Malware · high

How to fixHIGH_CPU_CRYPTOMINER

Unauthorized Background Cryptocurrency Miner (High CPU/GPU)

What this error means

Unauthorized Background Cryptocurrency Miner (High CPU/GPU) is a high-severity malware/security issue. This diagnosis identifies background mining scripts or binaries running under spoofed system process names (e.g. lsass.exe, svchost.exe), causing high CPU/GPU resource utilization, thermal throttling, and severe system slowdown. See the troubleshooting steps below for the fix.

Before you begin

Save open work and back up important files. Note any recent driver or hardware changes. If Windows cannot start, use the startup guide first.

Work through these checks

0 of 3 complete
01Check Task Manager for unusually high-utilization processes executing from Temp or AppData directories.

Check Task Manager for unusually high-utilization processes executing from Temp or AppData directories..

Use the instructions for your exact device and operating system. Check the manufacturer’s documentation before changing firmware, hardware, or system settings.

I need help
02Terminate suspicious processes using Taskkill or Resource Monitor.

Terminate suspicious processes using Taskkill or Resource Monitor..

Use the instructions for your exact device and operating system. Check the manufacturer’s documentation before changing firmware, hardware, or system settings.

I need help
03Download and execute a full clean scan using Microsoft Safety Scanner (MSERT).

Download and execute a full clean scan using Microsoft Safety Scanner (MSERT)..

Use the instructions for your exact device and operating system. Check the manufacturer’s documentation before changing firmware, hardware, or system settings.

I need help

Possible causes

  • Malicious utility bundles or drive-by scripts from unverified websites.
  • Compromised web browser extensions running background script loops.