0

I've been struggling with this for some time now. Essentially, every 20-30 seconds a cmd window opens and immediately closes. I'm afraid my computer might be infected with something. I've tried using Process Monitor to capture the process and I'm 90% sure I have found the culprit.

possible bad process

The full command line text is:

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe -pool etc.2miners.com:1010 -wal 0x0EfF5C8f6461bdda77552D51CBea327740426bb0.cr1 -pass x -cdm 0 -mi 12 -log 0 -coin etc

It seems to be reaching out to etc.2miners.com:1010 which is some sort of Ethereum mining pool? How can I figure out what's calling this and how to stop it? Thanks for your help.

7
  • Look in Programs and Features to uninstall it. Run a full scan with Windows Defender. Then restart
    – anon
    Commented Feb 25, 2022 at 0:11
  • What am I uninstalling? Commented Feb 25, 2022 at 0:23
  • To see if there is a program rogue or otherwise responsible for this process.
    – anon
    Commented Feb 25, 2022 at 0:25
  • I'm not seeing anything out of the ordinary. Also, I'm running a scan currently with Virus and Threat Protection but it's just been sitting there. Hasn't scanned a single file in 10 minutes. Commented Feb 25, 2022 at 0:30
  • If Windows Defender hangs then you could well have a bad virus. Back up your computer (data, documents, email and so on) and reinstall Windows.
    – anon
    Commented Feb 25, 2022 at 0:45

1 Answer 1

0

I've been struggling with this for some time now. Essentially, every 20-30 seconds a cmd window opens and immediately closes. I'm afraid my computer might be infected with something. I've tried using Process Monitor to capture the process and I'm 90% sure I have found the culprit.

I suggested you run Windows Defender.

In a summary of the comments, you say Windows Defender has hung for an abnormally long time.

This is evidence of a bad virus.

Back up Windows (data, documents, favorites, email and so on).

Then reinstall Windows and recover your data.

1
  • Ok I will try this. Commented Feb 26, 2022 at 1:19

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .