We have a Server 2008 R2 SP1 running. We have an RDC connection port. We were told we have a lot of activity by our service provider, and the internet was extremely slow. We saw that two processes were running: System_Minderd.exe svchostl.exe We also saw that they were running from the following folders: C:\Windows\ltc-miner2 C:\Windows\tanechka We stopped both processes from running, as well as renaming those two folders. As soon as we stop the processes, internet looks fine (no slowdown). We have Changed the Windows password, as well as the public port for RDC. We have run MalwareBytes (with the update) with no luck. After a few hours (or after a day or two), the processes run again and the folders are created. We have recently installed Symnatec Endpoint Protection Small Business Edition v12. I've been looking around endlessly for some help online but I haven't found anything. Of course, DDS does not run on this system. Any help would be appreciated!