"issch.exe" taking up 25% of CPU (InstallShield Update Service)

[Derek]

Yesterday while playing NMS, I ran into frame droppage, I was getting my usual 60 FPS, then suddenly it went down to 11-15 FPS, turns out this was "issch.exe" that was located in the following folder: C:\Users\{UserProfileName}\AppData\Roaming\HelloGames\ISSCH

After force closing through Task Manager, I was getting the FPS that I would expect, then, this morning I logged onto my PC, I see "issch.exe" doing the same thing again. I've left it running for about 2 hours now and is still taking up 25% of my CPU.

If it means anything; I am on the Experimental Version of NMS.

[Unsaid]

It's probably a virus... A similar thing is happening to me and it was in appdata/roaming folder too, but in the folder of another program. It doesnt update anything, so I guess ill just hard-remove the file next time it pops up.

[BR|sCip]

have to take a look 2

[Banzai]

I'm on experimental and don't have issch.exe in my HelloGames folder. It's also not running as a process.

I'm curious, did either of you guys run any of those "increase fps" programs people were linking to, or the "improved" emulator?

[Derek]

I only played the game and edited the setting through Notepad. Opened the game through Desktop icon, nVidia Experience or Steam.

I only knew it was an issue and related to HelloGames by right clicking on the task and open location.

Sorry, nothing more I can contribute

[C0LDR3X]

Sometimes bitcoin miners are hidden there, you might accidentally download it via half legit tools like trainers, keygens etc.

This video explains how to disable it manually
https://www.youtube.com/watch?v=GsvUTO0bwzA

[Cpt. Wardova TCNMS Intrepid]

Автор сообщения: Derek

I only played the game and edited the setting through Notepad. Opened the game through Desktop icon, nVidia Experience or Steam.

I only knew it was an issue and related to HelloGames by right clicking on the task and open location.

Sorry, nothing more I can contribute

I am pretty sure it's s shader file in NMS that nVidia works with. Yes there are known issues with shader cache for a while now. Not sure you can delete it or shut it off, it will just restart, as it's a gpu/game function that keeps popping up with certain game events. You are seeing some of the big issue with NMS' shader. Looked through a few of the crashdumps for NMS, and it often has entries with shadercache. There are some errors that multiply and clog up cache and memory, resulting in the fps drops like you saw. Only true remedy will have to come from Hello Games and future patches.

[Maverick]

Автор сообщения: admin.windows

Sometimes bitcoin miners are hidden there, you might accidentally download it via half legit tools like trainers, keygens etc.

This video explains how to disable it manually
https://www.youtube.com/watch?v=GsvUTO0bwzA

I think you are right about this. Here's some more info: https://linustechtips.com/main/topic/646953-installshield-update-service-isschexe-strage-gpus-vram-consumption/

[+VLFBERHT+]

You have an 3rd party app, that looks for updates for 3rd party software apps/programs, looking for updates ?

http://answers.microsoft.com/en-us/windows/forum/windows_7-performance/windows7-on-startup-do-you-want-to-allow-isschexe/6581179e-4795-42c3-8f78-40c95186e196

Looks like the Microsoft specialist links to an "uninstaller" for this problem.

P.s. What's really weird is, that was the very first selection i found in the search engine i typed the word: "issch.exe"

Just Do It

P.s. Here's an useful info tool too:

http://www.neuber.com/taskmanager/process/issch.exe.html

... and finally:

http://flexerasoftware.force.com/articles/en_US/HOWTO/Q111006

http://www.flexerasoftware.com/producer/products/software-installation/installshield-software-installer/

[paulsacK]

this is undoubtly a virus/trojan more likely bitcoin miner w/e doesn't matter because it's malicious in nature. This can exist in different forums, for example:

I've fixed computers that had these two cases:
\AppData\Roaming\NVIDIA\ISSCH\issch.exe - pretending to be NVIDIA based
\AppData\Roaming\Cannon\ISSCH\issch.exe - pretending to be Cannon printer based

And OP had the:
\AppData\Roaming\HelloGames\ISSCH\issch.exe


Must be noted that issch.exe is indeed a valid process for 3rd party updating as other users have provided information on, but in these cases they malicious program was binded to the standard issch.exe program essentially making it malicious. All running processes and indicators lead it to be the regular issch.exe third party updater, but it is not.


2 Steps to verify you have the nasty bug:
- submit the issch.exe to virustotal or your favorite submission place (you should have done this the first sign of question)
- go to your windows task scheduler and look to find the task that is controlling this program. It probably won't have a name, but there shouldn't be that many in the USER section of the tasks. When you find the right one, you will see that this issch.exe is being executed in the same folder that you found your problematic 'process killing and resource stealing' program to be. You will also be able to see that this task was instructed to run everytime the user logged in.


Here's the hint that it most likely is nothing more than a bitcoin miner: the fact that it bogs your games down! of course it will bog your system down, but it games you can get a reduction to 10FPS! This is because bitcoin miners use GPU's instead of CPU's because they can get more mining down using the GPU.


Stay smart, stay cool, stay in school.

[jonnin]

heh, hack it and send back a fake bitcoin found?