anti-hacking system detected modification of the miner memory

[raven0931]

Hello i am new on Gminer (RivenCoin) miner is giving this error:

anti-hacking system detected modification of the miner memory

i am tried new and old nvidia driver. I dont have Antivirus program.

How can i fix it?

[senski7]

I have the same problem!

"19:14:42 Anti-hacking system detected modification of the miner memory. If you using an antivirus, add miner to antivirus exceptions 19:14:43 Miner terminated, watchdog will restart process after 10 seconds"

What can i do ?

[Dasolo]

Hello. I have the same problem when I try to start GMiner from .net core app. Can I fix it or should I wait for new release?

[eBuccaneer]

Hi,

same problem here when running it from a golang executable managing my mining services. Running on ubuntu 18.04 with definitely no anti-virus software installed/active.

[gabriel-milan]

Same here, even with v2.46 that have just been launched

[imakin]

v2.47 same issue here, i'm running on linux with nvidia, there's no way i have anti-virusminer,

i can mine with no problem with other miner

it says fixed in v1.52 almost 2 years ago, but still occured now https://github.com/develsoftware/GMinerRelease/issues/23

feels like this program require us to believe what it does with its closed source, but the program itself refuse to believe its user, how the user run the program and (bug) suspecting the user overriding shared library even though none is overriden

[develsoftware]

may be you inject miner with LD_PRELOAD, check this environment variable

[develsoftware]

before loading miner execute follow command: export LD_PRELOAD=

[recolic]

Please disable this bug on linux. there's no anti-virus software at all, but still reporting this bug.

[develsoftware]

it isn't bug, it's way to .so injection to hack miner

[AaronMcDaniel]

Bug or not this program does not work as described on linux. I am on ubuntu 18.04, with an RTX 2080s and I get this issue when I run the miner script. Is there additional setup required for linux? export LD_PRELOAD= does nothing since it doesn't assign a value to that variable. Is there a value this variable is supposed to have? If so, that should either be added to the README or to the error statement

[recolic]

I must have the freedom to be injected, just like that I should have the freedom to shoot my foot. that's why we're on linux.

this feature is ridiculous even if it doesn't cause a problem. there must be a easy switch to turn it off by design.

[Dasolo]

export LD_PRELOAD= did not work for me. I try start miner from .net app and still get same error.

[ketchmeup]

Same here. Ubuntu 18 and LD_PRELOAD= did not work for me too. Is there a way to disable this feature? I am executing your binary with Python/pexpect on different systems. No virus no anti-virus etc. GMiner v2.51 Thanks!

SOLUTION:

Ok, here you go. It works, BUT take care not to use "export LD_PRELOAD=" as described.

!/bin/bash

export LD_PRELOAD ./miner -- your config stuff here ---

without "=" Have fun!

[holzerseb]

Same issue, cannot start from my .net app

[imakin]

i think you can also ssh to $USER@localhost, use sudo su, or fireup tmux to clear LD_PRELOAD

[ketchmeup]

@holzerseb I use openssh on windows to connect from my unix environment (with pexpect/python) and start gpu mining with a .bat file. Have you tried to put commands in a .bat file and executing the .bat file from .net?

[holzerseb]

@ketchmeup yeah I've tried starting a bat file as well as calling it directly. I have found no way to start it via .net

[ketchmeup]

@holzerseb Do you need control over the mining process? If not, maybe you could start the miner in a new proces/cmd (start.exe or cmd.exe?). I am not very familiar with proc and env handling on windows. For me it works if I connect to my openssh on windows and execute the .bat or .cmd file.

[Qbuer]

I tried to use the proxychains-ng to use gminer behinded firewall and got this error message.

[lucidyan]

Running miner inside the tmux solved this error for me

[LiveWire1968]

on linux, change the script #!/bin/sh to #!/bin/bash.

[g00dnatur3]

hey bub, because you cannot relax this constraint for us linux users - i have switched to bminer

gminer will not allow me to run via a programatic child process bminer does

you lost a customer....

[DrNopt]

Use latest build 2.60. It's fixed ! Windows 11 - 22000.65

[eXPeRi91]

Use latest build 2.60. It's fixed ! Windows 11 - 22000.65

"Edition Windows 11 Pro Update 21H2 Installed on ‎7/‎12/‎2021 OS build 22000.65 Experience Windows Feature Experience Pack 421.17400.45.3 "

Not fixed.

[matholio]

v2.60 on W10 21H1, starting miner with Power Automate triggers antihacking. Is there an GMiner option to disable this feature?

[bessgeor]

GMiner 2.54, for those of us using .NET, try to run without a debugger (Ctrl+F5 in VS by default)

[LiveWire1968]

Kind of screwed up that gminers "antihacking" required linux users to use sudo to work. I backed away in 30 seconds. It has nothing over the other mining software to worry about.

[dhruvhaldar]

on linux, change the script #!/bin/sh to #!/bin/bash.

Working on Linux Ubuntu 21.04

[zee00100]

on linux, change the script #!/bin/sh to #!/bin/bash.

Working on Linux Ubuntu 21.04

Works for me also on Manjaro

[imakin]

With lots of misconception, the real problem is the error message.

Instead of showing "antihacking" word, just change the message to "clear LD_PRELOAD environment variable before using this program"

[bonlime]

This is a very unpleasant behaviour. Encountered it when tried launching GMiner from python script. Default subprocess.run doesn't work subprocess.Popen works, but if I try to call the same command from within loop - it doesn't work. On some machines launching inside tmux works, in others - doesn't. Option to remove anti-hack check (or a cleaner explanation how to bypass it) would be nice.

[NiclasEriksen]

on linux, change the script #!/bin/sh to #!/bin/bash.

More precisely, this seem to have to match the shell you're using. In my case it was zsh. I get the frustration in some of these comments, but please understand that miner software is a prime target for rootkits and exploits and I personally appreciate the caution. An option to disable it would be an obvious addition to make, even though I'd still recommend first trying to identify the source of the problem. Who knows, you might be part of a botnet.

[kirby561]

I just ran into this using gminer 2.75 on Windows 10. I was able to work around it by running miner.exe from git bash. I'm not sure why it wasn't working to begin with. Clearing LD_PRELOAD did not work for me.

[mthqwork]

Had the same issue with fish shell, on Arch Linux. Even if script specified #!/bin/bash or #!/bin/sh shebang. Running bash, then running the miner worked fine however.

[silence48]

Can not be run as a subprocess for some reason, in my example in vscode.