[CrackIt™]

can any one help me remove this? its really annoying and keeps overheating my comp

[FawkCidy]

Well if its like mine, just leave your task mng open 24/7 and it won't be a prob.

[Smileツ]

Well if its like mine, just leave your task mng open 24/7 and it won't be a prob.

Nice solution.
OP try to restore your system.

[CrackIt™]

Nice solution.
OP try to restore your system.

the sad part is i just did a few weeks ago :/ dont wanna have to reupdate very thing again knew i should of made that restore point

[Smileツ]

the sad part is i just did a few weeks ago :/ dont wanna have to reupdate very thing again knew i should of made that restore point

Scan your pc with some antivirus then , search at appdata or temp for the miner and scan it on virustotal. It could be anywhere but if you find it on task manager you can find the location easy.
Boot you pc on safe mode , it would be easy to upload it for analyze and get the detections.

[CrackIt™]

Scan your pc with some antivirus then , search at appdata or temp for the miner and scan it on virustotal. It could be anywhere but if you find it on task manager you can find the location easy.
Boot you pc on safe mode , it would be easy to upload it for analyze and get the detections.

when i go to location file it takes me to a file with no .exe just .dll files i deleted it about 5 times and its not going away just keeps coming back i scanned with hitman pro and malwarebytes and now roguekiller

[Smileツ]

when i go to location file it takes me to a file with no .exe just .dll files i deleted it about 5 times and its not going away just keeps coming back i scanned with hitman pro and malwarebytes and now roguekiller

Try to use process hacker to check the process tree , the .exe should be somewhere.

[CrackIt™]

this is what comes up
(pics)
https://prnt.sc/irs6v9
https://prnt.sc/irs6nq
http://prntscr.com/irs8ga

[Smileツ]

this is what comes up
(pics)
https://prnt.sc/irs6v9
https://prnt.sc/irs6nq
http://prntscr.com/irs8ga

Copy paste the location on browser , it will show the hidden files.

[CrackIt™]

Copy paste the location on browser , it will show the hidden files.

thanks i just think you solved my problems

[Sigma]

I'm Sigma, I'm one of the leaders of the Security Malware Removal Team and will be assisting you throughout this thread. Before we start just take a second to read through these few requests - these are to ensure we can help you quickly and safely:

• Only use this thread for help. Please don't create multiple threads, accounts, PM me or post on other forums - if you do just let me know.
  


• Only follow my guidance.
  


• Don't run tools I haven't asked you to run. If you do just let me know so I can take that into consideration when viewing logs.
  


• DO NOT install any other software while we are attempting to clean your machine. It can get quite confusing especially if you are downloading questionable tools.
  


• Please be prompt in responding. I'll do my best to do so. If >48hrs has passed, please either PM me or ask "Are you there, I still need help" in this thread.
  


• Please stick with me until I give you the 'All Clean'. I'll help you cleanup quickly and offer some tips to make you more secure and get your system running faster.
  


• Your malware related tools will be removed. I don't support the tools often distributed on these forums. Scanners will generally remove these - I take no responsibility for any malicious software that is lost.
  


• I (nor does the forum) support pirated software.
  


• If you don't understand something, don't be afraid to ask - I'm here to help. 😉
  

You'll notice the logs are pretty big and you won't be able to post a reply containing it all. Please use ONLY either:

• https://hastebin.com - here you can upload the .txt file directly. <- I prefer this.
  


• http://pasted.co/ - here you can set a password if you wish to protect your data. Just PM me the password.
  

And paste the link to the logs in your reply. Post each log separately (each with a separate link). If you're a new member and can't paste links you can fool the forums system by removing the beginning of the link.

e.g.

• If you can't post this: https://hastebin.com/raw/epaduvuyic
  


• Post: I used hastebin, here is the ending /raw/epaduvuyic
  

If I request you to post an image please use a service like https://imgur.com

======

Malwarebytes - Clean Mode

• Download and install the free version of Malwarebytes
  Note: If you have Malwarebytes already installed, you don't need to install it again. Simply start from the next bullet point
  


• Once Malwarebytes is installed, launch it and let it update his database. You might have to click on the little arrow by Scan Status in the middle right pane for it to do so
  


• Once the database update is complete, click on the Scan tab, then select the Threat Scan button and click on Start Scan
  


• Let the scan run, the time required to complete the scan depends of your system and computer specs
  


• Once the scan is complete, make sure that the first checkbox at the top is checked (which will automatically check every detected item), then click on the Quarantine Selected button
  • If it asks you to restart your computer to complete the removal, do so
    
  
  
  
  


• Click on Export Summary after the deletion (in the bottom-left corner) and select Copy to Clipboard. Paste the content in your next reply
  

======

Download the right version of RogueKiller

• 
  for your Windows version (32 or 64-bit)


• Once done, move the executable file to your Desktop, right-click on it and select Run as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users)
  


• Click on the Start Scan button in the right panel, which will bring you to another tab, and click on it again (this time it'll be in the bottom right corner)
  


• Wait for the scan to complete
  


• On completion, the results will be displayed. Click on the Open Report button in the bottom left corner, followed by the Open TXT button (also in the bottom left corner)
  


• This will open the report in Notepad. Copy/paste its content in your next reply
  

======

Please read the guide AsSaSs@iN constructed here before continuing: https://hackforums.net/showthread.php?tid=5772641

Post the logs in THIS THREAD


Let's get to it!