{"id":475,"date":"2014-05-18T22:41:54","date_gmt":"2014-05-18T22:41:54","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=475"},"modified":"2018-05-29T12:02:54","modified_gmt":"2018-05-29T12:02:54","slug":"remove-dgen-exe-cpu-usage","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/remove-dgen-exe-cpu-usage\/","title":{"rendered":"DGen.exe 100% CPU Usage? &#8211; Bitcoin Miner Removal"},"content":{"rendered":"<p>Do you see a process named <a href=\"http:\/\/www.freefixer.com\/library\/file\/dgen.exe-122543\/\"><strong>dgen.exe<\/strong><\/a> running at 99% or even <strong>100% CPU usage<\/strong>? If that is the case someone is mining <a href=\"http:\/\/en.wikipedia.org\/wiki\/Bitcoin\">Bitcoins<\/a> on your machine!<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-cpu-usage.png\"><img loading=\"lazy\" class=\"alignnone wp-image-476 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-cpu-usage.png\" alt=\"dgen.exe high cpu usage in the task manager\" width=\"546\" height=\"210\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-cpu-usage.png 546w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-cpu-usage-300x115.png 300w\" sizes=\"(max-width: 546px) 100vw, 546px\" \/><\/a><\/p>\n<p>The\u00a0<strong>dgen.exe<\/strong>\u00a0Bitcoin miner has been around for some time. I first spotted it about a month ago, but for some reason I chose not to blog about it at that time. However, today I found it again, bundled with another download, so I thought I should post about it after all. Many of the anti-virus programs detect it as you can see in the scan result from <a href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a>:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-virus-total-bitcoin.png\"><img loading=\"lazy\" class=\"alignnone wp-image-479 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-virus-total-bitcoin.png\" alt=\"dgen.exe virus total scan\" width=\"425\" height=\"279\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-virus-total-bitcoin.png 425w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-virus-total-bitcoin-300x196.png 300w\" sizes=\"(max-width: 425px) 100vw, 425px\" \/><\/a><\/p>\n<p>How did you get\u00a0<strong>dgen.exe<\/strong> on your machine? Please share by posting a comment.<\/p>\n<p>To remove the <strong>dgen.exe<\/strong> bitcoin miner you can check the\u00a0<a href=\"http:\/\/www.freefixer.com\/library\/file\/dgen.exe-122543\/\">dgen.exe<\/a>\u00a0process and the <a href=\"http:\/\/www.freefixer.com\/library\/file\/starthelp.exe-124106\/\">starthelp.exe<\/a> service for removal in <a title=\"About FreeFixer\" href=\"http:\/\/www.freefixer.com\/b\/about-freefixer\/\">FreeFixer<\/a>. This will also fix the high CPU usage that you probably see on your machine.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-process.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-477\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-process.png\" alt=\"dgen.exe-process\" width=\"703\" height=\"206\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-process.png 703w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-process-300x87.png 300w\" sizes=\"(max-width: 703px) 100vw, 703px\" \/><\/a><\/p>\n<p>The <strong>starthelp.exe<\/strong> service appear as &#8220;Protect Monitor&#8221;:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-starthelp.exe-service.png\"><img loading=\"lazy\" class=\"alignnone wp-image-478 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-starthelp.exe-service.png\" alt=\"starthelp.exe service called &quot;ProtectMonitor&quot; or &quot;Protect Monitor&quot;.\" width=\"700\" height=\"347\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-starthelp.exe-service.png 700w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/05\/dgen.exe-starthelp.exe-service-300x148.png 300w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><\/a><\/p>\n<p>Here&#8217;s a video where I show FreeFixer in action while removing <strong>dgen.exe<\/strong> and <strong>starthelp.exe<\/strong>:<\/p>\n<p><iframe loading=\"lazy\" src=\"\/\/www.youtube.com\/embed\/-wF4GvIYLTY\" width=\"640\" height=\"360\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<p>Hope you found this useful. Thank you for watching!<\/p>\n<p>Update 2014-08-11: I&#8217;ve seen a few cases where other filenames appear in the &#8220;<strong>c:\\Program Files\\PCDapp<\/strong>&#8221; \u00a0folder:<\/p>\n<ul>\n<li>cudaminer.exe<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Do you see a process named dgen.exe running at 99% or even 100% CPU usage? If that is the case someone is mining Bitcoins on your machine! The\u00a0dgen.exe\u00a0Bitcoin miner has been around for some time. I first spotted it about a month ago, but for some reason I chose not to blog about it at &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/remove-dgen-exe-cpu-usage\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">DGen.exe 100% CPU Usage? &#8211; Bitcoin Miner Removal<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[16],"tags":[80,81,82,83,85,84],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/475"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=475"}],"version-history":[{"count":14,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/475\/revisions"}],"predecessor-version":[{"id":2748,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/475\/revisions\/2748"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=475"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=475"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=475"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}