I keep finding jhProtominer.exe running on my system sucking up all my cpu cycles. I kill the program in the taskmanager/processes, then search my system and delete all instances of this exe file (always in appdata/roaming folder) and remove all references to the program in my registry. Yet a few days later it is back again. Coming from where, I don’t know.
Avast should remove and/or block this pernicious cycle stealer.
Can you upload a copy of the file to Avast so that they can analyse it
Download OTL to your Desktop
Secondary link
[*]Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
https://dl.dropboxusercontent.com/u/73555776/OTL_Main_Tutorial.gif
[*]Select All Users
[]Select LOP and Purity
[]Under the Custom Scan box paste this in
netsvcs
BASESERVICES
%SYSTEMDRIVE%*.exe
c:\program files (x86)\Google\Desktop
c:\program files\Google\Desktop
dir “%systemdrive%*” /S /A:L /C
/md5start
rpcss.dll
/md5stop
CREATERESTOREPOINT
[*]Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
[*]Attach both logs
if you still see it… upload and test jhProtominer.exe at www.virustotal.com if tested before, click new scan
post link to scan result here