Closed he3als closed 2 years ago
@windows-2048 Are you 100% sure this comes from the latest FastestMouseLickerForWindows release? It seems highly unlikely, but I would like to hear from Windows-2048 about this.
From README.md:
By default, the project executables will use some 25% of CPU resources and 100Kb/day of Internet resources when a computer is idling. You may switch between executables that use PC resources and executables that don't use Pc resources by reinstalling the software. More information on Windows installers that use or don't use PC resources is here.
Whaaaaaaaaaaaaaaat?!?!? This really DOES contain a miner?!?!?
Please tell us which executable to remove to clean our systems! This is unheard of!
INSTRUCTIONS (from here):
The program has built-in updater service under construction that may perform additional scientific tasks when your CPU is idle with very tiny CPU and Internet usage. See source code of the installer. The application uninstalls clearly and is NOT a virus or malware.
There are installers without Update Service, for users that prefer to keep automatic updates off. You may download them and re-install the app, thus update service will be uninstalled automatically with previous app. Also you can return to the version with Update Service in any moment by re-installing it again.
Install_TheFastestMouseClicker_2.6.1.0_noupdsrv.exe
SHA256(Install_TheFastestMouseClicker_2.6.1.0_noupdsrv.exe)= 7efbaa8de969ff8ab3e8359d6d5a8b4d93d7d430e133c193dbab53f750b7f3e9
Install_TheFastestMouseClicker_2.5.4.0_noupdsrv.exe
SHA256(Install_TheFastestMouseClicker_2.5.4.0_noupdsrv.exe)= 842e0203152bbf48e8761ffea4bc2b20600be687f1f54d527fbd38beb845af32
@windows-2048 You have greatly damaged our trust and your reputation. I, for one, will no longer try to participate in fixing/improving this otherwise very nice application. I will look for another similar project. Trust comes on foot and leaves on horseback.
@he3als Thank you very much for shining a light on this.
VIRUS STILL EXIST
This still uses a Trojan to mine crypto, and try to hide from the task manager. Uninstalling the software DOES NOT remove OSDMNUS from the computer.
This still uses a Trojan to mine crypto, and try to hide from the task manager. Uninstalling the software DOES NOT remove OSDMNUS from the computer.
how can i make sure its completely gone. seen another post saying it installs "coinminer.ga" i've tried finding all these things and cant i unistalled it using the windows unistaller but how can i make sure its completely deleted
According to GitHub requirements, uninstalling the program via standard Windows mechanism DOES uninstall it COMPLETELY with all the additional components (there is no "coinminer.ga" among them). Furthermore you can re-install a vanilla version of the program without an updater component, by the link described above in the thread (and in the general README):
You can check a Windows registry entry: Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce, it should be empty.
why tf does this install a miner that hides it self from task manager????