool. Accept the Terms of use. Wait until the database is ?updated. Click Scan Now. When finished, please click Clean & Repair. Your PC should reboot now if any items were found. After reboot, a log file will be opened. Copy its content into your next reply. ? Next, Open Malwarebytes Anti-Malware.   On the Settings tab > Protection Scroll to and make sure the following are selected: Scan for Rootkits Scan within Archives   Scroll further to Potential Threat Protection make sure the following are set as follows: Potentially Unwanted Programs (PUP`s) set as :- Always detect PUP`s (recommended) Potentially Unwanted Modifications (PUM`s) set as :- Alwaysdetect PUM`s (recommended)   Click on the Scan make sure Threat Scan is selected, A Threat Scan will begin. When the scan is complete if anything is found make sure that the first checkbox at the top is checked (that will automatically check all detected items), then click on the Quarantine Selected Tab If asked to restart your computer to complete the removal, please do so When complete click on Export Summary after deletion (bottom-left corner) and select Copy to Clipboard. Wait for the prompt to restart the computer to appear, then click on Yes. After the restart once you are back at your desktop, open Malwarebytes once more to retrieve the log. To get the log from Malwarebytes do the following:   Click on the Reports tab > from main interface. Double click on the Scan log which shows the Date and time of the scan just performed. Click Export > From export you have two options: Copy to Clipboard - if seleted right click to your reply and select "Paste" log will be pasted to your reply Text file (*.txt) - if selected you will have to name the file and save to a place of choice, recommend "Desktop" then attach to reply   Use "Copy to Clipboard, then Right click to your reply > select "Paste" that will copy the log to your reply… Let me see those logs in your reply, also let me know if there are any remaining issues or concerns...

fixlist.txt

Edited June 29, 2019 by kevinf80

[Axerol]

Here's the fix log

Fixlog.txt

[kevinf80]

Thanks, couple other scans to do in my last reply, had trouble getting them to post..?

[Axerol]

Sorry didn't notice the update, here's the scan log:

Malwarebytes
www.malwarebytes.com

-Data log-
Review Date: 06/30/2019
Checkout Time: 1:18
Log file: d9708b0c-9abb-11e9-887f-d8cb8aa2e434.json

-Information about software-
Version: 3.8.3.2965
Component Version: 1.0.613
Service Pack Version: 1.0.11320
License: Evaluation Version

-Information about the system-
OS: Windows 10 (Build 18362.175)
Processor: x64
File system: NTFS
User: DESKTOP-0BQQ8CI \ xaxlo

- Verification report -
Type of check: Full check
Starting scan method: Manual
Result: Completed
Objects Verified: 447471
Threats detected: 0
Quarantined: 0
Elapsed time: 5 min, 13 s

-Scan settings-
Memory: Enabled
Startup: Enabled
File System: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Detection
PUM: Detection

-Data checks-
Process: 0
(No malware detected)

Module: 0
(No malware detected)

Registry key: 0
(No malware detected)

Registry Value: 0
(No malware detected)

Registry data: 0
(No malware detected)

Data Stream: 0
(No malware detected)

Folder: 0
(No malware detected)

File: 0
(No malware detected)

Physical sector: 0
(No malware detected)

Windows Management Instrumentation (WMI): 0
(No malware detected)

(end)

 

Sorry if it looks weird i had to translate it from russian to english but i hope you'll understand what's there, also here's the AdwCleaner logs i attached

AdwCleaner[C14].txt

[kevinf80]

Thanks for those logs, what is happening with your system now, any remaining issues or concerns...?

[Axerol]

Everything is now fine thank you so mjuch for help!

[kevinf80]

Thanks for the update, good to hear your system is good now... Continue:

Right click on FRST here: C:\Users\xaxlo\Desktop\FRST64.exe and rename uninstall.exe when complete right click on uninstall.exe and select "Run as Administrator" If you do not see the .exe appended that is because file extensions are hidden, in that case just rename FRST64 to uninstall That action will remove FRST and all created files and folders... Next, Remove all System Restore Points: https://www.tenforums.com/tutorials/33593-delete-system-restore-points-windows-10-a.html#option2 Create clean fresh Restore Point: http://www.thewindowsclub.com/create-system-restore-point Run Windows Disk Clean Up Utility - https://neosmart.net/wiki/disk-cleanup/ From there you should be good to go... Next, Read the following links to fully understand PC Security and Best Practices, you may find them useful.... Answers to Common Security Questions and best Practices Do I need a Registry Cleaner? Take care and surf safe Kevin...

 

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks