W.D.F.exe? throttling my CPU 89%

[dushomirsky]

Image:
https://imgur.com/a/0p5un

Does anybody know what this process is, it only recently appeared on my computer and its throttling my CPU to the point that even old games are unplayable, if anybody has a fix for this please let me know. Thanks

specs:
CPU:AMD Ryzen 5 1600
MOB:ASUS PRIME B350-M
GPU:GALLAX GTX 1060 6GB
24 GB DDR4 2133Mhz RAM - Gskill

 

[vapour]

https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&uact=8&ved=0ahUKEwiHhYbvoNfWAhWE6yYKHf1OAuoQFggmMAA&url=https%3A%2F%2Fwww.bleepingcomputer.com%2Fstartups%2FWDF.exe-20429.html&usg=AOvVaw04-lyOLXun-yJkBrkyvOKI

Your antivirus. Very resource demanding, you'd better go with Panda antivirus free + malwarebyte combo, quite light.

 

[dushomirsky]

https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&uact=8&ved=0ahUKEwiHhYbvoNfWAhWE6yYKHf1OAuoQFggmMAA&url=https%3A%2F%2Fwww.bleepingcomputer.com%2Fstartups%2FWDF.exe-20429.html&usg=AOvVaw04-lyOLXun-yJkBrkyvOKI

Your antivirus. Very resource demanding, you'd better go with Panda antivirus free + malwarebyte combo, quite light.

The thing is I disabled my antivirus and its still is doing this process
https://imgur.com/a/uPhKa

 

[feelinfroggy777]

I think it is doing it at startup. Go to task manager, then select the startup tab. See if it is there and disable it. Then restart and see what happens.

That is crazy high!

 

[madmatt30]

That ain't antivirus , that's malware & a nasty one at that.

Malwarebytes

https://www.malwarebytes.com

Download it , reboot to safe mode & run.

 

[vapour]

Get Malwarebyte free version and do a scan, doesn't look like a normal WDF, could be a new malware/virus

 

[dushomirsky]

I think it is doing it at startup. Go to task manager, then select the startup tab. See if it is there and disable it. Then restart and see what happens.

That is crazy high!

That ain't antivirus , that's malware & a nasty one at that.

Malwarebytes

https://www.malwarebytes.com

Download it , reboot to safe mode & run.

I installed the antivirus did a scan, quarantined what was suspected and it didn't help. maybe you guys have a different idea?

current processes on startup:
https://imgur.com/a/gwiNj

 

[madmatt30]

GJagent ? If you have warthunder installed its likely legit , if you don't it isnt.

Starter module ?? No idea , not part of win 10 but maybe related to something you have installed

Iobit malware fighter ?? Ia this what you/used to check for malware ??

If so don't , remove it & use Malwarebytes instead in safe mode

Malware is much much cleverer than just installing as a boot process , you rarely see it in the msconfig tab.

 

[dushomirsky]

GJagent ? If you have warthunder installed its likely legit , if you don't it isnt.

Starter module ?? No idea , not part of win 10 but maybe related to something you have installed

Iobit malware fighter ?? Ia this what you/used to check for malware ??

If so don't , remove it & use Malwarebytes instead in safe mode

Malware is much much cleverer than just installing as a boot process , you rarely see it in the msconfig tab.

I have both antiviruses installed I just had io bit disabled, and just used malware bytes in safe mode it didn't really help, but i think i found a solution every time I would try to end the process in task manager for a very tiny second a new process call non sucking service manager would appear, I managed to end that process while it still was there end then end the WDF process and it stopped, do you know what this non sucking service manager is?

ill try to take a screen shot of it and upload it.
https://imgur.com/a/ezIId

 

[vapour]

If you don't have any important data stored on the hard drive, format all of them immediately and reinstall the whole thing with a CD. Using USB may be infected.

 

[dushomirsky]

If you don't have any important data stored on the hard drive, format all of them immediately and reinstall the whole thing with a CD. Using USB may be infected.

thats what I thought about doing

 

[dushomirsky]

OK upon further inspection i managed to find the directory of this file, in there was the suspected file plus the weird non sucking service manager, i quickly ended both processes in task manager and quick shift+deleted the two files before they could re-open. this fixed my problem, im now monitoring task manager checking if the two files are trying to reopen or i fixed the program, this is decently in my opinion some type of malware. The directory was C:\Windows\appdata.

Thanks for trying to help me with all of your creative solutions
Thank you to whoever posted and replied trying to help, and thanks for posting an answer on such a short notice

 

[madmatt30]

No sucking service manager is a legit process that is instaled along with a lot of vpm software.
If you dont have a vpn installed then it absolutely shouldnt be there anyway.

Its classed as a 'high risk tool' because it has the ability to restart any app no matter how many times you close it down.
For this reason as well as being a sue ful tool in some instances its also used in malware root infestations because of what it can do.

 

[kairivindrix]

You can delete this awful stuff by using "Unlocker" ( it's a freeware Program , help me to delete many "Spying" application) .
Choose option "delete when reboot"
This thing happen to me and it has a google Copyright !! and he is always trying to connect to Internet :lol:

 

[tworats.albiruni]

Yeah guys, I can confirm. I just got this problem yesterday and I found out that it's a bitcoin miner. It's a malware that hackers use to mine bitcoins from others' PCs. Used Malewarebytes to remove it and hell it's really fast and good.

 

[sollidstatus]

https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&cad=rja&uact=8&ved=0ahUKEwiHhYbvoNfWAhWE6yYKHf1OAuoQFggmMAA&url=https%3A%2F%2Fwww.bleepingcomputer.com%2Fstartups%2FWDF.exe-20429.html&usg=AOvVaw04-lyOLXun-yJkBrkyvOKI

Your antivirus. Very resource demanding, you'd better go with Panda antivirus free + malwarebyte combo, quite light.

The thing is I disabled my antivirus and its still is doing this process
https://imgur.com/a/uPhKa

It's a Bitcoin Miner that is using your computer to Mine Bitcoins - uses up all your CPU power and makes your computer useless for anything else - MalwareBytes will get rid of it
Download MALWAREBYTES ANTI-MALWARE
Remove the Cloud Packager, NvProfileUpdater64.exe, & WDF.exe Miners