Windows 10: xmrig.moneroocean.stream Miner trojan being run via cmd.exe on my computer

Discus and support xmrig.moneroocean.stream Miner trojan being run via cmd.exe on my computer in Windows 10 Software and Apps to solve the problem; A few days ago, I took a risk and downloaded from a shady website again. Usually I'm able to clear out the malware with Malwarebytes, but recently I... Discussion in 'Windows 10 Software and Apps' started by Dan Arson, Jan 5, 2024.

  1. DAN ARSON
    Dan Arson Win User

    xmrig.moneroocean.stream Miner trojan being run via cmd.exe on my computer


    A few days ago, I took a risk and downloaded from a shady website again. Usually I'm able to clear out the malware with Malwarebytes, but recently I got constant popups from the antimalware program.The title pretty much explains it - something hijacked my cmd.exe program to try and connect to xmrig.moneroocean.stream. Obviously, this was already a red flag, and I observed that my CPU usage was 100% as well, which made it obvious even more. I did try to get rid of it, with a full scan, but MB found nothing.I'm now turning to this forum to ask for help regarding this, so if someone could help me

    :)
     
    Dan Arson, Jan 5, 2024
    #1
  2. RAJPARAYANE
    RajParayane Win User

    cmd pops up at startup with "unable to open xmrig.json"

    Whenever I start my Laptop It starts cmd that says :

    unable to open "C:\Users\username\AppData\Roaming\Dll\config.json".

    unable to open "C:\Users\username\.xmrig.json".

    unable to open "C:\Users\username\.config\xmrig.json".

    Now I came to know that 'xmrig' is some sort of miner malware

    I tried using task manager and task scheduler to find and stop the 'xmrig' but I didnt find anything

    I also tried looking inside the AppData\Roaming folder but didn't find anything

    Please help me.
     
    RajParayane, Jan 5, 2024
    #2
  3. RAMESH SRINIVASAN
    Ramesh Srinivasan Win User
    Cmd keep poping up

    The system is infected by a miner. Especially check the last entry in screenshot #2.

    • Download Farbar Recovery Scan Tool (FRST64.exe)
    • Rename FRST64.exe to EnglishFRST64.exe.
    • Run EnglishFRST64.exe and click "Scan".
    • Upload the two logs, FRST.txt and Addition.txt, to your OneDrive and share the link here.
     
    Ramesh Srinivasan, Jan 5, 2024
    #3
  4. ADVELISENT
    Advelisent Win User

    xmrig.moneroocean.stream Miner trojan being run via cmd.exe on my computer

    Possible Bitcoin Miner

    Hello, for a while now I have had what I think a bitcoin miner on my PC but now I am deciding to do something about it, well, at least I tried to. Basically, I recently installed Malwarebytes to see if it would pick up this "miner." This "miner" would use
    Notepad and it would use about 20% of my CPU (that's why I assumed it was a bitcoin miner.) Malwarebytes has picked up nothing in the virus scan. I removed Notepad from my PC as I didn't use it, but now I keep getting notifications from Malwarebytes of it
    blocking this website due to a "Trojan": pool-nyc.supportxmr.com

    Malwarebytes also says the "Trojan" is coming from explorer.exe, but when I scan with this anti-virus it picks up nothing.


    xmrig.moneroocean.stream Miner trojan being run via cmd.exe on my computer 8fcbbfc6-27c2-4f72-b6b1-3a00b25c2e51?upload=true.png
     
    Advelisent, Jan 5, 2024
    #4
Thema:

xmrig.moneroocean.stream Miner trojan being run via cmd.exe on my computer

Loading...

  1. xmrig.moneroocean.stream Miner trojan being run via cmd.exe on my computer - Similar Threads - xmrig moneroocean stream

  2. xmrig.moneroocean.stream Miner trojan being run via cmd.exe on my computer

    in Windows 10 Gaming
    xmrig.moneroocean.stream Miner trojan being run via cmd.exe on my computer: A few days ago, I took a risk and downloaded from a shady website again. Usually I'm able to clear out the malware with Malwarebytes, but recently I got constant popups from the antimalware program.The title pretty much explains it - something hijacked my cmd.exe program to...

  3. xmrig.moneroocean.stream Miner trojan being run via cmd.exe on my computer

    in AntiVirus, Firewalls and System Security
    xmrig.moneroocean.stream Miner trojan being run via cmd.exe on my computer: A few days ago, I took a risk and downloaded from a shady website again. Usually I'm able to clear out the malware with Malwarebytes, but recently I got constant popups from the antimalware program.The title pretty much explains it - something hijacked my cmd.exe program to...

  4. What is XMRig?

    in AntiVirus, Firewalls and System Security
    What is XMRig?: Well, according to their website, it's a crypto miner. It's been on my PC for about 24 days now, only showing twice in my task manager.For safety reasons, does anybody know the programs that install this on your PC? I saw it once on my Task Manager taking 50% of my CPU and...

  5. SIHOST64.exe Mining Trojan

    in AntiVirus, Firewalls and System Security
    SIHOST64.exe Mining Trojan: Hi. I recently found a virus in my computer, sihost64 and sihost32 running on the background. I dont know how to remove it. Please help me, especially @_AW_ who was helped people with the same problem.Here i attached my...

  6. cannot run an exe file in CMD administrator

    in Windows 10 Software and Apps
    cannot run an exe file in CMD administrator: From exe file property ===> check: Run this program as an administrator open cmd: run as adminitrator type cd ==> enter C:\Users\MYNAME\Downloads\Programs\Apps\Viber Setup ==> Enter ===> 'C:\Users\MYNAME' is not recognized as an internal or external command, operable...

  7. cannot run an exe file in CMD asministrator

    in Windows 10 Software and Apps
    cannot run an exe file in CMD asministrator: From exe file property ===> check: Run this program as an administrator open cmd: run as adminitrator type cd ==> enter C:\Users\MYNAME\Downloads\Programs\Apps\Viber Setup ==> Enter ===> 'C:\Users\MYNAME' is not recognized as an internal or external command, operable...

  8. How to remove Wise XMRig CPU Miner Trojan : sysupdate.exe xmrig cpu miner

    in AntiVirus, Firewalls and System Security
    How to remove Wise XMRig CPU Miner Trojan : sysupdate.exe xmrig cpu miner: We are using Azure VM and we are identified one service called XMRig taking more CPU process time Os Details : Microsoft Server 2012 R2 Edition SQL Server Installed When we open the details of the XMRig process, it shows the sysupdate.exe process running on my...

  9. Cannot run .exe files, cmd (admin)

    in Windows 10 BSOD Crashes and Debugging
    Cannot run .exe files, cmd (admin): Hi! I tried to install a program to recover some lost pictures from an android phone. Later on some error popped up basically saying I couldn’t install the program. I’ve since then deleted the installer exe file. For some reason nothing was working so i force shutdown my...

  10. Registry is not starting from main .exe, RUN and in cmd

    in Windows 10 Support
    Registry is not starting from main .exe, RUN and in cmd: i have no idea what's making it not pop up im trying all the ways to get it to open, i tried: * regedit in run(win+r) * registry.exe in cmd with admin rights * clicking on the main .exe located in the windows folder 18138