Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

cvtres.exe crippling computer with high CPU use


  • Please log in to reply

#1
Violet_Shift

Violet_Shift

    Member

  • Member
  • PipPip
  • 18 posts
Hello,

I'm at the end of my wits with this problem, and if I can't figure out what to do, I'm likely to just format my drive. I'd rather not do that right now. :P

Whenever I start my computer, it will immediately be crippled by cvtres.exe (aka Microsoft® Resource File To COFF Object Conversion Utility) either consuming 99% of the CPU on its own, or starting multiple processes that end up consuming 99% of the CPU. I know this is an inbuilt program on the OS, but I can't figure out why it's behaving this way. While it's acting this way, my computer is extremely slow (Firefox -barely- works, and all of my IM programs are basically worthless at this point). I've tried googling the problem, but everything's come up short.

Anyone have any ideas?

Thanks.
  • 0

Advertisements


#2
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts
Hi Violet_Shift,

Before I send you over to the Malware section of our board, can I ask the full path and file size of cvtres.exe? Based on behavior and a quick look at Systemlookup, it doesn't sound good. If you can afford to hold off one the reformat, maybe we can help. Keep in mind, it's New Years, so we're pretty thinly staffed right now.

Biscuithd
  • 0

#3
Violet_Shift

Violet_Shift

    Member

  • Topic Starter
  • Member
  • PipPip
  • 18 posts
Sure.

C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe (32.1KB)

This has made me think that something in .NET has become corrupted, but I've no idea how to force a reinstall given that it's packaged with Windows now.
  • 0

#4
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts
Hi again,

At a fast glance, I'm not likening that line, however, one does not (meaning me) conclude that a machine has malware based on one line. However, I am very suspicious of that line and would suggest that you open a topic in the Malware area http://www.geekstogo...alware-removal/. There are instructions there for how to get and post an OTL log, etc.

Biscuithd
  • 1

#5
Violet_Shift

Violet_Shift

    Member

  • Topic Starter
  • Member
  • PipPip
  • 18 posts
In that case I'll just reformat. It's an inconvenience yeah but I have all of my stuff backed up on a RAID so really I'd rather be absolutely sure the whatever it is is gone.

Thanks a lot for the help :)
  • 0

#6
Machiavelli

Machiavelli

    GeekU Moderator

  • GeekU Moderator
  • 4,581 posts
Wait ... You can upload it to Virustotal.com - please post then the link to the analysis.
  • 1

#7
Violet_Shift

Violet_Shift

    Member

  • Topic Starter
  • Member
  • PipPip
  • 18 posts
Yeah - just tried that.

Here's the analysis:

https://www.virustot...14a65/analysis/

It looks like it's clean, so I'm strongly suspecting the file is corrupted and is misbehaving.
  • 0

#8
Machiavelli

Machiavelli

    GeekU Moderator

  • GeekU Moderator
  • 4,581 posts
We can try to replace it with another file if you like. But I'm not sure if this helps. The file is related to a FrameWork software (Visual Studio?). BiscuitHD thought it was this Malware here, but luckily it was not.

Which firewall/Anti Virus are you using?
  • 1

#9
Violet_Shift

Violet_Shift

    Member

  • Topic Starter
  • Member
  • PipPip
  • 18 posts
It actually -was- malware that was causing the problem - some sort of bitcoin miner disguising itself as a legitimate windows process. MBAM removed it and it's no longer hogging the CPU - admittedly I'm still seeing some very strange behaviour such as Skype and Yahoo IM locking up all the time. (This was what prompted my investigations in the first instance). So alas it still seems like a format is on the cards.

Nonetheless, thanks everyone for their help.
  • 0

#10
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts
Glad to help, but please, open a topic in the Malware site so we can get you the rest of the way clean. It's unlikely that an automated tool like MBAM is going to clean everything.
  • 1

#11
Violet_Shift

Violet_Shift

    Member

  • Topic Starter
  • Member
  • PipPip
  • 18 posts
Thank you. I'll start up a thread in the Malware section.
  • 0

#12
nolacs22

nolacs22

    Member

  • Member
  • PipPip
  • 45 posts
Is virustotal a downloaded program? :rolleyes:
  • 0

#13
nolacs22

nolacs22

    Member

  • Member
  • PipPip
  • 45 posts

Is virustotal a downloaded program? :rolleyes:

My question has been answered. :blush:
  • 0

#14
Maideen Haja

Maideen Haja

    New Member

  • Member
  • Pip
  • 1 posts

Is virustotal a downloaded program? :rolleyes:

s your PC running high speed than normal? how to know?
install gadget such as CPU speed. from:-
Windows Desktop Gadgets - All CPU Meter Version 4.7.3
It is a free legal program. If using Window 8.you need to install
additional package 8GadgetPack from:- So that the gadget can run.
Windows Desktop Gadgets - Frequently Asked Questions

Look at the speed if it is running more than 50%, when
no program is running there is something wrong. You might
think your PC is slow and decide to get a new PC,

press CTRL ALT DELETE and go to process manager.
see what program is running and CPU usage percentage.

I just located a bug running this way and remove it. No info
about the bug on the internet.

Another problem is program cvtres.exe is always running high and
using the CPU 80% of the time. According to the internet, the program
is Microsoft legal. I search the internet no way of removing it.
Interestingly if you press CTRL ALT DELETE the program will stop
and terminate and return when you exit the Task Manger.
Task hiding .
I run another third party process manager and SPOTTED it !!!
If I terminate it, it will start to run again. hmmm.
Finally, I suspend it !!. It remind suspended and CPU run normal.
Gee I solved it some how.


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP