[Aristan]

Hey guys, i have an i5 3570k, 16gb of ram, a 580 gpu, ssd etc.




My computer is running at 100% cpu for some reason... if i try to stream a game, i get 120 fps, for example fortnite. but the stream is extremely choppy and says i need to change mysettings because my cpu is slowing it down... but im running the game at 120 fps.

IDK what to do.

[Sigma]

I'm Sigma, I'm one of the leaders of the Security Malware Removal Team and will be assisting you throughout this thread. Before we start just take a second to read through these few requests - these are to ensure we can help you quickly and safely:

• Only use this thread for help. Please don't create multiple threads, accounts, PM me or post on other forums - if you do just let me know.
  


• Only follow my guidance.
  


• Don't run tools I haven't asked you to run. If you do just let me know so I can take that into consideration when viewing logs.
  


• DO NOT install any other software while we are attempting to clean your machine. It can get quite confusing especially if you are downloading questionable tools.
  


• Please be prompt in responding. I'll do my best to do so. If >48hrs has passed, please either PM me or ask "Are you there, I still need help" in this thread.
  


• Please stick with me until I give you the 'All Clean'. I'll help you cleanup quickly and offer some tips to make you more secure and get your system running faster.
  


• Your malware related tools will be removed. I don't support the tools often distributed on these forums. Scanners will generally remove these - I take no responsibility for any malicious software that is lost.
  


• I (nor does the forum) support pirated software.
  


• If you don't understand something, don't be afraid to ask - I'm here to help. 😉
  

You'll notice the logs are pretty big and you won't be able to post a reply containing it all. Please use ONLY either:

• https://hastebin.com - here you can upload the .txt file directly. <- I prefer this.
  


• http://pasted.co/ - here you can set a password if you wish to protect your data. Just PM me the password.
  

And paste the link to the logs in your reply. Post each log separately (each with a separate link). If you're a new member and can't paste links you can fool the forums system by removing the beginning of the link.

e.g.

• If you can't post this: https://hastebin.com/raw/epaduvuyic
  


• Post: I used hastebin, here is the ending /raw/epaduvuyic
  

If I request you to post an image please use a service like https://imgur.com

======

Malwarebytes - Clean Mode

• Download and install the free version of Malwarebytes
  Note: If you have Malwarebytes already installed, you don't need to install it again. Simply start from the next bullet point
  


• Once Malwarebytes is installed, launch it and let it update his database. You might have to click on the little arrow by Scan Status in the middle right pane for it to do so
  


• Once the database update is complete, click on the Scan tab, then select the Threat Scan button and click on Start Scan
  


• Let the scan run, the time required to complete the scan depends of your system and computer specs
  


• Once the scan is complete, make sure that the first checkbox at the top is checked (which will automatically check every detected item), then click on the Quarantine Selected button
  • If it asks you to restart your computer to complete the removal, do so
    
  
  
  
  


• Click on Export Summary after the deletion (in the bottom-left corner) and select Copy to Clipboard. Paste the content in your next reply
  

======

Download the right version of RogueKiller

• 
  for your Windows version (32 or 64-bit)


• Once done, move the executable file to your Desktop, right-click on it and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
  


• Click on the Start Scan button in the right panel, which will bring you to another tab, and click on it again (this time it'll be in the bottom right corner)
  


• Wait for the scan to complete
  


• On completion, the results will be displayed. Click on the Open Report button in the bottom left corner, followed by the Open TXT button (also in the bottom left corner)
  


• This will open the report in Notepad. Copy/paste its content in your next reply
  

======

Please read the guide AsSaSs@iN constructed here before continuing: https://hackforums.net/showthread.php?tid=5772641

Post the logs in THIS THREAD


Let's get to it!

[Aristan]

I'm Sigma, I'm one of the leaders of the Security Malware Removal Team and will be assisting you throughout this thread. Before we start just take a second to read through these few requests - these are to ensure we can help you quickly and safely:

• Only use this thread for help. Please don't create multiple threads, accounts, PM me or post on other forums - if you do just let me know.
  


• Only follow my guidance.
  


• Don't run tools I haven't asked you to run. If you do just let me know so I can take that into consideration when viewing logs.
  


• DO NOT install any other software while we are attempting to clean your machine. It can get quite confusing especially if you are downloading questionable tools.
  


• Please be prompt in responding. I'll do my best to do so. If >48hrs has passed, please either PM me or ask "Are you there, I still need help" in this thread.
  


• Please stick with me until I give you the 'All Clean'. I'll help you cleanup quickly and offer some tips to make you more secure and get your system running faster.
  


• Your malware related tools will be removed. I don't support the tools often distributed on these forums. Scanners will generally remove these - I take no responsibility for any malicious software that is lost.
  


• I (nor does the forum) support pirated software.
  


• If you don't understand something, don't be afraid to ask - I'm here to help. 😉
  

You'll notice the logs are pretty big and you won't be able to post a reply containing it all. Please use ONLY either:

• https://hastebin.com - here you can upload the .txt file directly. <- I prefer this.
  


• http://pasted.co/ - here you can set a password if you wish to protect your data. Just PM me the password.
  

And paste the link to the logs in your reply. Post each log separately (each with a separate link). If you're a new member and can't paste links you can fool the forums system by removing the beginning of the link.

e.g.

• If you can't post this: https://hastebin.com/raw/epaduvuyic
  


• Post: I used hastebin, here is the ending /raw/epaduvuyic
  

If I request you to post an image please use a service like https://imgur.com

======

Malwarebytes - Clean Mode

• Download and install the free version of Malwarebytes
  Note: If you have Malwarebytes already installed, you don't need to install it again. Simply start from the next bullet point
  


• Once Malwarebytes is installed, launch it and let it update his database. You might have to click on the little arrow by Scan Status in the middle right pane for it to do so
  


• Once the database update is complete, click on the Scan tab, then select the Threat Scan button and click on Start Scan
  


• Let the scan run, the time required to complete the scan depends of your system and computer specs
  


• Once the scan is complete, make sure that the first checkbox at the top is checked (which will automatically check every detected item), then click on the Quarantine Selected button
  • If it asks you to restart your computer to complete the removal, do so
    
  
  
  
  


• Click on Export Summary after the deletion (in the bottom-left corner) and select Copy to Clipboard. Paste the content in your next reply
  

======

Download the right version of RogueKiller

• 
  for your Windows version (32 or 64-bit)


• Once done, move the executable file to your Desktop, right-click on it and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
  


• Click on the Start Scan button in the right panel, which will bring you to another tab, and click on it again (this time it'll be in the bottom right corner)
  


• Wait for the scan to complete
  


• On completion, the results will be displayed. Click on the Open Report button in the bottom left corner, followed by the Open TXT button (also in the bottom left corner)
  


• This will open the report in Notepad. Copy/paste its content in your next reply
  

======

Please read the guide AsSaSs@iN constructed here before continuing: https://hackforums.net/showthread.php?tid=5772641

Post the logs in THIS THREAD


Let's get to it!

https://hastebin.com/anayozojih.tex
https://hastebin.com/iquwucelac.tex
https://hastebin.com/rakovibalu.sql

[Sigma]

Remove those files from RogueKiller, then:

Farbar Recovery Scan Tool (FRST) - Fix

Follow the instructions below to execute a fix on your system using FRST, and provide the log in your next reply.

• Open Notepad and copy/paste the following into notepad:
  
  
  Code

  createrestorepoint:
closeprocesses:
HKLM-x32\...\RunOnce: [GrpConv] => grpconv -o
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
GroupPolicy: Restriction <==== ATTENTION
S4 OpenVPNService; "C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe" [X]
S3 intaud_WaveExtensible; \SystemRoot\system32\drivers\intelaud.sys [X]
2018-01-18 15:14 - 2017-12-17 23:36 - 000002376 _____ C:\WINDOWS\System32\Tasks\{5DA0FF43-3963-474E-AAB0-0D36DAC11525}
2017-07-15 15:04 - 2017-07-15 15:04 - 000000059 _____ () C:\Users\Josh\Near-Desolation_cl_near-desolation_LIVE.dat
2017-03-23 18:19 - 2017-03-23 18:19 - 000000003 _____ () C:\Users\Josh\AppData\Local\updater.log
2017-03-23 18:19 - 2017-05-07 02:20 - 000000425 _____ () C:\Users\Josh\AppData\Local\UserProducts.xml
emptytemp:
  
  
  


• Save the file as fixlist.txt, and save it on your Desktop (or wherever your FRST.exe/FRST64.exe executable is located)
  


• Right-click on the FRST executable and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
  


• Click on the Fix button
  
  
  
  


• On completion, a message will come up saying that the fix has been completed and it'll open a log in Notepad
  


• Copy and paste its content into your next reply
  

[Aristan]

Remove those files from RogueKiller, then:

Farbar Recovery Scan Tool (FRST) - Fix

Follow the instructions below to execute a fix on your system using FRST, and provide the log in your next reply.

• Open Notepad and copy/paste the following into notepad:
  
  
  Code

  createrestorepoint:
closeprocesses:
HKLM-x32\...\RunOnce: [GrpConv] => grpconv -o
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
GroupPolicy: Restriction <==== ATTENTION
S4 OpenVPNService; "C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe" [X]
S3 intaud_WaveExtensible; \SystemRoot\system32\drivers\intelaud.sys [X]
2018-01-18 15:14 - 2017-12-17 23:36 - 000002376 _____ C:\WINDOWS\System32\Tasks\{5DA0FF43-3963-474E-AAB0-0D36DAC11525}
2017-07-15 15:04 - 2017-07-15 15:04 - 000000059 _____ () C:\Users\Josh\Near-Desolation_cl_near-desolation_LIVE.dat
2017-03-23 18:19 - 2017-03-23 18:19 - 000000003 _____ () C:\Users\Josh\AppData\Local\updater.log
2017-03-23 18:19 - 2017-05-07 02:20 - 000000425 _____ () C:\Users\Josh\AppData\Local\UserProducts.xml
emptytemp:
  
  
  


• Save the file as fixlist.txt, and save it on your Desktop (or wherever your FRST.exe/FRST64.exe executable is located)
  


• Right-click on the FRST executable and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
  


• Click on the Fix button
  
  
  
  


• On completion, a message will come up saying that the fix has been completed and it'll open a log in Notepad
  


• Copy and paste its content into your next reply
  

https://hastebin.com/bigokurafe.tex here you go

[Sigma]

https://hastebin.com/bigokurafe.tex here you go

Okay, you are clean from infections. Let me know if the problem persists.

[Aristan]

I am running 100% cpu when running fortnite. when i try to stream my stream skips multiple frames, i am getting on obs encoding error, but nothing i do or change fixes it.
I run fortnite at 150+ fps, but my stream is smooth sometimes, but sometimes it will be less than 1fps on stream, clear on my game though.

[Sigma]

I am running 100% cpu when running fortnite. when i try to stream my stream skips multiple frames, i am getting on obs encoding error, but nothing i do or change fixes it.
I run fortnite at 150+ fps, but my stream is smooth sometimes, but sometimes it will be less than 1fps on stream, clear on my game though.

It sounds like the specs of your PC aren't able to handle big games like that which is why the CPU is so high. Try reinstalling OBS.

[Aristan]

Alright, i just upgrade my pc to a ryzen 7 1700 and while running fortnite i still get 100% cpu on fortnite and when i stream it is choppy as hell, something is not right here.

[Sigma]

There could be a problem with your Thermal Paste, which is due to overheating.

[Aristan]

There could be a problem with your Thermal Paste, which is due to overheating.

its not overheating though, its a brand new cpu, and well applied thermal paste.

[Sigma]

Run an FRST scan one more time and post the logs using hastebin. I will take a look one more time to see if there is anything that would do it. But the last time I checked you looked clean.

[Aristan]

Run an FRST scan one more time and post the logs using hastebin. I will take a look one more time to see if there is anything that would do it. But the last time I checked you looked clean.

https://hastebin.com/uxigogover.tex here you go <3

[Sigma]

There should have been an additional text that came along with it.

[Aristan]

There should have been an additional text that came along with it.

its included in the bottom of that one