GTX 780 100% usage

[iKatoz]

Today I turned on the PC and the graphics card was already hot so I opened GPU Tweak and the 780 was at full load. I did a virus scan but it didn't detect any virus. Since I unplugged the ethernet cable the graphics card is back to normal. Can someone help me?

 

Thanks

[SkilledRebuilds]

Malware that forced GPU usage to skyrocket mining....has been a thing before...

I'd be careful with what you have been doing/installing.....

Dunno the fix, only the symptoms.

 

Maybe google GPU malware mining

[samcool55]

Sounds like a miner virus. Keep the pc disconnected from the internet and reinstall the pc.

As long as you don't have internet you are fine because the miner needs internet.

But that 100% usage means probably the gpu is mining, and that already did cost a lot of graphics cards...

 

So backup and reinstall asap, or it can kill your 780 if you connect to the internet.

[Archangel1994]

Google on how to dual boot into linux then rescue your stuff from there.

[Shadow Gamer]

Download malwarebytes and adwcleaner and run them, now. It's most likely a bitcoin miner. 

Malwarebytes is a malware removal program, and adwcleaner is a adware removal program, so run malwarebytes first, because malwarebytes is more suited for this type of thing. 

[SkilledRebuilds]

/Disregard if your ignorant to what is the cause but.... Presuming here....

 

 

You would know (before us) what maybe dodgey shit you did to get it..

 

Don't do that again when you Reinstall WIndows if you cannot fix it, don't do what you did before...

^Not being mean, but realistic.

[andre82693]

Download malwarebytes and adwcleaner and run them, now. It's most likely a bitcoin miner. 

 malwarebytes

 

https://www.malwarebytes.org/mwb-download/

[Shadow Gamer]

 malwarebytes

 

https://www.malwarebytes.org/mwb-download/

Well said. 

[iKatoz]

I just downloaded games from steam,I formatted 4 days ago

[eelnico09]

I just downloaded games from steam,I formatted 4 days ago

You do something in between the fresh SO installation, and getting the games, that's fucking up your card.

 

Re-install, download GPU-Tweak, and check if it's working on 100% right after the instalation, and don't back up.

[andre82693]

Malware Removal Guide 

 

http://linustechtips.com/main/topic/90213-malware-removal-guide/

 

or 

 

http://malwaretips.com/blogs/malware-removal-guide-for-windows/

[iKatoz]

but if I find the virus I still need to format?

[eelnico09]

No, but do you back up when you format? Your back up might be infected if you do.

[SkilledRebuilds]

but if I find the virus I still need to format?

No,...but If you think removing it is gunna be a worse off situation or too hard...

Then format. But I'd go through the steps required first.

[iKatoz]

No, but do you back up when you format? Your back up might be infected if you do.

 

i have back up my steam library and my account folder when i installed an ssd 4 days ago

[iKatoz]

here is the log of malwarebytes 

k.txt

[SkilledRebuilds]

Open task manager, is that cppredistx86.exe running (or does it start when you put in the ethernet/internet again)

Go to that folder - then kill the task,  then instantly delete that file

[iKatoz]

there is no longer, malwarebytes deleted it

[SkilledRebuilds]

there is no longer, malwarebytes deleted it

Well then I guess, use internet, see if it happens again.

Did it also delete that regedit entry?

[Shadow Gamer]

here is the log of malwarebytes 

Holy crap, you have a backdoor on your PC...

[iKatoz]

Did it also delete that regedit entry?

i don't know

[SkilledRebuilds]

i don't know

Hit the start button, use the RUN command or type regedit.

LocalMachine/CurrentUser may be the one to look in (commonly the ones to check) but it may be in the other catagories so best to look or use the find command for the string below.

 

SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Microsoft Visual C++ 2010, C:\Users\Matteo\AppData\Roaming\cppredistx86.exe

Delete this Entry

For the FIND command in Regedit (if you dont wanna do it manually) - search for 'cppredistx86.exe'

[iKatoz]

i can't find CURRENTVERSION

[SkilledRebuilds]

i can't find CURRENTVERSION

Really..?

Forgot it may be in one of two places sorry... 32/64 bit has different areas

 

It's Software\Microsoft/Windows/CurrentVersion/Run

OR Software\Wow6432node\Microsoft/Windows/CurrentVersion/Run

 

In Regedit - hit Control+F (or use the file menu - Click Edit - then Find)

[iKatoz]

oh, I had misheard. However there isn't cppredistx86.exe