BogdanX904 Posted December 1, 2018 ID:1284175 Share Posted December 1, 2018 Hey. So, I have the free trial of Malwarebytes. Web protection is on. I knew about openload.co using bitcoin miners, and Malwarebytes blocked them. I added and exclusion for that site in Malwarebytes to watch a movie. It mines bitcoin, right? If I remove the exclusion of that site, will it still mine bitcoin? Or, if I keep the exclusion but I am not using the site at the moment, does it still mine bitcoin? I have an Acer Nitro 5 with an i5 8300 h, gtx 1050, HDD(if it matters) and 8 gb ram. I run Windows 10 pro. In Chrome, when I play surviv.io I have lag spikes. On other sites/.io games I don't have, so, is it because of the bitcoin miners? Link to post Share on other sites More sharing options...
BogdanX904 Posted December 2, 2018 Author ID:1284286 Share Posted December 2, 2018 Any help please? Link to post Share on other sites More sharing options...
nasdaq Posted December 2, 2018 ID:1284365 Share Posted December 2, 2018 Hello, Welcome to Malwarebytes. I'm nasdaq and will be helping you. If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed. === Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit) and save it to a folder on your computer's Desktop. Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. How to attach a file to your reply: In the Reply section in the bottom of the topic Click the "more reply Options" button. Attach the file. Select the "Choose a File" navigate to the location of the File.Click the file you wish to Attach.Click Attach this file.Click the Add reply button. === Please post the logs for my review. Wait for further instructions Link to post Share on other sites More sharing options...
BogdanX904 Posted December 7, 2018 Author ID:1285715 Share Posted December 7, 2018 I was asking, if I am not using the site at the moment is the bitcoin miner still active? Link to post Share on other sites More sharing options...
nasdaq Posted December 8, 2018 ID:1285777 Share Posted December 8, 2018 Hi, Probably, or it's waiting for you to do something. The only way to find out is to look at the logs from the Farbar program. Link to post Share on other sites More sharing options...
BogdanX904 Posted December 9, 2018 Author ID:1285862 Share Posted December 9, 2018 Sure, I just did it. Here they are. Addition.txt FRST.txt Link to post Share on other sites More sharing options...
nasdaq Posted December 9, 2018 ID:1285906 Share Posted December 9, 2018 Hi, Please download the attached Fixlist.txt file to the same folder where the Farbar tool is running from. The location is listed in the 3rd line of the FRST.txt log you have submitted. Run FRST and click Fix only once and wait. The tool will create a log (Fixlog.txt) please post it to your reply. === These two Chrome extension are not recommended. CHR Extension: (Coin-Hive Blocker) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccagdbjcbhmcdcbbknfebhhdbolnfimo [2018-11-30] CHR Extension: (Anti Miner - No 1 Coin Minerblock) - C:\Users\Joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibhpgkhoicjhklmbhdoeikeggbeejonj [2018-11-30] Google the string in bold and decide if you want to keep them. Post the Fixlog.txt and let me know of any issues. fixlist.txt Link to post Share on other sites More sharing options...
BogdanX904 Posted December 19, 2018 Author ID:1288123 Share Posted December 19, 2018 SFixlog.txtorry for this very late response. Here. Link to post Share on other sites More sharing options...
nasdaq Posted December 20, 2018 ID:1288289 Share Posted December 20, 2018 Any remaining issues? Link to post Share on other sites More sharing options...
BogdanX904 Posted December 24, 2018 Author ID:1288881 Share Posted December 24, 2018 Yes. Isn't it still mining bitcoin? how do I stop it???? Link to post Share on other sites More sharing options...
nasdaq Posted December 24, 2018 ID:1288911 Share Posted December 24, 2018 Hi, Get the latest version of MBAM and run it. Please download Malwarebytes Anti-Malware from here Right-click on the MBAM icon and select Run as administrator to run the tool. Click Yes to accept any security warnings that may appear. Once the MBAM dashboard opens, on the right detail pane click on the word "Current" under the Scan Status to update the tool database. On the left menu pane click the Settings tab, and then select the Protection tab on the top. Under the Scan Options, turn on the button Scan for rootkits and Scan within archives. Click the Scan tab on the right detail pane, select Threat Scan and click the Start Scan button Note: The scan may take some time to finish, so please be patient. If potential threats are detected, ensure to check mark all the listed items, and click the Quarantine Selected button. While still on the Scan tab, click the View Report button, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop. The log can also be viewed by clicking the log to select it, then clicking the View Report button. Please post the log for my review. Note: If asked to restart the computer, please do so immediately. === If the problem persists run the Farbar program again and post fresh FRST.TXT and Addition.txt logs for my review. Link to post Share on other sites More sharing options...
nasdaq Posted December 30, 2018 ID:1289715 Share Posted December 30, 2018 Are you still with me? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 5, 2019 Root Admin ID:1290875 Share Posted January 5, 2019 Due to the lack of feedback, this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts