Windows 10: How to remove Wise XMRig CPU Miner Trojan : sysupdate.exe xmrig cpu miner

We are using Azure VM and we are identified one service called XMRig taking more CPU process time


Os Details :


Microsoft Server 2012 R2 Edition


SQL Server Installed


When we open the details of the XMRig process, it shows the sysupdate.exe process running on my services. We deleted all the process sysupdate.exe details but again and again, it going the same high CPU usage.


We are identified the PowerShell script creating the files and running the sysupdate.exe process


How to overcome problems CPU high usage?


Malware Removal Report

AppData\Local\Temp\networkservice.exe -> Deleted

Size . . . . . . . : 2,945,024 bytes
Age . . . . . . . : 38.1 days 2019-12-30 09:09:33
Entropy . . . . . : 7.9
SHA-256 . . . . . : 75AC88C8819EFBD6BB63137B2D9BEE0BBDA1E4F9B80C170CB9E97142EEBB3694
Running processes : 2844
> Kaspersky . . . . : UDSangerousObject.Multi.Generic
> SurfRight . . . . : Mal/Generic-S
Fuzzy . . . . . . : 120.0

C:\Users\srv.sql\AppData\Local\Temp\sysguard.exe -> Deleted

Size . . . . . . . : 2,221,056 bytes
Age . . . . . . . : 38.1 days 2019-12-30 09:09:51
Entropy . . . . . : 7.9
SHA-256 . . . . . : 30D04249AB38E2FC443E4E0B80A544C4F754BB57A710B82F6EB1C08FE185B5C4
Running processes : 832
> Bitdefender . . . : Trojan.Agent.DYLH
> Kaspersky . . . . : Trojan-Downloader.Win64.Agent.rp
> SurfRight . . . . : Mal/Generic-S
Fuzzy . . . . . . : 120.0

AppData\Local\Temp\sysupdate.exe -> PendingDelete

Size . . . . . . . : 839,168 bytes
Age . . . . . . . : 0.0 days 2020-02-06 11:41:03
Entropy . . . . . : 7.9
SHA-256 . . . . . : DA07B536DD1CF9145582DE36D2E60A991F254D704A5C72486501A0B536B8947D
Product . . . . . : XMRig
Publisher . . . . : www.xmrig.com
Description . . . : XMRig miner
Version . . . . . : 5.0.1
LanguageID . . . . : 0
Running processes : 8704
> Bitdefender . . . : Gen:Variant.Application.Miner.2
> Kaspersky . . . . : not-a-virus:HEUR:RiskTool.Win32.Generic
> SurfRight . . . . : App/XMRigM-U
Fuzzy . . . . . . : 116.0
Network Ports 10.0.0.4:58502 47.101.30.124:13531


* Moved from Windows 8/Performance

:)

 

Monero XMR CPU miner

See/try this removal guide: Remove the CPU.exe Monero Miner

In case that guide doesn't work for you, I suggest to ask for free expert help: Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help - Virus, Trojan, Spyware, and Malware Removal Help

i try malwarebytes from Cpu

everything same

-- i want know Monero this

Danger on the device

 

Monero XMR CPU miner





how can i remove Monero XMR CPU miner high CPU i want help as soon as please

<Moved from Windows>

 

Monero XMR CPU miner

It's a trojan which you're having there.

The removal guide (Remove the CPU.exe Monero Miner) I linked explains in detail about this
trojan. The removal guide consists of various/multiple steps.

Please try to concentrate and read the self-help guide and follow it step-by-step.

In case, that you don't feel comfortable doing all that alone, I - again - suggest to ask for free expert help at

https://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

or

you can ask for perhaps not so free Microsoft help here: http://answerdesk.microsoftstore.com

or

you might want to do a clean install which is described in this wiki:
https://answers.microsoft.com/en-us/windows/wiki/windows_10-windows_install/clean-install-windows-10/1c426bdf-79b1-4d42-be93-17378d93e587