Share via

Hidden Miner in microsoft network realtime inspection service

Anonymous
2023-12-28T10:17:18+00:00

Hi, my GPU (3060ti) have been extremely loud lately and performance is a bit on the lousy side.

Teh temperatures are unusually high and usage is over the roof when idling.

While troubleshooting I found that microsoft network realtime inspection service has been using 100% of the GPU.

Upon further inspection (Digital Signatures) I found that there is a pesky Miner sucking up all my GPU power

However I cannot get rid of this MF. Windows Defender does not detect it and I tried a few things I found on the interwebs but to no avail.

My question is how do I get rid of this thing.

I really do not want to format my PC and I want my GPU back!

To add insult to injury, since microsoft network realtime inspection service is part of the Windows Defender I consider it a miserable fail by hiding a miner on it.

Windows for home | Windows 11 | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

7 answers

Sort by: Most helpful
  1. _AW_ 67,206 Reputation points Volunteer Moderator
    2023-12-28T22:29:18+00:00

    All good then. If there's nothing further you can clean up by deleting FRST and the C:\FRST folder.

    ...if you would mark the thread as answered, by pressing Yes below the post that provided the solution...that'd be awesome.

    Good luck!

    1 person found this answer helpful.
    0 comments No comments
  2. Anonymous
    2023-12-28T13:15:32+00:00
    • Download Fixlist.txt and save to the folder that FRST64English.exe is in
    • Run FRST and press "Fix" - a reboot will be needed to complete the fix
    • Please share Fixlog.txt

    Done;

    Done;

    And...

    Fixlog.txt

    Done!

    Apparently the lolminer thing was substituted for a microsoft thing.

    Image

    GPU usage seems to be back to normal (idling)

    Image

    Thanks for the prompt help!

    0 comments No comments
  3. _AW_ 67,206 Reputation points Volunteer Moderator
    2023-12-28T12:29:31+00:00
    • Download Fixlist.txt and save to the folder that FRST64English.exe is in
    • Run FRST and press "Fix" - a reboot will be needed to complete the fix
    • Please share Fixlog.txt
    0 comments No comments
  4. Anonymous
    2023-12-28T12:03:37+00:00

    Hi _AW_

    • Upload the logs to OneDrive, Google Drive or any file sharing service and post the share link

     

    Addition.txt

    FRST.txt

    0 comments No comments
  5. _AW_ 67,206 Reputation points Volunteer Moderator
    2023-12-28T10:20:13+00:00

    Hi Fabio,

    Please share Farbar Recovery Scan Tool (FRST) logs.

    https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

    • If your computer language is not English, rename FRST64.exe to FRST64English.exe
    • Run FRST and press "Scan"
    • Two logs are created in the folder that FRST is run from, FRST.txt and Addition.txt
    • Upload the logs to OneDrive, Google Drive or any file sharing service and post the share link

    Note: If you are downloading FRST with Edge, smartscreen will initially block it.

    Click on the 3 dots next to the warning and select Keep-> Show more-> Keep anyway.

    Share OneDrive files and folders - Microsoft Support

    0 comments No comments