{"id":59512,"date":"2023-07-18T16:08:27","date_gmt":"2023-07-18T10:38:27","guid":{"rendered":"http:\/\/198.58.113.91\/blog\/?p=59512"},"modified":"2023-09-07T20:04:52","modified_gmt":"2023-09-07T14:34:52","slug":"common-language-runtime-native-compiler-100-cpu","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/common-language-runtime-native-compiler-100-cpu\/","title":{"rendered":"Microsoft Common Language Runtime Native Compiler 100% CPU Usage"},"content":{"rendered":"<p>When you open Task Manager, you may see that the module &#8220;Microsoft common language runtime native compiler&#8221; may use 100% of the CPU and hamper the device&#8217;s performance.<\/p>\n<p>If the task is ended manually, it starts up automatically after about 10-20 minutes. You may wonder what causes this issue and how to fix this.<!--more--><\/p>\n<h2>Cause<\/h2>\n<p>A miner (&#8220;IECrashHandler.exe&#8221;) infection can cause this issue. Your antimalware software may be unable to find and remove the rogue processes and the corresponding scheduled tasks.<\/p>\n<h2>Resolution<\/h2>\n<p>Download Malwarebytes Antimalware, run a scan, and eliminate every malware it finds.<\/p>\n<p>If the problem persists, do the following:<\/p>\n<p>Delete the following malware files if found on your computer:<\/p>\n<pre>C:\\Program Files (x86)\\Internet Explorer\\IECrashHandler.exe\nC:\\Program Files (x86)\\Google\\CrashReports\\MSCrashHandler.exe\nC:\\Program Files (x86)\\Google\\CrashReports\\ChromeCrashHandler.exe\nC:\\Users\\%username%\\AppData\\Local\\Microsoft\\MSBuild\\WinZip.exe\nC:\\Program Files (x86)\\MSBuild\\WinZip.exe\nC:\\ProgramData\\Includers\\DNDWMYRI.exe\nC:\\ProgramData\\filex64\\ZGSFK.exe\nC:\\Users\\%username%\\AppData\\Roaming\\Windows Updates Files\\Windows Updates Service.vbe\nC:\\Users\\%username%\\AppData\\Roaming\\java.exe<\/pre>\n<p>Run a scan using the Farbar scanner and inspect the entries, especially the scheduled tasks and services.<\/p>\n<ol>\n<li>Download <a href=\"https:\/\/www.bleepingcomputer.com\/download\/farbar-recovery-scan-tool\/\" target=\"_blank\" rel=\"noopener\">Farbar Recovery Scan Tool<\/a> (FRST64.exe)<\/li>\n<li>Rename FRST64.exe to EnglishFRST64.exe.<\/li>\n<li>Run the program and click &#8220;Scan&#8221;.<\/li>\n<\/ol>\n<p>If you need assistance, upload the two logs, FRST.txt and Addition.txt, to your OneDrive and share the link in the Comments section below.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>When you open Task Manager, you may see that the module &#8220;Microsoft common language runtime native compiler&#8221; may use 100% of the CPU and hamper the device&#8217;s performance. If the task is ended manually, it starts up automatically after about 10-20 minutes. You may wonder what causes this issue and how to fix this.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[8,869],"tags":[963],"class_list":["post-59512","post","type-post","status-publish","format-standard","hentry","category-windows-10","category-windows-11","tag-malware"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":47665,"url":"https:\/\/www.winhelponline.com\/blog\/system32-huge-disk-space-junk-exe-files\/","url_meta":{"origin":59512,"position":0},"title":"System32 Folder Occupies 300 GB; Filled with Gibberish EXE Files","author":"Ramesh","date":"May 21, 2023","format":false,"excerpt":"Of late, many users are complaining that the System32 folder is consuming colossal disk space (e.g., 150 GB - 300 GB) all of a sudden. On a user's computer, more than 200,000 .exe files were generated. Those files were almost generated every minute, consuming over 200 GB on the C\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"system32 gibberish exe filled up microstar international","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/05\/system32-junk-exe-msi-service-treesize.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/05\/system32-junk-exe-msi-service-treesize.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/05\/system32-junk-exe-msi-service-treesize.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/05\/system32-junk-exe-msi-service-treesize.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":70989,"url":"https:\/\/www.winhelponline.com\/blog\/defender-100-cpu-usage-full-scan\/","url_meta":{"origin":59512,"position":1},"title":"[Fix] Windows Defender 100% CPU Usage During Full Scan","author":"Ramesh","date":"January 26, 2024","format":false,"excerpt":"When you run a full scan using Microsoft Defender Antivirus, about 30 seconds to 1 minute into the scan, the CPU usage spikes and uses up all the remaining CPU. Its CPU usage remains at 100% throughout the full scan. The CPU fan becomes loud. Due to this issue, systems\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"Windows Defender CPU usage during full scan - CPU throttle enabled","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/01\/defender-full-scan-cpu-throttle-on.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/01\/defender-full-scan-cpu-throttle-on.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/01\/defender-full-scan-cpu-throttle-on.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/01\/defender-full-scan-cpu-throttle-on.png?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/01\/defender-full-scan-cpu-throttle-on.png?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":5488,"url":"https:\/\/www.winhelponline.com\/blog\/xdgaudio-vbs-80070002-malware\/","url_meta":{"origin":59512,"position":2},"title":"Error 80070002 xdgaudio.vbs cannot find the file specified?","author":"Ramesh","date":"October 12, 2017","format":false,"excerpt":"If you're receiving the following error message related to \"xdgaudio.vbs\" in your system, then your computer is most likely infected. Script:\u00a0\u00a0\u00a0 C:\\windows\\xdgaudio.vbs Line:\u00a0\u00a0\u00a0 3 Char:\u00a0\u00a0\u00a0 1 Error:\u00a0\u00a0\u00a0 The system cannot find the file specified. Code:\u00a0\u00a0\u00a0 80070002 Source:\u00a0\u00a0\u00a0\u00a0 (null) When edited with Notepad, the script may contain lines such as below:\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"xdgaudio.vbs error malware","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/10\/xdgaudio-error-1.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/10\/xdgaudio-error-1.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/10\/xdgaudio-error-1.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":25816,"url":"https:\/\/www.winhelponline.com\/blog\/startupchecklibrary-winscomrssrv-dll-missing-error-startup\/","url_meta":{"origin":59512,"position":3},"title":"[Fix] StartupCheckLibrary.dll and Winscomrssrv.dll Error at Startup","author":"Ramesh","date":"January 20, 2022","format":false,"excerpt":"When you log in to your Windows computer, the following error message windows may pop up: RunDLL There was a problem starting StartupCheckLibrary.dll The specified module could not be found. RunDLL There was a problem starting winscomrssrv.dll The specified module could not be found. Additionally, you may see the following\u2026","rel":"","context":"In &quot;Utilities&quot;","block_context":{"text":"Utilities","link":"https:\/\/www.winhelponline.com\/blog\/category\/utilities\/"},"img":{"alt_text":"startupchecklibrary.dll malware startup error","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/01\/malwarebytes-history.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/01\/malwarebytes-history.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/01\/malwarebytes-history.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/01\/malwarebytes-history.png?resize=700%2C400&ssl=1 2x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/01\/malwarebytes-history.png?resize=1050%2C600&ssl=1 3x"},"classes":[]},{"id":54263,"url":"https:\/\/www.winhelponline.com\/blog\/windows-script-host-error-run-vbs\/","url_meta":{"origin":59512,"position":4},"title":"Windows Script Host error in AppData\\Local\\Updates\\Run.vbs. The System cannot find the file specified","author":"Ramesh","date":"June 17, 2023","format":false,"excerpt":"When you login to your account,\u00a0you may see a Windows Script Host error similar to the following: Windows Script Host Script: C:\\Users\\{username}\\AppData\\Local\\Updates\\Run.vbs Line: 31 Char: 1 Error: The system cannot find the file specified. Code: 80070002 Source: (null) Additionally, on some systems, you may see a WindowsService.exe popup window that\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"windowsservice.exe malware","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/06\/windowsservice-exe-pop-up.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/06\/windowsservice-exe-pop-up.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/06\/windowsservice-exe-pop-up.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2023\/06\/windowsservice-exe-pop-up.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":75552,"url":"https:\/\/www.winhelponline.com\/blog\/fake-com-surrogate-high-cpu\/","url_meta":{"origin":59512,"position":5},"title":"Fix: Fake COM Surrogate and High CPU Usage","author":"Ramesh","date":"June 15, 2024","format":false,"excerpt":"If Task Manager shows COM Surrogate occupying high CPU or memory usage, it's most likely a miner. It's a fake COM Surrogate process whose name might be DlIHost.exe (DLIHOST.EXE) instead of DllHost.exe. The fake COM Surrogate process (DLIHOST.exe) may be located in the folder \"C:\\Users\\%username%\\AppData\\Roaming\\Dll\". It runs runs as a\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"COM Surrogate high CPU usage","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/06\/COM-Surrogate.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/06\/COM-Surrogate.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/06\/COM-Surrogate.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/06\/COM-Surrogate.png?resize=700%2C400&ssl=1 2x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/59512","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/comments?post=59512"}],"version-history":[{"count":0,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/59512\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/media?parent=59512"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/categories?post=59512"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/tags?post=59512"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}