Share via

I think my pc have gotten a crypto mining virus or server.

Sondre Bråten 0 Reputation points
2026-04-24T16:11:56+00:00

im not to good with microsoft pc and i ned help. Im very scared

Screenshot 2026-04-24 180834

Windows for home | Other | Security and privacy

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. David-M 114K Reputation points Independent Advisor
    2026-04-24T16:56:14.55+00:00

    Hi. I'm David, and I'm happy to help you.

    What you're seeing in the processes in your screenshots is standard Windows behavior. Previously, the system only showed one or two processes, but now it separates each task into its own process (like those multiple svchost.exe processes). This ensures that if one process crashes, the entire computer doesn't stop working.

    Regarding msedgewebview2.exe: These belong to Microsoft Edge WebView2. Many modern applications (such as Windows Widgets, Teams, or Spotify) use the Edge engine to render visual content, which generates multiple instances in the list.

    I don't see any suspicious processes. Even so, for your complete peace of mind, I suggest performing a "deep cleanup" with two excellent tools that do not conflict with your current antivirus:

    1 = I suggest you perform a full scan using Microsoft Safety Scanner. Download from the link below. (Download the "64-bit" version.)

    https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download

    2 = Also, perform a full scan using Malwarebytes as a second opinion.

    Download through this link: https://malwarebytes.com/

    After scanning, you can uninstall it.

    If these tools don't find any threats, you can rest assured that this means your system is clean.

    If one of these tools finds a threat, quarantine or delete it. Then, restart (not shutdown) your PC to ensure that no traces remain.

    Feel free to ask any questions you may have.

    Standard Disclaimer: There is a link to a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments

  2. AI answer

    2026-04-24T16:12:36.6866667+00:00

    The screenshot shows many svchost.exe processes, which is normal for Windows and does not by itself prove a crypto‑mining infection. However, if there was recently suspicious software or strange behavior (high CPU, fans always loud, system slow), the safest approach is to check for malware and unwanted apps.

    Follow these steps on the Windows PC:

    1. Make sure Windows and security updates are current
      • Open Settings → Update & Security → Windows Update.
      • Install all available updates and restart the PC.
      • Staying current helps close security holes and is explicitly recommended in Microsoft guidance.
    2. Run a full scan with Microsoft Defender Antivirus
      • Open Windows Security → Virus & threat protection.
      • Select Scan options → Full scan and start it.
      • Let it complete and follow any actions it recommends (quarantine or remove threats).
    3. Turn on protection against unwanted and potentially unwanted apps
      • Windows can warn about apps that may include things like hidden crypto miners.
      • Ensure Microsoft Defender Antivirus is active and its protection against potentially unwanted apps (PUA) is enabled, as described in the “Protect your PC from unwanted software” guidance.
    4. Be careful with downloads and attachments
      • Do not install apps from unknown or untrusted websites, especially “free” tools, cracked software, or files from torrent/file‑sharing sites.
      • Do not open email attachments or links that were not expected.
    5. If there are fake alerts or tech‑support pop‑ups
      • If a browser page claims the PC is infected and shows a phone number, close the browser using Ctrl+Alt+Del → Task Manager and end the browser process.
      • Microsoft error or warning messages do not include phone numbers to call; such pop‑ups are scams.
    6. If problems continue
      • If Defender finds malware that cannot be removed, or the PC still behaves strangely after cleaning, consider getting help from official Microsoft support resources for malware removal.

    These steps align with Microsoft’s general recommendations for malware, including coin‑miner malware, and for protecting a Windows PC from unwanted or malicious software.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.