Whenever I start my computer, this box pops up. Is it a system error/ a virus? WindowsService.exe

This opens up automatically when I start my PC. Its name is WindowsService.exe. It never used to open before. Is this a virus? How to fix this? What should I do to stop it from popping up repeatedly every time I start my Computer?

Image

It's a coin miner malware. Please run the following commands to remove it.

From the admin Command Prompt, run these four commands:

del "%LocalAppData%\Updates\Run.vbs"

schtasks /delete /tn "\Window Update" /f

schtasks /delete /tn "\Windows Service Task" /f

rd /s /q "%LocalAppData%\Updates"

Pls post a screenshot of the output window.

Note: Microsoft Defender needs to be fixed after doing the above. The malware would have deleted Defender in most cases.

And then do the following;

  • Download Farbar Recovery Scan Tool (FRST64.exe) 

  • Run FRST64.exe and click "Scan".

  • Upload the two logs, FRST.txt and Addition.txt, to your OneDrive and share the link here.

______________________________________________________________________________________________________
Ramesh, Windows Shell MVP 2003-2012.
If this post resolves your issue, pls mark it as an Answer.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I tried the commands you mentioned

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

The malware seems to have disabled UAC and deleted the Security Center. Please post the Farbar scan logs, as requested in my previous post.

______________________________________________________________________________________________________
Ramesh, Windows Shell MVP 2003-2012.
If this post resolves your issue, pls mark it as an Answer.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

how can i do so? The pop up is gone I tried different method from different post but now the only problem is of window security center service!

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Instructions are in my post #1.

BTW, which methods did you try?

______________________________________________________________________________________________________
Ramesh, Windows Shell MVP 2003-2012.
If this post resolves your issue, pls mark it as an Answer.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

That method can be used as well. But since you ran those commands already, Autoruns won't list those two scheduled task entries. they're already gone.

______________________________________________________________________________________________________
Ramesh, Windows Shell MVP 2003-2012.
If this post resolves your issue, pls mark it as an Answer.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

now no notifications and pop ups are coming but windows security is blank?

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Let me ask one more time. Please upload the Farbar scan logs. See Share OneDrive files and folders - Microsoft Support: https://support.microsoft.com/en-us/office/share-onedrive-files-and-folders-9fcc2f7d-de0c-4cec-93b0-a82024800c07

If you don't want to upload it, then you may do the following

1) Download Malwarebytes and run a scan.

2) Repair Windows 10. How to perform an In-place Upgrade with Windows 10 Step-by-Step Guide - Microsoft Community:

______________________________________________________________________________________________________
Ramesh, Windows Shell MVP 2003-2012.
If this post resolves your issue, pls mark it as an Answer.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info


Last updated February 10, 2024 Views 193 Applies to: