Windows 10: Protecting yourself from In-Browser Miners Solved

Page 1 of 16 12311 ... LastLast
  1. Cliff S's Avatar
    Posts : 21,213
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
       18 Feb 2018 #1

    Protecting yourself from In-Browser Miners


    Miners are becoming an epidemic and in-browsing mining is only going to get worse. Therefore, it is important that all users protect themselves by installing antivirus software that detects when a browser connects to known mining services such as CoinHive.

    Unfortunately, new services keep popping up and it has become a game of whack-a-mole for the security industry. Therefore, your installed software may not detect the URL or scripts associated with a new in-browser miner.

    To add further protection, you can use an adblocker with Chrome, which will block in-browser mining scripts. For those looking for a more granular approach, you can use the CoinBlockerLists site to download lists of IP addresses and domains affiliated with in-browser mining.
    Read the whole article here: Using the Chrome Task Manager to Find In-Browser Miners


    Tip   Tip
    Click image for larger version. 

Name:	CoinBL_Logo.png 
Views:	131 
Size:	329.2 KB 
ID:	192719

    The list you want to select at CoinBlockerLists site is:
    Hosts| This list contains all browser mining domains - A hostslist to prevent browser mining only
    Link: https://zerodot1.gitlab.io/CoinBlock.../hosts_browser


    information   Information
    To add to hosts file you need to:


    1. First open Notepad as an administrator.
    2. Then select File, select open, and go to C:\Windows\System32\drivers\etc (or copy & paste this in the address bar).
    3. At the bottom of Notepad change TextFiles(.txt) to All Files.
    4. Then select Hosts file(not hosts calendar).
    5. Then Click the Open button.
    6. On the page with the Hosts file select all and copy & Paste it into your Hosts file at the bottom.
    7. Select File & Save.
    8. Close Notepad, no restart necessary, it starts protecting you and your browser right away.

    Click image for larger version. 

Name:	Image 001.png 
Views:	9 
Size:	98.7 KB 
ID:	177600

    Your Hosts file should look something like this(it is much longer of course):
    Click image for larger version. 

Name:	Image 002.png 
Views:	11 
Size:	102.9 KB 
ID:	177603


    You can also download this shortcut I created that runs as admin to quickly open and edit your hosts file:
    Edit hosts file.zip
    Just download, right click, open properties, select unblock, unzip it, place it where you want, and click it.

    Last edited by Cliff S; 18 Jun 2018 at 08:38.
      My ComputersSystem Spec

  2. AndreTen's Avatar
    Posts : 14,158
    Windows 10 (Pro and Insider Pro)
       18 Feb 2018 #2

    Thanks for pointing this out Cliff S. My wife was victim of one coin miner. And it wasn't restricted on the site viewing, but started with browser.


    Special extensions that prevents coin mining are available for almost all of the browsers (Chrome, FF) out there. Also usual blocking extensions can be updated with coin mining lists like you mentioned for hosts file.

    This is part of the list, if you go to FF extensions site and type coin in search:
    Search results

    No Coin

    Stop coin miners on the web!
    Rated 4.4 out of 5
    Keraf
    70,110 users
    NoMiner - Block Coin Miners

    Easily stop coin miners from using your computer resources.
    Rated 3.8 out of 5
    Emmy
    26,366 users
    CoinBlock

    With the rising popularity of coinminers in js form, this extension attempts to block those hosted on coin-hive, and cryptoloot. A multiple entry block list is planned.
    Rated 3.9 out of 5
    Bechsen
    4,381 users
    Coin Mining Blocker

    Block JavaScript coin mining scripts at network level
    No ratings
    RayLo
    513 users
    BitCoin Generator

    BitCoin Generator is a Bitcoin generating tool , developed by CrazzyNet.Com or CrazzyNet LLC . Generate free mBTC without hard work .
    No ratings
    CrazzyNet LLC
    81 users
      My ComputersSystem Spec

  3. Kari's Avatar
    Posts : 14,796
    Windows 10 Pro
       18 Feb 2018 #3

    Thanks for sharing, Cliff. Important read.
      My ComputerSystem Spec

  4. Cliff S's Avatar
    Posts : 21,213
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
    Thread Starter
       18 Feb 2018 #4

    I have always prefered to use the hosts file, as addons also track you(they need to, so they can function properly).

    But I can also surgically select what will be blocked and what not(just malware, Facebook, and now coinhive.
    Last edited by Cliff S; 26 Mar 2018 at 21:44.
      My ComputersSystem Spec

  5. Cliff S's Avatar
    Posts : 21,213
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
    Thread Starter
       18 Feb 2018 #5

    AndreTen said: View Post
    Thanks for pointing this out Cliff S. My wife was victim of one coin miner. And it wasn't restricted on the site viewing, but started with browser.


    Special extensions that prevents coin mining are available for almost all of the browsers (Chrome, FF) out there. Also usual blocking extensions can be updated with coin mining lists like you mentioned for hosts file.

    This is part of the list, if you go to FF extensions site and type coin in search:
    Kari said: View Post
    Thanks for sharing, Cliff. Important read.
    You are both welcome.
      My ComputersSystem Spec

  6. Cliff S's Avatar
    Posts : 21,213
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
    Thread Starter
       18 Feb 2018 #6

    I just added a shortcut, to download, in information block above, to quickly open hosts in notepad as admin, to edit the hosts file:)
      My ComputersSystem Spec

  7. Cliff S's Avatar
    Posts : 21,213
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
    Thread Starter
       18 Feb 2018 #7

    Further information:
    Malware can redirect Web addresses on your computer by altering your hosts file. This is referred to as the Host File Hijack.
    To prevent Host file hijacks, you may navigate to it, right-click on it, select Properties and make it a Read-only file. This will lock down your Hosts file and prevent anyone or any malware from writing to it.
    http://www.thewindowsclub.com/hosts-file-in-windows

    Click image for larger version. 

Name:	Image 003.png 
Views:	4 
Size:	31.5 KB 
ID:	177617
      My ComputersSystem Spec

  8.    18 Feb 2018 #8

    Click image for larger version. 

Name:	Reports.jpg 
Views:	8 
Size:	49.8 KB 
ID:	177618
    Added to HOSTS. However still get the problem in the screenshot. AV blocks the script but additionally if using Firefox Quantum) with NoScript Security Suite the script is also blocked.
      My ComputerSystem Spec

  9. Cliff S's Avatar
    Posts : 21,213
    Win10 Pro, Win10 Pro N, Win10 Home, Win10 Pro Insider Fast Ring, Windows 8.1 Pro, Ubuntu
    Thread Starter
       19 Feb 2018 #9

    Callender said: View Post
    Click image for larger version. 

Name:	Reports.jpg 
Views:	8 
Size:	49.8 KB 
ID:	177618
    Added to HOSTS. However still get the problem in the screenshot. AV blocks the script but additionally if using Firefox Quantum) with NoScript Security Suite the script is also blocked.
    The script is being blocked from the add on, but not from hosts file.

    To understand what the hosts file is/does(very simplified): The Hosts File and what it can do for you
      My ComputersSystem Spec

  10. TairikuOkami's Avatar
    Posts : 3,329
    10.5 Home 1803 x64
       19 Feb 2018 #10

    Poper Blocker is very effective too, it blocks hidden popups/overlays used by coinminers.
      My ComputerSystem Spec


 
Page 1 of 16 12311 ... LastLast

Related Threads
Working as an I.T. Assistant for a public business my boss wants me to start password protecting the internet on all staff computers. Recently, somebody in the public was able to access questionable material on my computer, due to it being located...
Source: Google Online Security Blog: Protecting users from repeatedly dangerous sites
Hi, a quick curious question: I have two partitioned drives in my PC (not my C drive). If I removed these hard drives from my PC and reconnect them to another PC (a rebuild), will my partitions be lost on reconnection of the hard drives or will...
Source: Protecting Microsoft Edge against binary injection | Microsoft Edge Dev Blog
Sr. Citizen On Protecting Against Crypto, etc. On New PC ? in AntiVirus, Firewalls and System Security
Hello, Will be getting new desktop PC with W10 in a few days. Sr. Citizen now, and not ver sharp with PC's anymore, frankly. My old PC with W7 was clobbered by that CryptoLocker and I think it was called CBT Locker or something similar...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 09:15.
Find Us