I do hope that your friend who bought the miners reported the issue with them to the seller and eBay (though the seller may have been who intentionally did the infection).
Actually he tried to get his money back because he bought 50 hashing cards and not a single one worked as well as 10 controllers out of which only like 2 units were working and the one that he gave me was the infected one. And no it wasnt my friend, if youre wondering, he I clueless of these kind of things and just has like 15 s9s running.
But he wasnt able to check the cards for like 3 months and when he finally did it was too late to ask EBay for any help. $1200 thrown away! He is still pissed and he wanted to do something to take this guy off the EBay.
Its some guy from Canada, he sells them by 10 units now before he was selling by 50. You think EBay would really listen if he was to report this seller and actually do something? I doubt it to tell you the truth.
The sellers name is mrinjenari. Stay away from him!