malwarebytes picked it up as a trojan:
(Trojan.BitcoinMiner) -> Quarantined and deleted successfully.
so much for rep.