Author Topic: jhProtominer.exe not detected or blocked by Avast  (Read 2861 times)

0 Members and 1 Guest are viewing this topic.

ezriderz

  • Guest
jhProtominer.exe not detected or blocked by Avast
« on: February 24, 2014, 08:43:15 PM »
I keep finding jhProtominer.exe running on my system sucking up all my cpu cycles.  I kill the program in the taskmanager/processes, then search my system and delete all instances of this exe file (always in appdata/roaming folder) and remove all references to the program in my registry.  Yet a few days later it is back again.  Coming from where, I don't know.

Avast should remove and/or block this pernicious cycle stealer.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: jhProtominer.exe not detected or blocked by Avast
« Reply #1 on: February 24, 2014, 08:45:24 PM »
Can you upload a copy of the file to Avast so that they can analyse it

Download OTL  to your Desktop
Secondary link
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.


  • Select All Users
  • Select LOP and Purity
  • Under the Custom Scan box paste this in
netsvcs
BASESERVICES
%SYSTEMDRIVE%\*.exe
c:\program files (x86)\Google\Desktop
c:\program files\Google\Desktop
dir "%systemdrive%\*" /S /A:L /C
/md5start
rpcss.dll
/md5stop
CREATERESTOREPOINT


  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Attach  both logs

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37700
Re: jhProtominer.exe not detected or blocked by Avast
« Reply #2 on: February 24, 2014, 09:42:29 PM »
if you still see it.... upload and test jhProtominer.exe at www.virustotal.com if tested before, click new scan
post link to scan result here