Virus disguised as Realtek HD Audio 

system · 2017-02-15T00:46:43.000Z

I have a virus disguised as Realtek HD Audio.

Starts after about 15 minutes following reboot, uses 25% of CPU, and runs some sort of mining program on my GPU.

It is killed easily by ending the task. Not detected by Avast. I only saw it because ~/AppData/Local/Ethash was taking a lot of space (more than 5 GiB), and I don’t run Etherium mining things.

Seems the exact same as reported here: https://forum.avast.com/index.php?topic=188819.0

But that was over 120 days ago.

TrueIndian · 2017-02-15T01:36:14.000Z

Send to avast lab >> https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438

Follow this thread if you need help with cleaning:
https://forum.avast.com/index.php?topic=194892.0

system · 2017-02-16T05:45:30.000Z

I sent them the files. I hope they add it to their scan.

TrueIndian · 2017-02-16T10:51:30.000Z

you upload the file here: www.virustotal.com

and post the result link here.That will help us get some more info.

Announcements