Jump to content
Jockap

Bitcoinminer activity 7

Recommended Posts

One added point.   ( in addition to the last reply )

I would really urge you to do a full scan of this system using Norton Security

Lets see just where it is finding what they claim is a rogue coinminer.   If Norton finds it, It is the one that should be getting rid of it too.

 

Share this post


Link to post
Share on other sites

Hi, I found VBoxHeadless but the map ORACLE did not show up between the other maps in program files. But by searching the name I found the file.  link:https://www.virustotal.com/gui/file/481384f7b7bf4a38450467c783e3062c28fada66e7a1cebf35d7e7d66eeb9cf4/detection. Nothing found. I still think it is comming from VBOXHEADLESS because from every attack that happened Norton says it is that the attack was from VBOXHEADLESS.EXE. Should I delete it? Norton couldn't find anything. VBoxHeadless is kinda a virtual maschine but I didn't download it.

 

Share this post


Link to post
Share on other sites

Hi.

If you have no current need to Orable VBOX then uninstall it.

Share this post


Link to post
Share on other sites

Thank you, I think it was that program all the time but I couldn't find it until today. (I deleted it)

Share this post


Link to post
Share on other sites

So, then, there is no more of those message incidents from Norton ?

From other caes I have helped on that had had these "Norton" warnings about "bitcoinminer activity"   they have been from what they  ( Norton) consider "potential unwanted apps"

 

Best practices & malware prevention:

Free games & free programs are like "candy". We do not accept them from "strangers".

 

Follow best practices when browsing the Internet, especially on opening links coming from untrusted sources.
First rule of internet safety: slow down & think before you "click".


Never click links without first hovering your mouse over the link and seeing if it is going to an odd address ( one that does not fit or is odd looking or has typos).

Never open attachments that come with unexpected ( out of the blue ) email no matter how enticing.
Never open attachments from the email itself. Do not double click in the email. Always Save first and then scan with antivirus program.
 

Pay close attention when installing 3rd-party programs. It is important that you pay attention to the license agreements and installation screens when installing anything off of the Internet. If an installation screen offers you Custom or Advanced installation options, it is a good idea to select these as they will typically disclose what other 3rd party software will also be installed.
Take great care in every stage of the process and every offer screen, and make sure you know what it is you're agreeing to before you click "Next".

Use a Standard user account rather than an administrator-rights account when "surfing" the web.
See more info on Corrine's SecurityGarden Blog http://securitygarden.blogspot.com/p/blog-page_7.html
Dont remove your current login. Just use the new Standard-user-level one for everyday use while on the internet.

 
Do a Windows Update.

Make certain that Automatic Updates is enabled.
https://support.microsoft.com/en-us/help/12373/windows-update-faq


Keep your system and programs up to date. Several programs release security updates on a regular basis to patch vulnerabilities. Keeping your software patched up prevents attackers from being able to exploit them to drop malware.

For other added tips, read "10 easy ways to prevent malware infection"

 

Let me know whether you nee other help at this point.

 

Share this post


Link to post
Share on other sites

I got no more notifications from Norton again.That vboxheadless was from an unwanted app for sure and I am always scanning downloaded thing with virustotal or if to big with malwarebytes. I am going to follow those thing from now. Thanks

Share this post


Link to post
Share on other sites

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.