Any browser other than the browser I am using uses very high CPU

[sanskarsingh007]

Alright. I haven't managed to find a problem similar to mine anywhere in the internet so pardon me if there already is. I use updated edge browser for my work but I also had chrome in my pc. Whenever I booted my PC, chrome used about 35-85% of cpu. I hadn't even launched the chrome and nothing was showing in the tray. Frustrated, I removed chrome and installed firefox. Same problem. When I check task manager of firefox, nothing is showing. In the normal PC task manager, whenever I manually kill the firefox process, cpu usage is back to normal. 

I really hope someone can help. What do I do

[Maurice Naggar]

Hi,      
My name is Maurice. I will be helping and guiding you, going forward on this case.
Let me know what first name you prefer to go by.

Please follow my directions as we go along.  Please do not do any changes on your own without first checking with me. 
If you will be away for more than 4 consecutive days,  do try to let me know ahead of time, as much as possible. 
  
Please only just attach   all report files, etc  that I ask for as we go along.

Please know I help here as a volunteer.  and that I am not on 24 x 7.

 

I'm going to suggest you begin with what follows.

I  would suggest to download, Save, and then run Malwarebytes ADWCLEANER.
Please close Chrome and all other open web browsers after you have saved the Adwcleaner and before you start Adwcleaner scan.
Adwcleaner  detects factory Preinstalled applications too! 

Please download  Malwarebytes AdwCleaner https://downloads.malwarebytes.com/file/adwcleaner
 
Be sure to Save the file first, to your system.  Saving to the Downloads folder should be the default on your system.

Go to the folder where you saved Adwcleaner. Double click Adwcleaner  to start it.
At the prompt for license agreement, review and then click on I agree.

You will then see a main screen for Adwcleaner. ( if you do not see it right away, minimized the other open windows, so you can see Adwcleaner).
Then click on Dashboard button.
Click the blue button "Scan Now".

allow it a few minutes to finish the Scan.   Let it remove what it finds.
NOTE:  When it comes to the section "
Pre-installed applications

You can skip that.
Please find and send the Adwcleaner "C" clean report.
In Adwcleaner, click the "Reports" button.  Look at the list of reports for the latest date & type "Clean".
Double Click that line & it will open in Notepad.   Save the file to your system and then Attach that with your reply.

That C clean report will be the one with the most recent Date and time at folder  C:\AdwCleaner\Logs
Thanks.  Keep me advised.
 

[sanskarsingh007]

Hey Maurice,

 

Thank you for your timely response and detailed explanation.

For some reason the following download link didn't work

https://downloads.malwarebytes.com/file/adwcleaner

 

so I downloaded the trial version of premium malwarebytes, scanned and quarantined the threats and it worked!

 

I really appreciate your help. Thank you again!

Apologies for posting this before actually trying the malwarebytes. Kindly don't get vexed. 

Regards,

Sanskar

[Maurice Naggar]

Hi.  Its odd that you ran into some issue with the Adwcleaner download link.

As to the Malwarebytes for Windows scan run, could you send a copy of the scan-run-report
Locate the Scan run report;  export out a copy;  & then attach in with your  reply.
See https://support.malwarebytes.com/hc/en-us/articles/360038479194-View-Reports-and-History-in-Malwarebytes-for-Windows-v4

.

and on Adwcleaner, here is a alternate download page    https://malwarebytes.com/adwcleaner

 

in case that one too does not work,  try this link

 

[Maurice Naggar]

Hi, Good afternoon.   How is it going ?

[sanskarsingh007]

Hey Maurice,

 

Apologies for not replying. I tried to open the download link so that I could immediately scan and send you the required details but didn't work. Later I got caught up in my office work. 

I think my ISP may have blocked the download site. It has blocked many adult sites. 

https://www.malwarebytes.com/adwcleaner  This site opens but when I click on download, it shows [see the attached picture]

Below is the scan report from normal malware application. 

 

Regards,

Sanskar Singh

 

scan report.txt

[Maurice Naggar]

Thank you.    Lets make time & do a one time run with a special tool.

Please read all of these lines first so that it is all clear to you about our plan. I need a one time run of MBAR like listed here, please.

Please download Malwarebytes Anti-Rootkit (MBAR) from this link here

and save it to your desktop.

Doubleclick on the MBAR file and allow it to run.

•Click OK on the next screen, to allow the package to extract the contents of the file to its own folder named mbar.

•mbar.exe will launch automatically. On some systems, this may take a few extra seconds. Please be patient and wait for the program to open.

•After reading the Introduction, click 'Next' if you agree.

•On the Update Database screen, click on the 'Update' button.

•Once you see 'Success: Database was successfully updated' click on 'Next', then click the Scan button.

With some infections, you may see two messages boxes:

1.'Could not load protection driver'. Click 'OK'.
2.'Could not load DDA driver'. Click 'Yes' to this message, to allow the driver to load after a restart. Allow the computer to restart. Continue with the rest of these instructions.

•If malware is found, press the Cleanup button when the scan completes. .

Please attach the log it produces, you'll find the log in that mbar folder as MBAR-log-<date and time>***.txt . Please attach that to your next reply.
  
 

[Maurice Naggar]

Note:  The last scan with Malwarebytes for Windows found a few trojans on this machine.  One of them was classified as  Trojan.MalPack.TRE

Trojan.Malpack is Malwarebytes’ generic detection name for Trojans that use custom packers to obfuscate their code. This concerns packers that are normally not in use for legitimate purposes. So the detection is purely based on the way the file is packed—the payload could be anything.

Please do not do any online banking with this pc, nor any shopping, nor any web surfing.

[sanskarsingh007]

So I was trying to search in google for what "Trojan.MalPack.TRE" is. I saw a link and tried to open it 

https://adwareremoval.info/trojan-malpack-tre-generic/

But the link was blocked and malwarebytes gave me a pop up informated [attached below]. Below is the screenshot of what the web browser showed.

Below is attached report of MBA. I scanned twice. Looks good

 

mbar-log-2020-09-10 (11-22-11).txt mbar-log-2020-09-10 (11-39-09).txt

[Maurice Naggar]

I would like to emphasize to be extremely careful when you go on a search engine, including the one at Google.   Do not be so quick to click on links.  Hold off on the click finger.

Instead, just only hover the mouse pointer over any link .....pause ....and look at what the link address is shown on the mini-display

Hovering with mouse pointer over a link is an important technique to look before you leap.

.

The block notice above kept your browser away from potential harm.

.

Thanks for the MBAR logs.   It found no rootkit / no malware.    We can keep the MBAR aside.

.

I would appreciate  getting some key details from this machine.
 NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

Do have patience while the report tool runs.  It may take several minutes.  Just let it run & take its time.  You may want to close your other open windows so that there is a clear field of view.
Download Malwarebytes Support Tool
    
  
    Once the file is downloaded, open your Downloads folder/location of the downloaded file
    Double-click mb-support-1.7.0.827.exe  to run the report

Once it starts, you will see a first screen with 2 buttons.  Click the one on the left marked "I don't have an open support ticket".

        You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
        
    Place a checkmark next to Accept License Agreement and click Next
Now click the left-hand side pane "I do not have an open support ticket"

    You will be presented with a page stating, "Get Started!"
    Do NOT use the button “Start repair” !   But look instead at the far-left options list in black.

    Click the Advanced tab on the left column
    
    Click the Gather Logs button
    
    A progress bar will appear and the program will proceed with getting logs from your computer.  Please do have patience.  It takes several minutes to gather.
   
    Upon completion, click a file named mbst-grab-results.zip will be saved to your Desktop. Click OK.  Then Exit the tool.

    Please attach the ZIP file in your next reply.

.

[AdvancedSetup]

Hello @sanskarsingh007

Following up to see if you need any additional further assistance.

Please post a follow up on your status when you have a moment

Thank you

 

[sanskarsingh007]

Apologies for late response. Kindly find the attached requested file

 

mbst-grab-results.zip

[Maurice Naggar]

Good morning.    Thanks for the Malwarebytes support-tool report.   I am surprised to notice that the Malwarebytes for Windows program is no longer reported as installed !

Did you perhaps make changes on your own ?    The report indicates there was an attempted "clean" operation on the 15th (today)  with the Malwarebytes support tool.

I need to insist that you first check with me before doing something on your own.

.

Here is what I would suggest doing at this point.

Save any open work documents in prograss if any.   Close / exit the applications you may have open at this point.

Be sure then to do one Windows Restart  so that the machine has a new session.

.

Please read all that follows first so that you are fully clear in what is involved.

Ideally you want to save the download file to the Desktop   for ease of operations.

Also, be sure to accept the default installation location for the program.    It needs to be installed in same logical drive where Windows is also stoed.

 

the Malwarebytes installer is at this link
 
https://downloads.malwarebytes.com/file/mb4_offline

 
 
download and save the setup file . It will automatically download. Just SAVE first.
 
1. RIGHT-click mb4-setup-consumer- 4.2.0.179-1.0.1036-1.0.nnnnn   .exe & select “Run as Administrator”   to start the Malwarebytes for Windows setup.
2. Follow the installation instructions to complete setup.
 
Watch all of the process. Have lots of patience.

Next things to do in the program:

Start Malwarebytes.    Then click on the Settings icon  at top right.

Then look on the GENERAL tab.    Scroll down to " Beta Updates "       and click that to the Right side   (  ON  ) .

Then scroll back up to the top at "Application Updates"   and click on the button " Check for Updates ".     Have patience   & follow all the prompts.

The latest Beta is Version 4.2.1.89

[sanskarsingh007]

Ya I actually wasn't trying to "scan" as you clearly mentioned NOT to do that. There wasn't "But look instead at the far-left options list in black." thingy so I was searching and searching and accidently ended up scanning which I tried to cancel but I think I couldn't. 

I truthfully didn't want to remove malwarebytes from the PC as it was my savior but it later on gave so few problems. I access corporate firewalls like juniper, fortigate and sophos from ssl vpn. The pages were either not loading properly or not loading at all. I tried removing the malwarebytes and it worked for some reason. 

I will install the software you have provided. If everything turns out well, I will keep it

 

[Maurice Naggar]

Lets get Malwarebytes for Windows installed like I listed.    and if needs be, it can be used as just a on-demand scanner.

My concern is that different issues are being mixed in.   This case only started about a browser & a readout display on Task manager & then a browser issue.

We need to keep things in focus  & also keep things simple.   One thing at a time.

[sanskarsingh007]

aye aye captain!

Although its an causality effect, I shall keep that in mind. Browser problem is solved though. Is there someway to give you a token of appreciation?

[Maurice Naggar]

ok.   After we close the case,   look for the spots to rate this case   ( I believe the forum will show that at the top right corner  ....after this case is closed by me )

Once the new install / setup is completed,  let me know of the result.   I can guide you to a new scan,  and to make any adjustments, if needed, on the Malwarebytes.

[Maurice Naggar]

Hello.   How is it going ?   Is there anything else that you need ?

[sanskarsingh007]

Everything working clean and nice so far. Will raise a new ticket if faced new issues. 

I am very grateful for your help. really. Thank you

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you

 

 

[Maurice Naggar]

@sanskarsingh007   Very happy to have helped.

My best to you.