Solved Windows Process Manager x32

[Carloss]

Hello you wonderful people,

I've been noticing that my computer has been failing for a while (not restarting, failing to log off, slower than usual). I ran Malwarebytes which removed some malware I had, but since then, I've noticed that my CPU usage has been through the roof (hovers around 90-100%). Today I realized that I am infected by this Windows Manager virus and that this is the cause of my CPU usage (i found out by looking at windows taskbar).

Malwarebytes finds nothing anymore. Rootkit finds one infected folder/file (igfxmtc), but it fails to delete it. There are more folders with infected files, but these are not recognized by any software i've used.
Access to the folders is denied, so they cannot be deleted.

Some help would be appreciated as I'd like to avoid whiping my drives and reinstalling everything.

I attached the FRST and Addition logs, and some pics to hopefully help.

The first two pictures are errors I get upon logging in, and I am not sure what they are/mean.

Thank you!

 

[Carloss]

I just found this with processexplorer

 

[TwinHeadedEagle]

Hello,


Please download Farbar Recovery Scan Tool x64 and save it to a flash drive.

• Plug the flashdrive into the infected PC.
• Click Start and while holding Shift key on your keyboard click Power --> Restart.

Note: It is important that you keep Shift key pressed while doing this or it won't work.​

• Now you should get a window like this where you need to click Troubleshoot.

• In the next window, click Advanced options and select Command Prompt.
• Now you should log in into your account and after that Command Promptwindow.

Access the notepad and identify your USB drive

In the Command Prompt please type in:

notepad

and press Enter.

• When the notepad opens, go to File menu.
• Select Open.
• Go to Computer and search there for your USB drive letter.
• Note down the letter and close the notepad.

Scan with Farbar Recovery Scan Tool

Once back in the command prompt window, please do the following:

• Type in e:\frst64.exe and press Enter.
  You need to replace e with the letter of your USB drive taken from notepad!
• FRST will start to run. Give him a minute or so to load itself.
• Click Yes to Disclaimer.
• In the main console, please click Scan and wait.
• When finished it will produce a logfile named FRST.txt in the root of your pendrive and display it. Close that logfile.

Transfer it to your clean machine and include it in your next reply.

 

[Carloss]

The shift restart did not work for me, so I just went ahead and reinstalled windows. Sorry to waste your time!