Solved svchost.exe (netsvcs) maxing CPU out by streaming in audio feeds

[Mrdre]

Yes and now my computer pretty much crashes everytime I open it. And if it does not crash, it will not open antthing.

 

[VistaKing]

Can you run a new FRST please

64-Bit Version OS Farbar Recovery Scan Tool x64 <===== Download Link

Drag the FRST64.exe from the Downloads folder to your Desktop

Right click on FRST64.exe and choose

When the tool opens click Yes on the disclaimer window .

Press Scan button.

FRST will let you know when the scan is complete and has written the FRST.txt to file

   Note

The first time Farbar Recovery Scan Tool is run, it makes also another log Addition.txt

Please upload both logs in your reply.(FRST.txt and Addition.txt)

:note: FRST.txt and Addition.txt will be on the Desktop :note:

Upload a File
Click on the Go Advanced button under the Message box . Scroll down to Additional Options then click on Manage Attachments in the Attach Files sections . Click the Browse button locate the file then click on the Open button . In the Upload File from your Computer section click on the Upload button . Wait until it finishes uploading then close the window . Then click Submit Reply .

 

[Mrdre]

Will this evening after work.

 

[VistaKing]

What Antivirus are you using if you're using Norton . Uninstall it and reinstall MSE

Norton Removal Tool <==== Download Link

MSE Installation <==== Download Link

 

[Mrdre]

uninstalled norton and installed MSE. Run Scan came up clean. Run the FRST done very quick and no Additional.txt was created. Attached FRST.txt. CPU running Idle % Freq 30+ with an spike here and there. No audio feed streaming since uninstalled norton. So Norton should not be re-installed??? Also what is MSE and can it be trusted virus protection?

 

[VistaKing]

MSE is Microsoft Security Essentials its their free antivirus software .

 

[VistaKing]

If you open C:\Windows do you have random name folders with Asian letters ?

Do you have speedmypc installed . If possible can you take a scrnshot of your programs and features ?

Click on rb: type Programs and Features inside

and press [ENTER]

 

[Mrdre]

No weird or Asian Named files in C\Windows.

ScnShts of P&F attached.

 

[VistaKing]

Can you upload the images as either a .jpg or .png ? I'm on an iPad .

 

[VistaKing]

On the FRST.txt file I see this

C:\Windows\箔,穘,
C:\Windows\竂,
C:\Windows\竀,
C:\Windows\ᰆⱻ舀밃뉷믡塷밃w
C:\Windows\ऍ皋箌,Ἁ畬̠
C:\Windows\Ĕ
C:\Windows\400
C:\Windows\̠
C:\Windows\懲當ྸ畷┈畷穠,Ź瞼穘,愈瞺笜,稐,房瞼扄瞼簋矰笜,愈瞺穘,秨,漢瞺筈,燕矀좣g￾￿扄瞼Ỽ畬

 

[Mrdre]

Here are the png files of P&F. I also did a ScnSht of C\Windows with everything unhidden and have thumbs file with Asian letters. See ScnSht.

 

[VistaKing]

Open Notepad . Paste highlighted text below



start
C:\Windows\SysWOW64\ezSharedSvcHost.exe
HKCU\...\Policies\system: [LogonHoursAction] 2
HKCU\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
MountPoints2: G - G:\LaunchU3.exe -a
HKU\Kids\...\Run: [SearchProtect] - C:\Users\Kids\AppData\Roaming\SearchProtect\bin\cltmng.exe [x]
HKLM-x32\...\Run: [] - [x]
HKU\Kids\...\Policies\system: [LogonHoursAction] 2
HKU\Kids\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
C:\Windows\箔,穘,
C:\Windows\竂,
C:\Windows\竀,
C:\Windows\ᰆⱻ舀밃뉷믡塷밃w
C:\Windows\ऍ皋箌,Ἁ畬̠
C:\Windows\Ĕ
C:\Windows\400
C:\Windows\̠
C:\Windows\懲當ྸ畷┈畷穠,Ź瞼穘,愈瞺笜,稐,房瞼扄瞼簋矰笜,愈瞺穘,秨,漢瞺筈,燕矀좣g￾￿扄瞼Ỽ畬
C:\Windows\Tasks\SpeedMaxPc Registration3.job
C:\Windows\System32\Tasks\SpeedMaxPc Registration3
C:\Windows\Tasks\SpeedMaxPc Update3.job
C:\Windows\Tasks\SpeedMaxPc.job
C:\Windows\System32\Tasks\SpeedMaxPc
C:\Windows\System32\Tasks\SpeedMaxPc Update3
C:\Windows\Tasks\RegCure Pro.job
C:\Windows\System32\Tasks\RegCure Pro
C:\Windows\Tasks\SA.DAT
end


Click on File ==> Save As

File Name: fixlist.txt
Save as Type : All Files
Location : Desktop

Click the [Save] button

Launch FRST64.exe and click on the [FIX] button . Once complete it will create a new log called Fixlog.txt . Upload the new log in your reply .

Is this a new laptop ?

 

[Mrdre]

Fix log. No this is about a three yr old computer.

 

[VistaKing]

After you ran the Fix did you restart the PC ?

 

[Mrdre]

it restarted on its own

 

[VistaKing]

Can you run another FRST scan . Delete the old FRST.txt file and download a new FRST64.exe below

Run Farbar Recovery Scan Tool

64-Bit Version OS Farbar Recovery Scan Tool x64 <===== Download Link

Drag the FRST64.exe from the Downloads folder to your Desktop

Right click on FRST64.exe and choose

When the tool opens click Yes on the disclaimer window .

Press Scan button.

FRST will let you know when the scan is complete and has written the FRST.txt to file

   Note

The first time Farbar Recovery Scan Tool is run, it makes also another log Addition.txt

Please upload both logs in your reply.(FRST.txt and Addition.txt)

:note: FRST.txt and Addition.txt will be on the Desktop :note:

 

[Mrdre]

Should i be running the optional scan along with the whitelist?

 

[VistaKing]

Run the scan in normal mode

 

[Mrdre]

here is the scan txt

 

[VistaKing]

For some reason the fix didn't remove the random files inside C:\Windows can you delete them manually ?