CPU running at 100% with Visual Basic Command Line Compiler

Solved/Closed
IKeroZI Posted messages 13 Status Member -  
bazfile Posted messages 58480 Registration date   Status Moderator Last intervention   -

Hello,

For some time now, I've been experiencing issues with games that require high CPU usage, as well as video rendering that takes longer than before...

In the task manager, I notice the presence of "Visual Basic Command Line Compiler" that uses between 70% and 100% of the CPU by itself, which means my CPU is always at 100% capacity...

Do you know where the problem might come from? I have the impression that it could be a virus or an application I don't want...

Thank you in advance :)

4 answers

bazfile Posted messages 58480 Registration date   Status Moderator Last intervention   20 264
 

Hello.

Download FRST once downloaded save it to the desktop then right-click on FRST and choose Run as administrator you’ll get this:

Click on Analyze


Warning, wait for the messages indicating that the scan is complete to display.

At the end of the scan you will have two text files on the desktop FRST and Addition.

Then send the FRST and ADDITION reports to PJJOINT see THIS TUTORIAL then provide the two links generated by PJJOINT in your response.


bazfile
Moderator/Security Contributor.
a hello, a response, a thank you are always appreciated.

1
IKeroZI Posted messages 13 Status Member
 

Hello,

Here are the two reports:

FRST: https://pjjoint.malekal.com/files.php?id=FRST_20230207_z15k7d5x12z13

ADDITION: https://pjjoint.malekal.com/files.php?id=20230207_x12q10v14r8c15

Note that I just switched to W11 and I can no longer see the percentage of my graphics card, if you could tell me how to check it in the task manager to see if it's better after the fix you are going to propose...

By the way, you helped me last time with the cmd that kept opening and it seems to be alright since then, and I thank you for that, but I feel like my computer has been slower lately during video rendering or when playing games that really use the CPU, so I think there's still something in the system...

With my config, I should be able to run the applications I need without too many problems because I didn't have issues before...

My config:

CPU: AMD Ryzen 7 2700X

GPU: nvidia GeForce GTX 1080Ti 11Go

RAM: 16Go

Thank you in advance

0
IKeroZI Posted messages 13 Status Member
 

I also notice that my graphics card runs at 100% continuously because of a program called "Microsoft.NET Services Installation Utility," which I think doesn't help me when I'm playing games. So I conclude that my computer is always running at full capacity, at least my CPU and GPU...

If you have any idea about the problem or a virus... Thank you in advance.

0
bazfile Posted messages 58480 Registration date   Status Moderator Last intervention   20 264
 

Once your PC is disinfected, change all your online passwords as they may have been compromised (email, social media, bank site logins, etc.).

Procedure to follow in the order indicated:

1- Open FRST as an administrator by right-clicking on FRST and selecting run as administrator
2 - Copy the entire script that is in the box below:

  Start:: CreateRestorePoint: CloseProcesses: Task: {58A33E3F-A97A-41A4-A95A-3B0D7F3CDF89} - System32\Tasks\Microsoft\Windows\DirectX\etw => C:\Windows\IME\etw\etw.exe [10035200 2023-01-19] (Microsoft Corporation) [Unsigned file] Task: {6C3EB9CF-87BB-48AA-831D-FFF5B729F161} - System32\Tasks\Microsoft\Windows\DirectX\lsassn.exe => C:\Windows\IME\lsassn.exe [40082432 2023-01-19] (Microsoft Corporation) [Unsigned file] [File in use] Task: {72CF92A4-B206-47AF-90AE-E892C6687231} - System32\Tasks\CNSWA => C:\ProgramData\Chrome\CNSWA.exe [804257792 2023-01-20] (Setup Laboratory.) [Unsigned file] Task: {91ABDC99-083F-4D55-A631-88867C365455} - System32\Tasks\Microsoft\Windows\DirectX\tu => C:\Windows\addins\tu.exe [7203328 2023-01-19] (Microsoft Corporation) [Unsigned file] Task: {1D738190-26E7-49FF-8388-304059ACAB42} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => C:\WINDOWS\system32\MusNotification.exe /RunOnBattery RebootDialog (No file) Task: {7B0C08EE-4D1D-49C8-A7F7-039DA8ABD4A2} - System32\Tasks\Microsoft\Windows\DirectX\CmRccService.exe => C:\Windows\ImmersiveControlPanel\CmRccService.exe (No file) Task: {A5604086-C40E-4140-ADE6-BE7C5E61696E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (No file) Task: {B956E4EF-E6B9-4DCA-8BE7-F8363943DCC1} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => C:\WINDOWS\system32\MusNotification.exe /RunOnAC RebootDialog (No file) Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => C:\WINDOWS\system32\MusNotification.exe (No file) Task: {ECF4B70C-2988-490D-9063-2A8D99BDAF04} - System32\Tasks\Microsoft\Windows\DirectX\Registry => C:\Windows\ImmersiveControlPanel\RegistryManager.exe (No file) S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X] AlternateDataStreams: C:\Users\Admin\Documents\CI Max recto.jpeg:3or4kl4x13tuuug3Byamue2s4b [83] AlternateDataStreams: C:\Users\Admin\Documents\CI Max verso.jpeg:3or4kl4x13tuuug3Byamue2s4b [83] FirewallRules: [{44b7587b-c971-4e08-b041-92c29ba6f454}] => (Allow) C:\Windows\Branding\umxn.exe => No file FirewallRules: [{0be9075a-dbfe-4edb-bbed-903589f5d652}] => (Allow) C:\Windows\Branding\umxn.exe => No file FirewallRules: [{022cc3b7-906c-4752-8a91-85449476d32b}] => (Allow) C:\Windows\Help\Windows\McMpEng.exe => No file FirewallRules: [{04650284-8084-4df2-a5b3-85521aab2120}] => (Allow) C:\Windows\Help\Windows\McMpEng.exe => No file FirewallRules: [{0318e5c4-0358-4b2f-ad7e-1352f6e794a0}] => (Allow) C:\Windows\Help\Windows\MsMpEng.exe => No file FirewallRules: [{e32c387d-d801-486c-9540-dbe41263e344}] => (Allow) C:\Windows\Help\Windows\MsMpEng.exe => No file FirewallRules: [{258494eb-9f82-4181-bb74-10c1468af617}] => (Allow) C:\Windows\Branding\umxn.exe => No file FirewallRules: [{2f5921cf-f430-4831-888b-d118d3808d74}] => (Allow) C:\Windows\Branding\umxn.exe => No file FirewallRules: [{413b9ab9-99c0-454f-a656-9d4705ca279b}] => (Allow) C:\Windows\Branding\umxn.exe => No file FirewallRules: [{61a3b9ec-1121-46f5-9ad1-7f60769a4be0}] => (Allow) C:\Windows\Branding\umxn.exe => No file FirewallRules: [{3ff3e07a-0f7d-44b5-ad4f-eeb9ffabc6ac}] => (Allow) C:\Windows\Branding\umxn.exe => No file FirewallRules: [{db728b0b-bb62-43f9-b86f-9b402c3a96cc}] => (Allow) C:\Windows\Branding\umxn.exe => No file FirewallRules: [{57df87c0-f565-4379-b86f-4e343342bc57}] => (Allow) C:\Windows\ImmersiveControlPanel\CmRccService.exe => No file FirewallRules: [{cd5ff9ff-5e61-4e19-9fba-4d3bac25f0ff}] => (Allow) C:\Windows\ImmersiveControlPanel\CmRccService.exe => No file C:\Windows\IME\etw\etw.exe C:\Windows\IME\lsassn.exe C:\ProgramData\Chrome\CNSWA.exe C:\Windows\addins\tu.exe EmptyTemp: End::

3- After copying the script, click on Fix, FRST will automatically take the script that is in the clipboard.


Let the fix complete, once it's done you will be asked to restart your PC, do so as soon as prompted, see below.

Then once your computer has restarted:
4- You will have a Fixlog file on your desktop; then send this fixlog report to PJJOINT and provide the link generated by PJJOINT in your response.

5- CHECK AND TELL ME IF YOUR ISSUE IS STILL PRESENT


bazfile
Moderator/Security Contributor.
A hello, a response, a thank you are always appreciated.

0
IKeroZI Posted messages 13 Status Member
 

Hello,

here is the fixlog: https://pjjoint.malekal.com/files.php?id=20230208_d13z14u10u8t9

I looked in the task manager and it seems much better, my CPU is only around 10% and 0% for the GPU. This is the second time I've had viruses, and I'm afraid there's still something left inside... How can I check? Anyway, thank you very much, it seems to be working.

And especially, how can I prevent new ones? Which antivirus would you recommend, or any other system to protect my computer?

Thanks in advance.

0
bazfile Posted messages 58480 Registration date   Status Moderator Last intervention   20 264 > IKeroZI Posted messages 13 Status Member
 

The fixlog is OK, your PC is clean.

Under Windows 11, there is already a built-in antivirus; since Windows 10, the integrated security solution in Windows is effective and sufficient.

I'm not sure another antivirus would have found this infection; if you wish to switch to another security solution, personally I usually useTHIS SOLUTION.

For occasional scans:
From time to time, run a scan with KVRT which is a free and portable application, meaning no installation, you need to download KVRT each time as it does not update automatically; here is a tutorial on how to use it.


You also haveMBAM in a free version but with installation that allows you to do occasional scans.


Finally, you havethis online solution that allows you to scan your PC.

So you have options.

VERY IMPORTANT:

Uninstall FRST, rename the FRST file you downloaded to uninstall, then once the file is renamed, open it; the uninstallation will happen automatically via a reboot of the PC.

1
IKeroZI Posted messages 13 Status Member
 

Wow! I just tested it on 2/3 games and I found quite a few FPS, 1000 thanks, it seems to be working!

0
bazfile Posted messages 58480 Registration date   Status Moderator Last intervention   20 264 > IKeroZI Posted messages 13 Status Member
 

@IKeroZI StatusMember I mark the subject as resolved, don't forget to uninstall FRST and change your online passwords (see my previous message just above).

1
Romain
 

Hello, I have the same issue as IKeroZI, can I use the same method?

0
bazfile Posted messages 58480 Registration date   Status Moderator Last intervention   20 264
 

No, the FRST script I made is for his PC, it is not valid for yours; you need to perform a FRST analysis and provide the links to both reports as explained in my first message.

Then you create your own post, describe your problem, and include the links to both reports, see:

 https://forums.commentcamarche.net/forum/virus-securite-7/new

2