Trojan.BitcoinMiner

[iratam]

Everyday Malwarebytes tell me it removed a virus as mentioned in the Topic Title.

It's from a different folder than C:\windows\ where it should be and it's in

C:\Users\........\temp\svchost.exe

* see picture and text file for more info.

The picture is to show the Properties

and the text is to show the Command Line

 

The problem is that it is recurrent. It finds it everyday 

Put it in quarantine but does not remove it !

 

I also used Avira  (paid) to no avail - it doesn't even see it.

 

Even SpyBotSD don't see it.

 

How do I get rid of it permanently ???

 

1.txt

[MrCharlie]

Welcome to the forum, please start HERE

Post back the 2 logs here.....DDS.txt and Attach.txt

(please don't put logs in code or quotes and use the default font)

General P2P/Piracy Warning:

1. If you're using Peer 2 Peer software such uTorrent, BitTorrent or similar you must either fully uninstall it or completely disable it from running while being assisted here.

Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

2. If you have illegal/cracked software, cracks, keygens, custom (Adobe) host file, etc. on the system, please remove or uninstall them now and read the policy on Piracy.

Failure to remove such software will result in your topic being closed and no further assistance being provided.

<====><====><====><====><====><====><====><====>

Next................

Please download and run RogueKiller 32 bit to your desktop.

RogueKiller<---use this one for 64 bit systems

Which system am I using?

Quit all running programs.

For Windows XP, double-click to start.

For Vista or Windows 7-8, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.

Click Scan to scan the system.

When the scan completes > Close out the program > Don't Fix anything!

Don't run any other options, they're not all bad!!!!!!!

Post back the report which should be located on your desktop.

(please don't put logs in code or quotes and use the default font)

MrC

Note:

Please read all of my instructions completely including these.

Make sure system restore is turned on and running

Make sure you're subscribed to this topic: Click on the Follow This Topic Button (at the top right of this page), make sure that the Receive notification box is checked and that it is set to Instantly

Removing malware can be unpredictable...unlikely but things can go very wrong! Backup any files that cannot be replaced. You can copy them to a CD/DVD, external drive or a pen drive

<+>Please don't run any other scans, download, install or uninstall any programs while I'm working with you.

<+>The removal of malware isn't instantaneous, please be patient.

<+>When we are done, I'll give to instructions on how to cleanup all the tools and logs

<+>Please stick with me until I give you the "all clear" and Please don't waste my time by leaving before that.

------->Your topic will be closed if you haven't replied within 3 days!<--------

(If I don't respond within 24 hours, please send me a PM)

[iratam]

Ok ! I appreciate that you do this voluntary but what you are asking is out of the question. Close everything ! 

I am using Utorrent actively and it's not for Piracy. But I do have some questionable material because I opte

to do so by buying the original and because it is on Steam and because if they go under I will have a whole

lot of game that I will not be able to play. So ! Yes ! I do have cracked and / or Pirated games.......................

 

BUT 

 

I have paid good money to buy the program and I was under the impression that I was buying it for the sole

purpose of removing VIRUSES ! If it is impossible to do then never mind - And do not expect me to recom-

mend your services. On the contrary.........

 

1 satisfied customer talk to at least 1 or 2 other people of the good service...

1 unsatisfied customer talk to 20 people on how bad the customer service was...

 

Close the problem ! I'll work it out by myself eventualy 

[MrCharlie]

I have paid good money to buy the program and I was under the impression that I was buying it for the sole
purpose of removing VIRUSES ! If it is impossible to do then never mind - And do not expect me to recom-
mend your services. On the contrary.........

I have nothing to do with Malwarebytes other than......Volunteering my free time on the forum to help you.
I have to go by the rules just like you do.


1 satisfied customer talk to at least 1 or 2 other people of the good service...
1 unsatisfied customer talk to 20 people on how bad the customer service was...

Close the problem ! I'll work it out by myself eventualy

If you have a problem with the rules I suggest you contact AdvancedSetup, the Forum Administrator:

https://forums.malwarebytes.org/index.php?showuser=2065

 

MrC

[AdvancedSetup]

Piracy is illegal regardless of the reason and we simply do not wish to be involved in any such activity.  There are about a dozen well known and respected sites that assist in malware removal using trained Experts and none of them support assisting users that are pirating software. 

 

I will go ahead and close your topic per your request.

 

Thank you