![]() |
|
[Infected] i got some program starting a cpu miner on my comp - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45) +--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448) +---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110) +---- Thread: [Infected] i got some program starting a cpu miner on my comp (/showthread.php?tid=5811848) |
i got some program starting a cpu miner on my comp - CrackIt™ - Mar 15, 2018 can any one help me remove this? its really annoying and keeps overheating my comp RE: i got some program starting a cpu miner on my comp - FawkCidy - Mar 15, 2018 Well if its like mine, just leave your task mng open 24/7 and it won't be a prob. RE: i got some program starting a cpu miner on my comp - Smileツ - Mar 15, 2018 (Mar 15, 2018 02:46 PM)FoxyDi Wrote: Well if its like mine, just leave your task mng open 24/7 and it won't be a prob. Nice solution. OP try to restore your system. RE: i got some program starting a cpu miner on my comp - CrackIt™ - Mar 15, 2018 (Mar 15, 2018 02:50 PM)dåFu™ Wrote: Nice solution. the sad part is i just did a few weeks ago :/ dont wanna have to reupdate very thing again knew i should of made that restore point RE: i got some program starting a cpu miner on my comp - Smileツ - Mar 15, 2018 (Mar 15, 2018 02:51 PM)CrackIt™ Wrote: the sad part is i just did a few weeks ago :/ dont wanna have to reupdate very thing again knew i should of made that restore point Scan your pc with some antivirus then , search at appdata or temp for the miner and scan it on virustotal. It could be anywhere but if you find it on task manager you can find the location easy. Boot you pc on safe mode , it would be easy to upload it for analyze and get the detections. RE: i got some program starting a cpu miner on my comp - CrackIt™ - Mar 15, 2018 (Mar 15, 2018 02:56 PM)dåFu™ Wrote: Scan your pc with some antivirus then , search at appdata or temp for the miner and scan it on virustotal. It could be anywhere but if you find it on task manager you can find the location easy. when i go to location file it takes me to a file with no .exe just .dll files i deleted it about 5 times and its not going away just keeps coming back i scanned with hitman pro and malwarebytes and now roguekiller RE: i got some program starting a cpu miner on my comp - Smileツ - Mar 15, 2018 (Mar 15, 2018 03:00 PM)CrackIt™ Wrote: when i go to location file it takes me to a file with no .exe just .dll files i deleted it about 5 times and its not going away just keeps coming back i scanned with hitman pro and malwarebytes and now roguekiller Try to use process hacker to check the process tree , the .exe should be somewhere. RE: i got some program starting a cpu miner on my comp - CrackIt™ - Mar 15, 2018 this is what comes up (pics) https://prnt.sc/irs6v9 https://prnt.sc/irs6nq http://prntscr.com/irs8ga RE: i got some program starting a cpu miner on my comp - Smileツ - Mar 15, 2018 (Mar 15, 2018 03:08 PM)CrackIt™ Wrote: this is what comes up Copy paste the location on browser , it will show the hidden files. RE: i got some program starting a cpu miner on my comp - CrackIt™ - Mar 15, 2018 (Mar 15, 2018 03:15 PM)dåFu™ Wrote: Copy paste the location on browser , it will show the hidden files. thanks i just think you solved my problems RE: i got some program starting a cpu miner on my comp - Sigma - Mar 15, 2018 I'm Sigma, I'm one of the leaders of the Security Malware Removal Team and will be assisting you throughout this thread. Before we start just take a second to read through these few requests - these are to ensure we can help you quickly and safely:
You'll notice the logs are pretty big and you won't be able to post a reply containing it all. Please use ONLY either:
And paste the link to the logs in your reply. Post each log separately (each with a separate link). If you're a new member and can't paste links you can fool the forums system by removing the beginning of the link. e.g.
If I request you to post an image please use a service like https://imgur.com ====== Malwarebytes - Clean Mode
====== Download the right version of RogueKiller
====== Please read the guide AsSaSs@iN constructed here before continuing: https://hackforums.net/showthread.php?tid=5772641 Post the logs in THIS THREAD Let's get to it! |