Unable to get rid of Chrome bitcoin miner

Viruses and worms
1

Hi everyone,

This is my first post here :slight_smile:

Anyway, this coin miner for Chrome is giving me headaches.

Also known as BV:Miner-T.

Here’s the screenshot of it in the Chrome Task Manager, and the shot of it when avast recognized it when it wanted to connect.

https://imgur.com/LBot5u9

And… I can’t get rid of it.

Tried:

  • Avast
  • Malwarebytes
  • Adwcleaner
  • Hitman Pro
  • Rkiller

Did all of that again, but in safe mode.

Found nothing.

No idea how to get rid of it :-\

Thanks everyone for the help!

2

Attach your basic diagnostic logs. (MBAM and FRST)
Instructions: https://forum.avast.com/index.php?topic=194892

3

Thanks for replying. Here are the files.

Thank you in advance,

4

Open ih Chrome this URL.

chrome://serviceworker-internals/

Find hanstrackr.com URL and click on Unregister button. You can safely use Unregister option for all entries.
Please report your findings and system status after this.

5

Thanks for the suggestion. It’s nowhere to be find unfortunately.

Also removed all the entries, restarted my PC, but it’s still present.

6

Since you have a lot of Chrome extensions we will try to find culprit this way.

  • Open Chrome Task Manager and find problematic URL like you did in screenshot you linked in your first post.
  • Double click on that entry.
  • Chrome should highlight problematic extension in Extension Manager.
  • Remove it and report which one was culprit.
7

Thanks. Did that. Well, apparently it’s tied to… Adblock Pro? :-\

Anyway, apparently that did it. Adblock Pro is gone, along with hanstracker. Pretty weird.

Thank you for your help, and your time. You can mark this one solved.