Jump to content

Problem with Antimalware Service Executable


Go to solution Solved by kevinf80,

Recommended Posts

Hello UsagiChan37 and welcome to Malwarebytes,

Run the following:

Download Farbar Recovery Scan Tool and save it to your desktop.

Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.html

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way...

Be aware FRST must be run from an account with Administrator status...
 
  • Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.)
  • Make sure Addition.txt is checkmarked under "Optional scans"

     
  • Press Scan button to run the tool....
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The tool will also make a log named (Addition.txt) Please attach that log to your reply.


Thank you,

Kevin
Link to post
Share on other sites

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks

 

Link to post
Share on other sites
On 10/8/2020 at 3:41 PM, kevinf80 said:
Hello UsagiChan37 and welcome to Malwarebytes,

Run the following:

Download Farbar Recovery Scan Tool and save it to your desktop.

Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.html

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way...

Be aware FRST must be run from an account with Administrator status...
 
  • Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.)
  • Make sure Addition.txt is checkmarked under "Optional scans"

     
  • Press Scan button to run the tool....
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The tool will also make a log named (Addition.txt) Please attach that log to your reply.


Thank you,

Kevin

Here are the files
FRST.txtAddition.txt

Link to post
Share on other sites

Hello UsagiChan37,

I do not see any malware or infection in the logs from FRST. The original query you quoted regarding Antimalware Service Executable is not really a problem, that is a service for Windows Defender. More than likely the high CPU reading occured during a scan.

Has the high CPU settled down...?

Thank you,

Kevin..

Link to post
Share on other sites

Uninstall the following programs:

KMS 360 Pro (HKLM\...\{52C23948-5BB8-497E-977C-2C470B7F1A07}) (Version: 1.2.6 - Il Webmaster 21) Hidden
KMS 360 Pro (HKLM\...\KMS 360 Pro 1.2.6) (Version: 1.2.6 - Il Webmaster 21)
Advanced SystemCare (HKLM-x32\...\Advanced SystemCare_is1) (Version: 13.7.0 - IObit)

Does that make any difference...

Link to post
Share on other sites
Run FRST one more time, ensure all boxes are checkmarked under "Whitelist" but only Addition.txt under "Optional scan" Select scan, when done post the new logs. "FRST.txt" and "Addition.txt"

Link to post
Share on other sites
Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file when running FRST fix"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

user posted image

fixlist.txt

Link to post
Share on other sites

Hello UsagiChan37,

Looking at the errors in FRST logs Windows Defender is not being allowed to finish an auto scan. That maybe the cause of high CPU.... Try the following:

Offline scan for windows 10

Open the search function, type or copy/paste Windows Defender Security Center then select ok to open that option.

In the new window select Virus and Threat Protection then select Scan Options

The scan options window will open, from there select Windows Defender Offline Scan

You will be given the option to save any opened work etc, then select Scan from there when the scan completes Windows will reboot..

To check for found entries:

Select Start , and then select Settings > Update & Security > Windows Security > Virus & threat protection . On the Virus & threat protection screen select Protection history.

If entries are shown as "Found" the time and date will be same as the offline scan just completed.....
 
Thank you,
 
Kevin
Edited by kevinf80
typing error
Link to post
Share on other sites
Select the Windows key and R key together, the run box will open.

Type or copy/paste services.msc into the run box, tap enter....

Services window will open. Scroll to Security Center....

Right click direct on that service, select Refresh..

Close out the services window, reboot your PC...

Does the issue with "Antimalware Service Executable" clear.....
Link to post
Share on other sites
  • Solution

Ok, try the following: I`ve attached WinDefend.zip to this reply, download and save to your Desktop, unzip that file so you now have WinDefend.reg

Double click on that .reg file, allow any merges or alerts. When complete reboot your system, does the issue clear....

WinDefend.zip

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.