16-core AMD Ryzen Threadripper 1950X hitting not far from 60% utilization by one process?

[Selman Tabet]

Hi,

I have this service that keeps utilizing the majority of my cores, tried terminating it, deleting it, it's unstoppable. Anyone has any idea what this would be?

Screenshot of Task Manager: https://gyazo.com/c724fc0136f926e0e6d7e8fe2eea0890

Thanks in advance.

 

[Colif]

can you right click WDF Sound in task manager and check its properties? What path is it showing? Who created it - should show on digital signatures tab. Check details tab as well.

WDF may stand for Windows Driver Framework but I can't find anything called WDF Sound (icon sure makes it look like a sound device).

I assume you have the latest drivers for motherboard?

try a clean boot and see if same thing occurs. If it doesn't it is likely caused by one of your start up programs so slowly add them to finds cause ; https://support.microsoft.com/en-au/help/929135/how-to-perform-a-clean-boot-in-windows

 

[Selman Tabet]

can you right click WDF Sound in task manager and check its properties? What path is it showing? Who created it - should show on digital signatures tab. Check details tab as well.

WDF may stand for Windows Driver Framework but I can't find anything called WDF Sound (icon sure makes it look like a sound device).

I assume you have the latest drivers for motherboard?

try a clean boot and see if same thing occurs. If it doesn't it is likely caused by one of your start up programs so slowly add them to finds cause ; https://support.microsoft.com/en-au/help/929135/how-to-perform-a-clean-boot-in-windows

Properties: https://gyazo.com/d5890118e2280e40f32a82d3a231b99d
Details: https://gyazo.com/57681aa224b568488a83449c02c7b715

Uploaded the EXE file to TotalVirus and it returned positive trojan from BitDefender, but I tried all sorts of ways to delete it, the CPU utilization went down ever since I blocked the service's internet access. Now it's dormant, but still there in the list of active services.

 

[Colif]

Did bit defender find a trojan or was it identified as one? Did you have 2 anti virus installed at once as they often fight for control.

I was hoping properties would show full path

in task manager, right click on the header and choose command line.
then expand the command line column so it shows full path to the program
see what it tells you as almost every service has a location

 

[Selman Tabet]

Did bit defender find a trojan or was it identified as one? Did you have 2 anti virus installed at once as they often fight for control.

I was hoping properties would show full path

in task manager, right click on the header and choose command line.
then expand the command line column so it shows full path to the program
see what it tells you as almost every service has a location

Weird, it literally just destroyed itself now. Can't find it anywhere in Task Manager, Maybe because it was no longer useful due to the internet access being blocked?

 

[Colif]

Had you restarted PC or anything? Perhaps one of the AV blocked whatever was running it and all you needed was a restart to complete process? You could look in the logs of either to see if it did.

So it doesn't show on the services tab? As it would if were just stopped.

 

[Selman Tabet]

Had you restarted PC or anything? Perhaps one of the AV blocked whatever was running it and all you needed was a restart to complete process? You could look in the logs of either to see if it did.

So it doesn't show on the services tab? As it would if were just stopped.

I've actually manually blocked the service's access via BitDefender firewall rules. The service and the executable file are gone. Restarted the PC, no traces.