Quote from: ISAWHIM on April 22, 2013, 10:03:29 AM

Quote from: tahar on April 22, 2013, 12:30:03 AM

i'm sure i got it from the Miner software i downloaded as there is no other avenue it could have came from.

Um, It could have come from an AD on any website, related to bitcoins, or bitcoin-mining... Or any other legitimate website.

But I digress...

Yes, everyone should be careful on the internet. Browsing is more dangerous than "installing" programs, because you do that more, and "assume", it is safer. (Especially if you use a virus scanner, and non MSIE browser, thus, assuming even more, and being more vulnerable with multiple ways to get infected now.)

Every legitimate program you add, with false security promises, and open ports... is simply another way for a virus to get inside. (Look at a port monitor, and you will see you have about three dozen open ports, from about 12 programs, at any one time.)

But it MUST be the bitcoin programs, because that is what you "knowingly" installed... (Um, ironic that you just confessed to doing something that you, in hind-sight, know leads to infections. Tongue

)

Good luck with your scans... Make sure you change the "default" settings of your scanner to... "Scan all files", and "Include common files", and "deflate all zipped files", and "Do not exclude ____ type of file". The "default" settings, even for a "Full scan" does not scan all files. It only focuses on the most potential files, and often skips the majority of actual infected files, because they hide as somevirus.txt, somevirus.jpg, somevirus.mp3, etc...

Helps if you do a boot-scan too, without being online, where more viruses can just drop in, after the dropper has detected you "just scanned this folder", dropping a backup-dropper. That also allows system files to be scanned, before they start. Since viruses usually start there. (They crash a system file, infect it quickly, then the file restarts after it sees it has crashed, and now it infects every other system along the way.)

Okay this i very helpful information and i thank you for it, and this has led me to think that i may stand corrected.

I am thinking that a rogue coin related website, as i have browsed an awful lot recently, may be just as likely (or more likely?) to have caused the virus. Thank you for pointing out.