mIRC Home    About    Download    Register    News    Help

Print Thread
Joined: Feb 2014
Posts: 2
H
Bowl of petunias
OP Offline
Bowl of petunias
H
Joined: Feb 2014
Posts: 2
Hello,

Any one know why mirc 7.32 is generating 75% load in cvtres.exe (Microsoft® Resource File To COFF Object Conversion Utility) when the computers processors idling under windows 8.1 Pro

As soon as you run task manager the load is stopped but it only happens when mirc is running period..

I have tried the following:

sfc /scannow
DISM /Online /Cleanup-Image /RestoreHealth
Completing uninstalled .net and allowed windows to re-install

any help would be appreciated many thanks

Last edited by hooligan132; 08/02/14 12:42 AM.
Joined: Dec 2002
Posts: 5,420
Hoopy frood
Offline
Hoopy frood
Joined: Dec 2002
Posts: 5,420
A search on google shows up thousands of similar reports in different contexts, with different applications, so this does not seem to be caused by any particular application but by a system configuration issue or possibly malware. You would need to look through the reports and try some of the suggested solutions to see if they help. As your first step, you should probably install anti-virus software and scan your system to be safe.

Joined: Feb 2014
Posts: 2
H
Bowl of petunias
OP Offline
Bowl of petunias
H
Joined: Feb 2014
Posts: 2
hello sorry I don't think its any thing to do with mirc, I have a better understanding of what is actually going on.. and Yes definitely infected with something causing my specific problems.. obviously I am trying to test drive windows 8.1 Pro for personal and business purposes but the version i have picked up has been brutalized by 1 or more trojan/bit coin miner...

I will share with you my notes thus far smile

-----------------------------------------
After clean install noticed high CPU utilization levels causing turbo mode to be permanently on

after examining processes and command lines in task manager

We find attempts to hides by switching off intensive cpu code when Task Manager is active.

We find cvtres.exe executing:

*stratum+tcp://stratum3.dogehouse.org:8080*dmk001.5*x*

Located in HKLM/ Software/Mircrosoft/Systernals

Some hours later machine starts to exhibit high cpu utilization again

after rexamnine of task manager Wscript seen running 27218346293184.vbs

Located in c:\ProgramData\{$1284-9213-2940-1289$}
File: 27218346293184
File: BMDStreamingServer.exe

Termination of .vbs script does not reduce processor utilization.
Termination of BMDStreamingServer.exe alleviated high load.

Removed Autorun entrys for BMDStreamingServer and deleted {$1284-9213-2940-1289$} from C:\programData\

All Clear for now!

---------

Last edited by hooligan132; 08/02/14 06:49 PM.

Link Copied to Clipboard