HP Pavilion pc desktop
Windows 10 OS (up to date)
Chrome browser(up to date)
Hi. I was wondering if you could help me, I just recently started getting pop up alerts from my Avast saying 'a threat has been detected -- We've safely aborted connection on local.avast.com because it was infected with JS.Cryptonight [Troj]'. It says the file path is "c:\Program Files(x86)\Google\Chrome\Application\chrome.exe"
It prompts me to run a scan but says i am clean. This message has been a constant thing since yesterday. i have been getting constant messages whenever i am online, along with a whole different pop up from Malwarebytes, blocking a website called "ws028.coinhive.com" . each time this comes up, contains different ip and port numbers. This is constant while on any website.. i am unable to go to anything, or read or watch any video/netflix. It plays but the pop ups are intrusive.
I ran some scans and didnt find any issues. Cant find anythink in the add/remove that look strange or that i dont recognize.
The last 2 were a suggestion when i searched online how to remove 'coinhive' malware.
so far i ran window updates, reset chrome, tried adding these items to white list...i dont know what else to do. I just had windows 10 installed on this pc about 6 months ago, not sure if i should set it back to that or what...
Thank you in advance for any assistance.
Hi again, so i figured out it wasnt a virus but somehow a miner attached to my browser. so i uninstalled chrome and reinstalled it. so far, no popups or virus alerts. Hopefully no damage came to my pc, i havent sen any symptoms as of yet.
You can please move this to the right place or just delete it. No need for assistance. Regards, Angel
Edited by Angel White, 09 December 2017 - 07:51 PM.