Gigabyte GTX1070 50%+ GPU usage on Idle, Found solution, need help uncovering its mystery.

rezwan739

Honorable
Feb 26, 2013
48
0
10,530
I love to keep my PC clean and always on top condition. For past one week i've been noticing, on Warframe ive been getting certain Lag spikes on a constant cycle. Restarting the PC seem to solve it but it comes back after every 20ish minutes. All day today i kept my pc on and the "Fan Stop" light on my GPU never turned on. Its like I am running a game but my PC is idle.

I downloaded Process Hacker and found a suspicious activity with program called MSASCui.exe. After terminating the process my GPU seem to go back to its idle state and the 40%+ load was taken off instantly. After quick googling it, i found out that its part of windows defender. The location i found it was in AppData folder, inside another folder called secuROM. It had a file with GTX 1070 as part of its name. I donot believe its part of windows defender but if so why would Microsoft screwup like that. Any thoughts and experience are welcomed. hope this thread will help others as the cause of this issue cannot be found easily after googling. I can upload the files as zip content if anyone is interested. Thanks in advance.
 
Solution
Please upload it, Let us know what files that you're mentioned above. It maybe a NVidia driver installation files or just temp files.
It sounds strange to me since win defender has nothing to do with GPU control.

Did you do defender scan when you're gaming?
 

rezwan739

Honorable
Feb 26, 2013
48
0
10,530
Hello, Thank you for the response.

The files on that folder can be found here https://drive.google.com/open?id=0B1RSqvSAlO79aEJ0aHBNVllwTW8

This was located in C:\Users\Name\AppData\Roaming\SecuROM\Windows Defender\

After moving these files to the recycle bin, I havent experienced any load issues and my GPU is running at 30'C at Idle from 50'C with 1-5% Usage from 40-65%.

Just now another SecuROM folder is found in that location but with a .dat file and a readme which warns not to delete these files and it can lead to loosing rights to content that i can run without the need of a CD. This folder seem fishy.

I hardly use any Microsoft tools on this pc. I use Kaspersky, CCleaner, WinDirStat and HWmonitor to maintain all my pcs.

PS. I have used few name brand antivirus scanners on these files. all seem to show negative
 


umm... strange. I did not found that folder in that directory on my PC.
I also use Windows 10 and NVidia GPU, But no problem with me, NVidia and the windows defender itself.

After examining the files that you uploaded, it looks like a bitcoin mining extension or application and fake windows defender executable file. So, it's a VIRUS in my opinion.
 
Solution

rezwan739

Honorable
Feb 26, 2013
48
0
10,530
Wonder how it got there and howcome it still stayed undetected. What Antivirus did you use to scan those files? I might install that to do a full scan of my pc. Also do you have a securom folder inside appdata? Thank you for goining through all the hassle of clarifying it for me.
 


For the explanation about bitcoin viruses, it can be found here:
https://www.youtube.com/watch?v=okTdi6YRnro

As for scanning files, I didn't scan it with AV, I just examining it. And I don't have "secuROM" files on my computer.

Oh and, for years I only use windows defender on my Win10 PC and laptop and ESET NOD32 on my Win 7 Laptop.