hey guys i got hit with a drive by download norton says it blocked it?

Tonyb · 15 Dec 2017

HI all so i got hit with a drive bye d-load from Opera web browser i was searching forums, and got hit norton says it blocked it and it was in quarantine i purged the quarantine of it but i was wondering if i need to worry about anything else if i need to run other scans or call it a day seems people still put nasty little drive buy crap on the internet.

This is what it blocked and quarantined seems it was only in opera browser cache but here is the link to what it was about on Norton site, PUA.JScoinminer | Symantec

Tonyb · 15 Dec 2017

i ran there tool they have on that page it did not find anything so i suppose i'm in the clear, if anyone has other sugestions on a tool to run to make sure let me know thanks much all :) .

Superfly · 15 Dec 2017

From the looks of it, it seems harmless... cryptocurrency mining is the blockchain methodology Bitcoin and others use AFAIK.

Tonyb · 16 Dec 2017

ok thanks much :) i did run some other scans did not come up with anything so in the clear .

simrick · 16 Dec 2017

Might want to put some miner blocker extensions in your browsers to prevent this in the future.

Bree · 16 Dec 2017

Malwarebytes (full) blocks such things, apparently. This is a thread on a similar bitcoin miner called coinhive.
When I Open Site my PC freeze!

According to Malwarebytes...

We do not claim that CoinHive is malicious, or even necessarily a bad idea.... The reason we block CoinHive is because there are site owners who do not ask for their users’ permission to start running CPU-gorging applications on their systems....

Cliff S · 16 Dec 2017

Add these to your Hosts file( C:\Windows\System32\drivers\etc )

# Anti-WebMiner Start 1.3 43018
0.0.0.0 2giga.link
0.0.0.0 azvjudwr.info
0.0.0.0 cnhv.co
0.0.0.0 coinhive.com
0.0.0.0 coin-hive.com
0.0.0.0 crypto-loot.com
0.0.0.0 edgeno.de
0.0.0.0 gus.host
0.0.0.0 jroqvbvw.info
0.0.0.0 jsecoin.com
0.0.0.0 jyhfuqoh.info
0.0.0.0 kdowqlpt.info
0.0.0.0 listat.biz
0.0.0.0 lmodr.biz
0.0.0.0 mataharirama.xyz
0.0.0.0 minecrunch.co
0.0.0.0 minemytraffic.com
0.0.0.0 miner.pr0gramm.com
0.0.0.0 ppoi.org
0.0.0.0 reasedoper.pw
0.0.0.0 xbasfbno.info
# Anti-WebMiner End

Cliff S · 16 Dec 2017

Or get this: Releases Â· greatis/Anti-WebMiner Â· GitHub

Wiley Coyote · 16 Dec 2017

Thanks for the list @Cliff S. I've updated my file now.

MBAM did catch some CoinHive activity on me a couple of weeks back.

Cliff S · 16 Dec 2017

CWGilley said:

Thanks for the list @Cliff S. I've updated my file now.

MBAM did catch some CoinHive activity on me a couple of weeks back.

You're welcome:)
I started using that as soon as I found out about it at Major geeks.
I don't overclock my PC so strangers can make money without asking permission first.

Personally I would have no problem if sites I use or go to, asked that you open a tab to their mining specific page, and only used a little bit of the systems resources(not be greedy) when you are not using the PC and it's turned on. But drive by doesn't cut it.