Zotac GTX 670 4GB 70 degrees in idle

[Danielbleker]

Hi Everybody,

I built a computer a few weeks ago.
I started monitoring the videocard with Asus GPU Tweak, and i found out my videocard has a usage of around 99% sometimes 100% and a temp of around 70 degrees celcius while being idle with auto fan speed set. (around 40%).



Here are some specs:
CM Haf x
Asus Maximus V formula
Intel i7-3770K
Corsair H100
Zotac GTX 670 4gb
DELL U2312HM
Cooler master silent pro M2 1000W


I hope anyone knows if this is normal,and why my videcard has a usage of 99& while it should be idle? And what does fb usage mean?

Thanks in advance!
Daniël

[eidairaman1]

For 1 ur using a tool devd by asus and not zotac. 2 its possible temp sensors are not reading properly. 3 cooler isnt seated on gpu n ram right or vrms are not cooled at all.

[Danielbleker]

The card is really 70 degrees. The backplate feels hot.
I dont know if the Vram is cooled. I supose it is. I'm not using an aftermarket videocard cooler.
It could be that the Asus tweaking program isn't working properly with Zotac.

[Danielbleker]

When i activate my two other monitors (nvidia surround) mu usage drops down to max 33 min 0! Temperature is way lower as well!

[afw]

W1zz had the same problem with his review sample.
http://www.techpowerup.com/reviews/Z...0_Amp_Edition/

try his fix ...

EDIT: Not sure about the constant high usage tho ...

[Crap Daddy]

It can't be idle and in the same time under full load. Just try another monitoring software like EVGA Precision X.

[Black Panther]

Try GPU-Z.
There's no reason it should go to 100% unless you're not running some background program like folding or crunching using gpu power...

I have your same card, Zotac 670 4GB. According to GPU-Z it idles at 40 and loads at 80.

Here's the sensor screenshot at idle so you can compare:

[Danielbleker]

GPU-Z gives the same GPU loas as Asus tweak does. (which is 0 atm)
I think it has something to do with the NVidia control panel and Ultramon.
I use ultramon to quickly change resolutions if i only want one monitor instead of three.
When my card was 70 degrees i was using one monitor in portrait. Nvidia control panel had other settings.

I think the card was "confused" because of the two different resolutions.
Everybody thanks for helping, if the problem returns again i'll know what to do.

[Danielbleker]

The videocard was 70 degrees again when i rebooted my pc today. Because of a GPU Usage of 99%. Found out that the card resets when i deactivate rundll.exe.

The usage drops to around 2% and the temperature drops to 35 degrees after deactivating rundll.exe. Very weird.

[MxPhenom 216]

Try using Evga Precision X and see if it displays a different temperature.

[W1zzard]

Originally Posted by MxPhenom 216

Try using Evga Precision X and see if it displays a different temperature.

this is most certainly not a monitoring software issue.

explore that rundll thing more. is that process causing high gpu load?

[MxPhenom 216]

Originally Posted by W1zzard

this is most certainly not a monitoring software issue.

explore that rundll thing more. is that process causing high gpu load?

yeah I replied not reading the entire thread so its not monitor obviously.

[eidairaman1]

Certain rundll TSRs can be viral actually from what ive read in past.

Originally Posted by W1zzard

this is most certainly not a monitoring software issue.

explore that rundll thing more. is that process causing high gpu load?

[W1zzard]

in task manager enable displaying the command line to get more info about a process

[Danielbleker]

Originally Posted by W1zzard

in task manager enable displaying the command line to get more info about a process
http://img.techpowerup.org/120823/Capture057.jpg

Good idea,

The problem occurs if i disable nvidia surround, and change to a resolution of 1920x1080.
Then the Runddl32.exe starts up. I made a screenshot, the command line is also visible now.

[Danielbleker]

It could be a virus. The command line contains a certain website that it connects to.
Fust.mooo.com Probably with username "Ferm2" and password "12345"

Anyone any ideas?

[Crap Daddy]

Malwarebytes. If you don't have it go here. The free version.

http://www.malwarebytes.org/

[Danielbleker]

While malwarebytes is scanning i found something again.
The website tells something about "bitcoin-mining" (http://www.weusecoins.com/mining-guide.php) Its a sort of folding.

I never heard of this. Probably someone made my computer use its videocard to create bitcoins.
Thats why my videocard suddenly becomes warm.

[Danielbleker]

Okay, two malwareviruses had been found.
exactly the two this website states:

https://www.mysonicwall.com/sonicale...article&id=444
This virus is used by people to easely transfer and generate currency.

Thanks for helping!

[W1zzard]

that seems to be the explanation. if your antivirus cant remove it, look for the command line of the entry (task manager) and search for it in regedit. should be safe to delete, if you want to be sure post a screenshot of regedit here first and wait for feedback

[Danielbleker]

Its fine, most files were removed. I also found the rest.
I could even find what was being installed and where.

Here is a screenshot for people that might have the same problem:

[eidairaman1]

some of the posts in this thread need to be put in another and that used as a Guide for a viral issue and how to remove them, or tag this topic that waya

[Danielbleker]

Originally Posted by eidairaman1

some of the posts in this thread need to be put in another and that used as a Guide for a viral issue and how to remove them, or tag this topic that waya

Lol, how can i do that? I never use forums so often.

[kurror]

Hi.

I had similar problem, rundll32.exe was using 99% of my CPU. I used "Autoruns" aplication to locate any suspicious windows startup entry and deactivated some. Since then that phatk dll isn't loading anymore. Problem is I am not able to find any phatk file nor any of the files shown on the picture Danielbleker posted above.

Now I am checking for malware, full scan.

I have been searching the net for people with similar problem and this is the only place I found some info about this bitcoin mining malware.

Thanks for posting.

Edit:

Well, I built this pc few days ago and forgot to set explorer to show hidden files. Found the exac same files showed above, at the same location.
Malwarebytes found Trojan.Banker

[Danielbleker]

No problem!

I hope this can help more people with this virus.
I also had the trojan.banker.
Good luck with keeping your pc clean.