Solved svchost.exe (netsvcs) maxing CPU out by streaming in audio feeds

[Mrdre]

I have encounter a problem with this svcshost streaming constant feeds of audio in. I have tried a registery fixer as suggested on search I did and it did fix it. I researched the problem on this forum and tried several things others suggested back in 2009 to others. Such as making sure that my system was not setups as host router, disabling BITS and Windows Update, and suspending that svchost. which than nothing will open. I am lost on where to go next. Someone please Help.

 

[VistaKing]

Run Farbar Recovery Scan Tool

64-Bit Version OS Farbar Recovery Scan Tool x64 <===== Download Link

Drag the FRST64.exe from the Downloads folder to your Desktop

Right click on FRST64.exe and choose

When the tool opens click Yes on the disclaimer window .

Press Scan button.

FRST will let you know when the scan is complete and has written the FRST.txt to file

   Note

The first time Farbar Recovery Scan Tool is run, it makes also another log Addition.txt

Please upload both logs in your reply.(FRST.txt and Addition.txt)

:note: FRST.txt and Addition.txt will be on the Desktop :note:

Upload a File
Click on the Go Advanced button under the Message box . Scroll down to Additional Options then click on Manage Attachments in the Attach Files sections . Click the Browse button locate the file then click on the Open button . In the Upload File from your Computer section click on the Upload button . Wait until it finishes uploading then close the window . Then click Submit Reply .

 

[VistaKing]

If the download wasn't working it is working now .

 

[Mrdre]

Scan complete

Here are the txt files from the scans.

 

[VistaKing]

Take a look at the links below

MywebSearchRemoval

Search Protect by Conduit Remove

AdwCleaner

Click here AdwCleaner

:ar: Click on Download Now button

:ar: Save to the Desktop

:ar: Right-click on AdwCleaner.exe and choose

:ar: Click on Delete and confirm the prompt.

:ar: Your computer will be rebooted automatically. A text file will open after the restart.

Upload the log : The log file is at C:\AdwCleaner[Sn].txt


To Remove AdwCleaner program from your PC

:ar: Right click on adwcleaner.exe choose Run as administrator to run the tool.

:ar: Click on Uninstall, then confirm with yes to remove this utility from your computer.

Download Junkware Removal Toolkit

Click here Junkware Removal Tool to download

Drag the JRT.exe from the Downloads folder to your Desktop

Right click JRT.exe and choose

Once done upload the JRT.txt file






Uninstall these Softwares using RevoUninstaller

• RegCureProSetup
• Akamai
• SpeedMaxPc

RevoUninstaller Free Version
Download

For 32-bit OS
RevoUninstaller Pro 30-Day Trial Version
Download

For 64-Bit OS

Double click Revo Uninstaller to run it.
From the list of programs double click on The Program to remove
When prompted if you want to uninstall click Yes.
Be sure the Advanced option is selected then click Next.
The program will run, If prompted again click Yes
when the built-in uninstaller is finished click on Next.
Once the program has searched for leftovers click Next.
Check/tick the bolded items only on the list then click Delete
when prompted click on Yes and then on next.
put a check on any folders that are found and select delete
when prompted select yes then on next
Once done click Finish.

   Note

If the free version of RevoUninstaller doesn't show the program you would need to download and install the 30-Day trial of RevoUninstaller Pro which will be able to remove 64-bit programs

 

[Mrdre]

next set of logs

Here are the two logs

 

[VistaKing]

How's the PC running ?

 

[Mrdre]

still streaming constant. CPU 100% Freq 100%

 

[VistaKing]

Download Rkill below . Save the file to your desktop

Download link :ar: Downloading RKill

Right click on iexplorer.exe and choose

Upload the log it creates.

   Note

Please close all windows before running the tool

 

[Mrdre]

here you go.

 

[VistaKing]

Is your CPU still showing 100% ?

 

[Mrdre]

After re-boot, with only resouce monitor open cpu is all over the place. avg25 - 60 Freq 30 - 90. and I still am getting spurits of audio streaming. definitely an improvement.

 

[VistaKing]

Run

Malwarebytes

Download Link :ar: MalwareBytes

When the installation is done uncheck Enable free trial of Malwarebytes (see image below )

Update the definitions and do a full scan

:ar: On the Scanner tab:
Make sure the "Perform Full Scan" option is selected.
Then click on the Scan button.
:ar: If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
:ar: The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
:ar: When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
:ar: Click OK to close the message box and continue with the removal process.
:ar: Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
:ar: Make sure that everything is checked, and click Remove Selected.
:ar: When removal is completed, a log report will open in Notepad.
:ar: The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
:ar: Copy and paste the contents of that report in your next reply and exit MBAM.

 

[Mrdre]

No malware found. CPU 50-60 Freq 100.

 

[VistaKing]

Ok let's see what ESET online scanner picks up

On

Hold down Control and click on ESET Online Scanner to open ESET OnlineScan in a new window
Click the

button
Check YES, I accept the Terms of Use.
Click the Start button.
Accept any security warnings from your browser.
Under scan settings, check "Scan Archives" and "Remove found threats"
Click Advanced settings and select the following:
° Scan potentially unwanted applications
° Scan for potentially unsafe applications
° Enable Anti-Stealth technology
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click List Threats
Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Click the Back button.
Click the Finish button.

On

or

Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
Right click on

choose

on your desktop
Check YES, I accept the Terms of Use.
Click the Start button.
Accept any security warnings from your browser.
Under scan settings, check "Scan Archives" and "Remove found threats"
Click Advanced settings and select the following:
° Scan potentially unwanted applications
° Scan for potentially unsafe applications
° Enable Anti-Stealth technology
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click List Threats
Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Click the Back button.
Click the Finish button.

 

[Mrdre]

No treats found, still streaming CPU 80 - 100% Freq 100%

 

[VistaKing]

Try this

Open up an Elevated Command Prompt. Click on rb: in

type CMD . Right click on CMD under Programs (1) choose

. On the User Access Control window click on the Yes button . Command Prompt opens up to C:\Windows\System32>_

Inside the command prompt paste the highlighted text below

net stop WMPNetworkSvc and press [ENTER]

Restart the PC and see if that fixes your issue .

:note: To paste the highlighted text just right click on the mouse inside the command prompt and choose paste . CTRL+V will not work you will get ^V if you do Ctrl+V :note:

 

[Faladu]

I would have CCleaner (piriform.com) analyze your registry and see if anything shows up to be fixed, it will, there are constantly items in scans, windows is an error riddened beast, lots of entries not cleared properly at the very least.

Falls under the couldn't hurt category, it will offer to backup your registry when you go to fix, say YES and remember where you saved it, I made a directory on a partition just for those saves.

svchost is a critical windows component, so yes as discovered, blocking it is a bad idea.

If nothing else is helping, I would get hijackthis (very advanced program, use with extreme caution)

Found here:

http://sourceforge.net/projects/hjt/

[Read the overview, basically it shows deep SETTINGS, many of which are good, but allows you to remove them, thus the need for extreme caution, you have been warned! :devil:]

 

[Mrdre]

Neither worked.

 

[VistaKing]

Did you remove the software using RevoUninstaller ?