Solved svchost.exe in syswow64 folder high cpu usage

JayZ

New Member
Joined
Apr 11, 2018
Messages
11
OS
Windows 10
Antivirus
Malwarebytes
#1
svchost.exe in syswow64 high CPU usage

Hi guys I need help with this svchost thing. This problem started March 31,2018 I noticed my laptop was getting warmer than usual, when I opened Task Manager an unnamed Process is using 50+ % of my CPU when connected to the internet. Sometimes there are 3 of them but only one is using my CPU. When I opened the file location it goes to the svchost.exe in the syswow64 folder. After about an hour my laptop would have a blue screen saying critical error. When it is running it closes my browser when I try to search for solutions for it.
I tried to run the FRST64.exe but it won't open when that process is running so I restarted my laptop and ran the scan before that unnamed process could start again. Please see attachments below. Thank you in advance for your help guys. IMG_20180418_220816_500.jpg
 
Operating System
Windows 10
Are you using a 32-bit or 64-bit operating system?
64-bit (x64)
Infection date and initial symptoms
March 31,2018 unnamed process with high CPU usage when connected to the Internet
Current issues and symptoms
unnamed process with high CPU usage when connected to the Internet then after about an hour it goes to blue screen saying critical error.
Steps taken in order to remove the infection
I already ran Malwarebytes and a couple of other programs but found nothing.

Tried to run FRST64.exe but when that process is running it won't open so I restarted my laptop and ran FRST64.exe before the unnamed process could start.
Logs added to Help Request
FRST.txt, Addition.txt

Attachments

TwinHeadedEagle

Removal Expert
Staff member
Joined
Mar 8, 2013
Messages
22,092
OS
Windows 10
Antivirus
ESET
#2
Hello,



Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    icon and select
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

Attachments

JayZ

New Member
Joined
Apr 11, 2018
Messages
11
OS
Windows 10
Antivirus
Malwarebytes
#3
Hi,
Thank you for your reply. Just got home from work.
Here is the fix log. I will observe my laptop tonight. I will use it for a couple of hours and I will update you. Again thank you very much!
 

Attachments

Likes: Thunderbold

JayZ

New Member
Joined
Apr 11, 2018
Messages
11
OS
Windows 10
Antivirus
Malwarebytes
#4
Hello,

Just a little over an hour and it's back already. Using 50+ % of my CPU again.
I can't run the FRST64.EXE while that thing is running.
Malware bytes found nothing.
What's the next step? SVC2.jpg
 

TwinHeadedEagle

Removal Expert
Staff member
Joined
Mar 8, 2013
Messages
22,092
OS
Windows 10
Antivirus
ESET
#5
I need one more information, I made a mistake last time.


Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    icon and select
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

Attachments

JayZ

New Member
Joined
Apr 11, 2018
Messages
11
OS
Windows 10
Antivirus
Malwarebytes
#6
Thanks,
I just restarted my laptop I will try this now and update you again later.
 

TwinHeadedEagle

Removal Expert
Staff member
Joined
Mar 8, 2013
Messages
22,092
OS
Windows 10
Antivirus
ESET
#7
This will take 5 seconds to do, just some info and then we can proceed with a main fix.
 

JayZ

New Member
Joined
Apr 11, 2018
Messages
11
OS
Windows 10
Antivirus
Malwarebytes
#8
Hello,

Here is the latest fixlog.
I will observe again while I'm connected to the Internet and I will update you again later.

Thank you.
 

Attachments

JayZ

New Member
Joined
Apr 11, 2018
Messages
11
OS
Windows 10
Antivirus
Malwarebytes
#9
Hello
It's back again. Just under 5 mins.
What is this thing?
I can't run FRST64.exe while that process is running maybe that's why it's hard to fix it.
How can I run FRST64.exe while that process is running?
 

TwinHeadedEagle

Removal Expert
Staff member
Joined
Mar 8, 2013
Messages
22,092
OS
Windows 10
Antivirus
ESET
#10
Please uninstall the current version of MalwareBytes from your computer.


Scan with Malwarebytes' Anti-Malware

Please download Malwarebytes Anti-Malware and save it to your desktop.
  • Install the progam.
  • Click the Scan tab, choose Threat Scan is checked and click Start Scan.
  • If threats are detected, click the Quarantine Selected button. You will now be prompted to reboot. Click Yes.
  • Upon completion of the scan (or after the reboot), click the Reports tab.
  • Double-click the Scan Log.
  • At the bottom click Export and choose Text file.
Save the file to your desktop and include its content in your next reply.
 

JayZ

New Member
Joined
Apr 11, 2018
Messages
11
OS
Windows 10
Antivirus
Malwarebytes
#11
Ok I will do that now and will update you again later.
Thank you.
 

JayZ

New Member
Joined
Apr 11, 2018
Messages
11
OS
Windows 10
Antivirus
Malwarebytes
#12
Hello,

Just finished following your instructions and I was surprised by the number of malware it detected. Your version of Malware bytes is great. Thank you.
Here is the txt file you requested.

What's the next step?
 

Attachments

JayZ

New Member
Joined
Apr 11, 2018
Messages
11
OS
Windows 10
Antivirus
Malwarebytes
#13
I will connect to the Internet again and will observe my laptop and will update you again later.

Thank you.
 

JayZ

New Member
Joined
Apr 11, 2018
Messages
11
OS
Windows 10
Antivirus
Malwarebytes
#14
Hello,

Good day to you.
So my sister used the laptop for over two hours last night and she said that the unnamed process did not appear, so far looking pretty good.
I will test it for one more day then I will update you.

Thank you very much.
 

JayZ

New Member
Joined
Apr 11, 2018
Messages
11
OS
Windows 10
Antivirus
Malwarebytes
#15
Hi,

Good day to you.
So my sister has been using the laptop since last night and I'm happy to report that the unnamed process never returned.
Thank you Mr. TwinHeadedEagle and the Malwaretips community this is a great group with great people.
Thank you very much!