Question Cpu usage drops when I open task manager

[YouAreNowManuallyBreathin]

Hi, when I opened Resource Monitor I noticed a thing called "Update_0510Tue202140703924859_u.exe" that was using 25% of my CPU

every time I open task manager the thing terminates itself and my CPU usage drops and I can hear my fan speed slow down but when I close out of task manager after a bit the thing starts running again
I have also noticed that when I disconnect from the internet it stops using the CPU as well

I have tried restarting my pc to see if it would fix it
and have used Malwarebytes and scanned it for viruses and did not detect any
is this an important file and is it a virus?

here is a link to the file and video of it happening if that helps

View: https://youtu.be/1o4LcP9V6Lk

Up5d75c_9604 – Google Drive

drive.google.com

 

[Colif]

what does it show in Description field in resource monitor next to that process?

whatever it is, its an update for Tuesday 5th October 2021 as thats what its name says
which version of windows 10?

1. right click start
2. choose run...
3. type winver and press enter
4. current version is 21H2

Download Process explorer and run it as admin (it comes from Microsoft so its safe)

I wonder if it can see it running? admittedly its just an over powered version of task manager but it might see the process, then you can right click and choose properties and get way more info than task manager would show

can right click processes and check them against virustotal

 

[YouAreNowManuallyBreathin]

what does it show in Description field in resource monitor next to that process?

whatever it is, its an update for Tuesday 5th October 2021 as thats what its name says
which version of windows 10?

1. right click start
2. choose run...
3. type winver and press enter
4. current version is 21H2

Download Process explorer and run it as admin (it comes from Microsoft so its safe)

I wonder if it can see it running? admittedly its just an over powered version of task manager but it might see the process, then you can right click and choose properties and get way more info than task manager would show

can right click processes and check them against virustotal

The description for the one using 25% of the CPU is"Update_0510Tue202140703924859_u.exe" I also notice another similar file named "Update_0510Tue202140703924859_s.exe"

windows 10 Version 21H2 (OS Build 19044.1645)

when I open process explorer "Update_0510Tue202140703924859_u.exe" terminates itself immediately but the other file named "Update_0510Tue202140703924859_s.exe" doesn't
so I scanned the one that does not terminate itself and got this result also the video of it happening if that helps 🙂


are these false positives?
and are the results bad bad?
https://www.virustotal.com/gui/file...da92a01428c5f543ccbce17207aca5f0f1-1651313852

View: https://youtu.be/p7zH8K1vxFI

 

[Colif]

try running this and see if it sees it - https://www.hitmanpro.com/en-us

only recognized by 4 other AV, so it might not see it.
given I can't find file names elsewhere, it might be an actual virus. that is normally a sign of one. its behaving like it doesn't want to be seen, so it clearly has a way to recognize process explorer or task manager.

It is using 25% of CPU?

If you look in process explorer options next to virus total, you can set it to scan all processes running, might find more.

try running this and see if it can find anything, it too lets you run virustotal scans - https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns

you might have to do a clean install to get rid of it

 

[YouAreNowManuallyBreathin]

try running this and see if it sees it - https://www.hitmanpro.com/en-us

only recognized by 4 other AV, so it might not see it.
given I can't find file names elsewhere, it might be an actual virus. that is normally a sign of one. its behaving like it doesn't want to be seen, so it clearly has a way to recognize process explorer or task manager.

It is using 25% of CPU?

If you look in process explorer options next to virus total, you can set it to scan all processes running, might find more.

try running this and see if it can find anything, it too lets you run virustotal scans - https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns

you might have to do a clean install to get rid of it

yeah hitmanpro did not detect anything

yes this exe uses 25% of the cpu

https://imgur.com/e64rn8p

link:
View: https://imgur.com/e64rn8p


It would not let me use virustotal on the program it kept giving error so I manually did it
all I could really find is that it autoruns one of the exe's called "Update_0510Tue202140703924859_c.exe" I think?
here are links to what I am talking about if that helps

https://imgur.com/a/l2vDlYt

View: https://imgur.com/a/l2vDlYt

https://imgur.com/Y5ySUce

View: https://imgur.com/Y5ySUce

https://www.virustotal.com/gui/file...19211882ca6d75ec7998aebcfa5c21ff34-1651358282

couldn't I just right-click and delete it rather than a clean install?

 

[Colif]

in autoruns, try unticking that application as that could make it stop.
I think it also lets you uninstall from there.

You could run avast free and see if it can remove it since it is one of the 4 that recognize it.

 

[YouAreNowManuallyBreathin]

in autoruns, try unticking that application as that could make it stop.
I think it also lets you uninstall from there.

You could run avast free and see if it can remove it since it is one of the 4 that recognize it.

I ran a smart scan from avast and it removed 3 exe files except 1 with the name "Update_0510Tue202140703924859_z.exe"

but no longer uses 25% of the CPU!

I tried running the uninstall all it did was open cmd and close it
so I'm still left with a bunch of files could I just right-click and delete them?
is it safe to leave the files on my computer?

https://imgur.com/DZtxWSS

View: https://imgur.com/DZtxWSS

 

[Colif]

You can try right click/delete
its possible the 3 parts it removed were the active parts. Those are just remains.