New
#1
Malicious software help
While its not technically a virus, what is going on here is annoying and I cannot make it stop.
in my Appdata/roaming/microsoft/windows/start menu/programs folder is a folder called startup. no matter what I do including weeding out all the startup services I can that I don't recognize with msconfig a program that is mining bitcoins for someone is added to that folder and run on start up. I cannot figure out what program is creating this, and I thus do not know how to remove it. Virus scans with many different programs all do nothing, including rootkitremover and malwarebytes. even setting these to not run on start up still has them running on start up. Worse yet, it takes around 15 minutes or so (haven't actually timed it) for the contents of that folder to be created and run. Any Ideas?
Edit: I also ran a program called combofix