Help pls .. Unknown.exe high CPU usage

skedadle · 17 Mar 2016

Ok so I am new here and really need some help

So from yesterday I have been getting this unknown process in task manager, its an application (.exe).
It has very high cpu usage making my computer really slow.

Help pls .. Unknown.exe high CPU usage-screenshot-22-.png

Help pls .. Unknown.exe high CPU usage-screenshot-21-.png

Help pls .. Unknown.exe high CPU usage-screenshot-20-.png

I tried ending process from task manager but it will just pop up again.

Well when I disconnect internet and than end process it works but again when its connected to internet 'unknown' appears.

I tried cc cleaner, microsoft safety scanner, full scan but nothing.

If someone can help me much appreciated. and sorry for my bad english typing.

lx07 · 18 Mar 2016

It looks like malware mining for bitcoins - Malware scan of unknown.exe

You could try deleting C:\ProgramData\Unknown\Unknown.exe (and C:\ProgramData\Unknown.exe if it is there) but it will most likely come back.

Running a Malwarebytes scan should get rid of it if it does as there are lots of reports of this file in their logs on the internet. You can download the free version from here Malwarebytes | Malwarebytes Anti-Malware Premium

TairikuOkami · 18 Mar 2016

skedadle said:

I tried cc cleaner, microsoft safety scanner, full scan but nothing.

Miners can be bundled with legitimate software, it is becoming more adware than malware these days.
So most AVs will not detect it, or they will detect it as PUP (potentially unwanted program) at best.
Check installed programs, if there is something you do not know, uninstall what you do not use.

lx07 said:

You could try deleting C:\ProgramData\Unknown\Unknown.exe (and C:\ProgramData\Unknown.exe if it is there) but it will most likely come back.

Indeed, since it is coming back, take ownership of the folder or just exe and then remove all users.
No one will be able to run it, it will fail and maybe you will get a popup, what tries to start it.

https://www.tenforums.com/tutorials/3841-take-ownership-add-context-menu-windows-10-a.html

dalchina · 19 Mar 2016

Once you have got rid of it, start using a freeware tool to prompt you if anything is added to the list of startups. That way you can reject it.

However some things are persistent, and will try again an again.

For example:
Winpatrol
Mike Lin's ancient Startup Monitor

Also start using disk imaging and update your image periodically. This can help you restore your PC to a working state in 20 mins, say, without technical help.

bobajob73 · 05 Feb 2017

I also have had the same unknown.exe problem Via taskmanager I saw it using up all of the spare processeur power i.e. always at 100%
but now ,after using malwarebytes; as above,-THANKS Ix07 its gone but malwarebytes is using between 15 & 20% and windows commands translator 10%.
Is this normal?