How to delete miner
if you have yum, you can directly Yum remove XXX
if it is RPM package, RPM - e XXX
tar package, you need to directly delete the file or make universal XXX
these are the three common ones.
the complete removal process of mining virus is as follows, please do it when the network is disconnected:
1. Stop and disable the hyper access protection agent service 2 3. Delete C: \% windows \% system32 \% vmichapagentsrv.dll. If the deletion fails, you can rename the file to another name 4. Restart the computer 5. Delete the directory C: (Windows) system32 (Sysprep themes) and C: (Windows) Sysprep themes 6. Delete C: / / Windows / system32 / secupdatehost.exe 7 https://docs.microsoft.com/zh-cn/security-updates/Securitybulletins/2017/ms17-010 8
bitcoin mining machine scam is to make money by leasing or selling mining machines the so-called "mining machine" refers to the computer that installs and runs specific software and algorithms. As we all know, bitcoin can only be obtained through long-term running algorithm of computer, and the total amount is limited. Therefore, some manufacturers have launched specially designed and optimized computer procts, known as "mining machine" in January 2018, a mining computer named "Kodak kashminer" appeared at the international consumer electronics exhibition in Las Vegas, which aroused people's attention. But now critics point out that the mining machine plan is actually a fraud, and the publicity for profit is also false precautions: 1. The general computer configuration of bitcoin household can not meet the requirements of bitcoin miner, so it is difficult to earn the electricity cost of a day 2. If you have to use bitcoin mining machine to dig coins, it is suggested to choose a reliable and legal platform to go more steadily. In the legal platform mining, the daily income can be seen, and a certain amount can be withdrawn
when you download this software, did you install it for the first time? Or when you click for the first time, is there a prompt to write the registration information to the computer? If not, you can delete it. You don't need to uninstall
if it is installed, you can find it in the installation location or in the control panel. If you don't install it and just write some registration information when you click, you can delete the registration information about the software in the registry at most after deleting the software from the hard disk. Even if you don't delete the registration information, it won't have any impact.
1. Close the access to the mining server
iptables - a input - s xmr.crypto-pool.fr - J dropandiptables - a output - D xmr.crypto-pool.fr - J drop.
2. Chmod - x minerd, cancel the execution permission. Do not delete minerd until the root cause is found, because it will be automatically generated once it is deleted
Service stop crond or crontab - R delete all execution plans5
6. Check the / var / spool / cron / directory and find a timer file of root user
Download script statement:
[plain] view plain
bus line: Metro Line 1, the whole journey is about 12.7km
1. Walk about 140m from Jiubao passenger transport center to the passenger transport center station
2. Take Metro Line 1, pass 9 stops, and reach Wulin Square Station
take bus No.1 of branch B
and get off at Wulin Square North after 8 stops
walk about
614
meters to Wulin Square
Terminal
Wulin Square