asus vivobook s300ca
intel i53337u @1.8GHz
Hi, I believe I have multiple virus attacks. At first it started with sharkyfiles survey. There was be a pop up telling me to click to download, once downloaded, it will import files then will I be able to remove pop up, however I had to take a survey in order to download, which was sharkyfiles survey. I used malwarebytes and webroot to scan. webroot security detected a winsvhost.exe which i had it removed. After removable, pop up was gone, Everything seem to be fine untill i rebooted my laptop. At first the boot was very slow, given my laptop is less than a year old and pretty fast. After 10 minutes, everything seem to be normal and picked up speed. however, while in idle, I notice my disk usage was at 100% with no programs running. Only program running was google and it was at 30%. I dont know what was causing the high usage. It eventually got extrememly slow again so I did a system restore point which I notice I havent done in some time. However, there was one restore point that same day so I choose that one thinking windows does it itself.
booted the laptop and everything was fine. still a bit laggy.
After a few reserach, same day, I booted the laptop in safe mode with networking and did a virus scan there. none detected. even ran rkill.
Booted up normal next, same day. Everything was fine, seems all was well. fast boot fast start etc. disk usage seem to go down a bit but spikes a lot from 50-100%
I downloaded malwarebytes roolkit and did a scan. registry was clean.
decided to go back into safe mode again. from here, it was all downhill. my network and audio was disabled. i had no rights to ending task which was processed. I was able to end all svchost. however, i found files in c:windows\winsys svchost.exe and svchost.exe.mui as well as c:windows\SysWOW64 c:windows\winSxS all under the same, svchost.exe and svchost.exe.mui
I tried to deleted one but I didnt have permission from trustinstaller
After that, I didnt have any permission to do anything. I tried to end a task for windows defender which i was denied access too as well.
I decidedly to do a system refresh on windows. Everything worked great. boot was fast disk usage was low and no lags. i did another scan which now I find pointless because the virus was undectable. Seems all was well. firewall was up. virus protection was up. I did an upgrade to windows 8.1 since after the refresh it was only windows 8. no problems
When I booted up windows 8.1 action center warned my virus protection was down. I tried to turn it on, however it will not. both webroot will not turn on nor will windows defender.
That is all. I have a feeling whenI shutdown my laptop and boot it up again, something will happen. Please advise and let me know what Im working with here.