Quote from: vapourminer on Today at 12:18:05 PM

Quote from: atwd on Today at 09:14:50 AM

This morning two different users posted a 6.0 version of this miner.
I noticed both posts got deleted so I guess they were spammers.

Sadly I downloaed and launched that 6.0 version.

I didn't mine because I got an error saying there was a problem with my drivers, advising me to go back to the 5.5c version.

Now I deleted it but I'm worried I could have installed some kind of virus in my pc.

Does someone knows what was that supposed 6.0 version?

I know it's clearly a fake version, but what was supposed to do? Maybe just to mine for another wallet instead of mine?

I mostly need to know if my passwords and everything in my pc could be compromised, or if I'm fine by just deleting it.

By the way, windows didn't find any virus. That's weird considering that the official phoenixminer gets blocked by Chrome and by windows because they see it as a threat.

considering the amount of time and money used (as in bought/hacked accounts sometimes) posting these malicious versions i would take no chances and change all passwords and format/reinstall windows.

the fact windows AV didnt pickup anything just means it hasnt seen it before, it can still steal stuff, install keyloggers, rootkits etc.

i have dedicated mining rigs, so if one gets compromised there is nothing of value on it and i just reimage the disk back to a known good image. or just format/reinstall from scratch.

tldr do not trust that machine anymore.

I checked it with malwarebytes and it found a malware that it's supposed to mine for himself instead of me.

It didn't find any Spyware or anything else. Maybe these scammers are not that good at coding and they just released a version of the miner that will mine at their wallet and nothing else.

Anyway it's my gaming pc so I don't have any document on it, just games and mining.

atwd

Posts

Merits