JSCoinMiner

AlecEiffel

Hi all! Happy new year!

Norton blocked JSCoinMiner Download 6 and Download 8 and advised no other action was needed. Have run a full Norton scan, the Power Eraser, and a Malwarebytes free version scan and all were clean.

Can you knowledgeable folk think of anything else or should these scans have picked up anything?

Incidentally over the last few days I'm getting a lot of err_network_changed errors in Chrome. These seem like a common issue and only seem to occur when I have cleaned my cookies etc and/or opened Chrome for the first time after a reboot. I assume it's unrelated but any thoughts?

forgotmyname

Lots of mining software triggers AV software.

True or False, depends on the source and what its actually doing in the background.
Been a few cases of reputable downloaded being modified to include a littl extra something. Check the origin of the original file and see if they have a checksum for it.

AlecEiffel

Thanks for the reply. I didn't initiate a download or want the software, seems to have been an attack from a compromised site. Norton says it blocked the attack.

Cheers.

bloss0m

Some sites and now using mining in background and not all of them are dodgy too. My advice is to have a noscscript pluging for your browser like firefox they prevent exploit that they use in java

Lorian

AlecEiffel wrote: »

Hi all! Happy new year!
Can you knowledgeable folk think of anything else or should these scans have picked up anything?

These are blocking real-time coin mining in you browser session and in any case these two unwanted activities don't leave any lasting infection.

This is a great article on the subject.

https://www.symantec.com/blogs/threat-intelligence/browser-mining-cryptocurrency

If you have a firewall on your router you could block coinhive.com there are a few others too.

AlecEiffel

Thanks for that, an interesting read.

So basically this isn't dangerous, and it doesn't exist beyond the browser session, even if Norton didn't catch it?

AndyPix

Nortan its self will be more detrimental to your machine