Can't Get Installed Apps Registered - Caused By The Trojan Wlanext.exe?!

Discussion in 'Malware Help (A Specialist Will Reply)' started by ericxdave, May 23, 2020.

  1. ericxdave

    ericxdave Private E-2


    Hello guys! :cool:
    - I've got this tricky Windows 10 Problem.

    A few weeks back my PC started running hot - and for no obvious reason. I also noticed high CPU usage, but only when I had it logged online. I checked with Task Manager and the CPU was charged by as much as 40% although I only had a browser running. When scrolling down the list of running apps I saw an unknown clown-like icon labeled "wlanext.exe" - never seen it before and had no idea what it was for. This app alone was hogging like 25-30% CPU. Defender didn't find anything by scanning, and Google said it was a Windows process. I decided to let it run to see if it would go down ...and away. But no, the clown decided to stay.

    By searching the web I saw that some experts called it a completely harmless part of windows 10, and others that it wasn't - it was a trojan, and it should be removed. From what I've been reading on several help forums I conclude that "C/windows/system32/wlanext.exe" is the harmless one, and "C/windows/wmu3/wlanext.exe" is the one that should be removed. Inside the "wmu3"-folder you'll also find another small application called "ZeroConfigService.exe" - that one should be removed as well ...along with the folder - "wmu3".

    What is quite disturbing here is that an updated Windows Defender didn't give any notice about the fact that these applications were present and active in the system, despite several thorough runs — both on- and offline. However, another well-known app did a great job — the intruder was quickly discovered and swept out! ...and the CPU usage is back to normal again :p But I still wonder what they did here, where they've come from, and how they got in here.

    I wish I could say that this was the end of the story, but it's not ...and my main reason for being here. It now seems that applications I've installed before "wlanext.exe" and "ZeroConfigService.exe" came in here, works perfectly normal. But it's simply just not possible to get new app-installs registered! I enter all the stuff needed, and it runs perfectly normal - not as a demo nor a trial, but quite normal. I close it, and open it up again just to get a new reg-dialog covering the application interface - I could probably go on like that forever. It's like the app - or windows - fails on remembering the stuff I just entered.

    So now I wonder, could it be so that "ZeroConfigService.exe" and "wlanext.exe" have managed to alter parts of the system software needed for distribution of app-reg data etc.? ...and would it be possible to get it fixed without the need to turn everything upside down? I have very little desire to get on with a full new OS install etc. — bad experience with almost endless, forced and unstable windows 10 updates would be the main reason ...no wonder I have "windows Update Stop!" installed here. :rolleyes:


    I very much welcome all kinds of help to get this problem solved.

    Eric :)

    PS.
    I have done a few repair scans with Windows 10 Manager - checked and defragmented the register etc. Didn't get any error messages.
     
  2. Replicator

    Replicator MajorGeek

    Trojan wlanext.exe is malware which backdoors a crypto-currency miner that taps your system resources.....this explains the high component usage!

    Suggest TimW takes a look at your system so follow and post here, lets get you clean!
     
  3. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    If you have removed the \wmu3 folder, I suggest you type Command in the search option > then right click the Command app and click on run as administrator.....once your command panel opens type: sfc /scannow. Tell us what it finds.
     
  4. ericxdave

    ericxdave Private E-2


    Hello Replicator and TimW! :)

    ...and thank you for quick response to my post about this Trojan wlanext.exe - which (as Replicator said) turned out to be a Trojan-like thing that backdoors a crypto-currency miner. I probably picked it up at Piratebay - they have later on admitted being part in this kind of activity as an alternative to adds for financing the torrent site they are running. At the same time I also picked up another file, and along with that one I probably got a small devil that managed to do some changes to folder attributes. That's probably the reason I couldn't get apps to register properly. I had to run them as administrator (I normally don't) so they could be able to write to the register etc. I'm sorry it took this loooong to respond, but when I was done with fixing the Piratebay stuff, Microsoft managed to force a windows 10 update on me ...messing up so much that I decided to flushed everything ...and return to happy days, before life got complicated - I'm the lucky owner of a decent disk clone :rolleyes:

    Eric :cool:
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds