F5F Stay Refreshed Software Operating Systems CPU load high in System32 attrib.exe process

CPU load high in System32 attrib.exe process

CPU load high in System32 attrib.exe process

C
CrazyBessyCat
Posting Freak
912
05-28-2017, 06:40 AM
#1
So I've been working on this issue for about a week and I have searched everywhere I could find to no avail. Hoping someone here can give me some good direction. This is a month old build. It is a z270 build with a 7700k. if any other specs are needed, please let me know. It started as I noticed super high CPU usage, in the 90's%. I immediately opened task manager and It dropped to 4%. When i Closed task manager it shot back up. I opened IOBIT process manager to find it was the System32 attrib.exe. I ran multiple virus and malware scans and they all find nothing. As long as i have the task manager open, that file is nowhere to be found in my tasks, but i would much rather fix this. any ideas or insight would be greatly appreciated.
C
CrazyBessyCat
05-28-2017, 06:40 AM #1

So I've been working on this issue for about a week and I have searched everywhere I could find to no avail. Hoping someone here can give me some good direction. This is a month old build. It is a z270 build with a 7700k. if any other specs are needed, please let me know. It started as I noticed super high CPU usage, in the 90's%. I immediately opened task manager and It dropped to 4%. When i Closed task manager it shot back up. I opened IOBIT process manager to find it was the System32 attrib.exe. I ran multiple virus and malware scans and they all find nothing. As long as i have the task manager open, that file is nowhere to be found in my tasks, but i would much rather fix this. any ideas or insight would be greatly appreciated.

K
KablooieKablam
Posting Freak
908
05-28-2017, 09:31 AM
#2
In Task Manager, display the command line by selecting the column view, then right-click and choose select columns. To view running processes, you can also use the process list or task details. Remember, the Task Manager may consume significant CPU during startup.
K
KablooieKablam
05-28-2017, 09:31 AM #2

In Task Manager, display the command line by selecting the column view, then right-click and choose select columns. To view running processes, you can also use the process list or task details. Remember, the Task Manager may consume significant CPU during startup.

D
60
05-28-2017, 10:34 AM
#3
When I launch Task Manager, the application vanishes. I must rely on IObit Process Manager to locate it. The file attrib.exe in C:\Windows\System32 is the sole factor reducing my CPU consumption.
D
Derpy_Unitatos
05-28-2017, 10:34 AM #3

When I launch Task Manager, the application vanishes. I must rely on IObit Process Manager to locate it. The file attrib.exe in C:\Windows\System32 is the sole factor reducing my CPU consumption.

E
elbern3
Junior Member
4
05-29-2017, 02:09 AM
#4
When I launch Task Manager, the application vanishes. I must rely on IObit Process Manager to locate it. The file attrib.exe in C:\Windows\System32 is the sole factor reducing my CPU consumption.
E
elbern3
05-29-2017, 02:09 AM #4

When I launch Task Manager, the application vanishes. I must rely on IObit Process Manager to locate it. The file attrib.exe in C:\Windows\System32 is the sole factor reducing my CPU consumption.

A
asa1928
Member
53
06-15-2017, 12:15 PM
#5
Hi, i hope its not too late, i also have the same problem as you do, and i find a way to solve it, basically that the malware is mining monero using your cpu, hence the high cpu usage. the way to remove it is to scan it with kaspersky and delete the malware . i tried to scan it with malware bytes, and windows defender. but seems that kaspersky the only one that able to detect it.
A
asa1928
06-15-2017, 12:15 PM #5

Hi, i hope its not too late, i also have the same problem as you do, and i find a way to solve it, basically that the malware is mining monero using your cpu, hence the high cpu usage. the way to remove it is to scan it with kaspersky and delete the malware . i tried to scan it with malware bytes, and windows defender. but seems that kaspersky the only one that able to detect it.