I'm using an ASUS TUF F15 from 2022, and it occasionally becomes almost unusably slow, with severe cursor lag. Task Manager shows CPU usage around 99%, while memory usage is only about 37% of my 24 GB. AddInProcess.exe is responsible for roughly 96% of the CPU load, and my NVIDIA GPU temperature reaches about 83°C. I'm not sure what this process does, whether it is legitimate, or whether malware or overheating could be involved. What is the safest way to diagnose and fix the problem?
3 Answers
AddInProcess.exe can be a legitimate Microsoft .NET Framework component, so don’t delete it just because the name looks unfamiliar. In Task Manager, right-click it and choose Open file location. A normal copy is usually under a Microsoft.NET Framework folder, and its Properties should show Microsoft as the digital-signature publisher. If it is running from a temporary, Downloads, or unusual user folder, treat that as suspicious instead. You can end the task temporarily, then run a full Windows Security scan and an offline scan if the high CPU usage returns.
The 83°C GPU temperature is warm but not automatically evidence of malware; gaming laptops can reach that range under load. The immediate problem is the sustained CPU usage, so check CPU temperature too and make sure the fans and vents are clear. If the process is unsigned or located outside the normal Microsoft.NET directory, scan with Windows Security and a reputable second-opinion scanner. If it is signed and in the expected location, look for the application or add-in repeatedly triggering it rather than removing the framework file itself.
Check what launches the process before uninstalling anything. Look in the file’s Properties, confirm the exact path and signature, and review installed applications and startup entries for recently added software, game add-ins, or unofficial mods. Also install pending Windows and driver updates and run the .NET repair or system-file checks if the file is confirmed as a genuine Windows component. Avoid changing ownership or deleting files inside the Windows or .NET directories manually.
A high CPU reading by itself doesn’t prove that someone is mining cryptocurrency. Verify the file path and publisher first, then scan the system and check which application started the process.