Malware digs virtual money over antivirus programs, forcing Windows to crash

With the code name WinstarNssmMiner, this malware is said to take full advantage of the system resources to dig Monero cryptography, and it is also equipped with many protection techniques to bypass antivirus solutions and ensure users. It is not possible to close its processes.

First and foremost, when infecting the system, WinstarNssmMiner will try to avoid detection of antivirus programs by not starting the shady operations when the antivirus program is scanning. Instead, it will lie dormant and wait until the right time to begin the infection phase.

This malware then creates two different system processes called svchost.exe to hide its purpose. One of the two processes will start pre-coding digging, while the other will act as a "guard": if it detects that the antivirus programs scan the system, it will immediately stop running. move again.

Malware digs virtual money over antivirus programs, forcing Windows to crash Picture 1

But that's not the worst. Even if the user detects the malware and tries to close its progress from Task Manager, it will activate the BSOD - Windows "legendary" blue screen - causing the system to crash and forcing the user to boot. Leave the machine, thereby allowing itself to be restarted. So closing this malware process is impossible!

"This malware acts very cleverly in the face of different antivirus software. It will turn off the protection of weak antivirus programs, and find a way to retreat when meeting a stronger opponent. If not equipped with a good antivirus program will have to accept living with the slow and blue screen error on their computers " - 360 Total Security security company said.

As mentioned above, this malware uses the entire system resources to dig Monero encryption, and at the time of its discovery, it dug up about $ 28,000 worth of pre-encryption.

According to analysts, this malware is currently spreading strongly on computer systems around the world, and the easiest way to secure your data is to use fully updated antivirus programs, simultaneously. must scan new files since downloading. Finally, using reputable antivirus products can help you prevent any potential infections.

See more:

Many computers in Vietnam have been hijacked due to virus infection
Warning: new code of virtual money digging is available via Facebook Messenger
What to do when the computer is infected with a virus that fights virtual money?

Marvin Fry

Update 23 May 2019

You should read it

May be interested

Hackers antivirus application preinstalled on Xiaomi phones into malware
what's more tragic when the tools that are considered shields for your device can now turn into malware that paves the way for unauthorized infringement, through the 'variable hand? virtual 'hackers'.
How to dig virtual money on iPhone with MobileMiner
when thinking of a virtual money mining device, people often think of large-sized devices with multiple gpus. however, it is not always necessary to dig virtual money to a specially designed equipment rig. with mobileminer application, you can exploit virtual currency on a small device like iphone.
Detecting new electronic phishing malware, redirecting payment transactions to attackers
recently, cyber security experts have discovered the latest type of attack from the electronic money world, silently redirecting payment transactions made to attackers instead of intended recipients.
New malware-digging tool on Linux devices
a malware author has just created a digital digging tool that infects linux devices, using open or default telnet login information.
Malicious ads dig virtual money right on the browser
the author of the malicious code uses javascript code transmitted via malvertising and digs a lot of digital currency on the user's browser without them knowing.
Warning: a new variant of the virus that fills virtual money via Facebook Messenger will appear every 10 minutes
security experts recommend users need to be more careful because every 10 minutes, a new variant of the virtual money digging virus appears on facebook messenger.
Panda launched antivirus software through the Web
on may 24, at the interop conference in las vegas, antivirus software maker panda software announced a new web-based product that could detect malware that traditional security programs can't be done.
How to scan and repair computers infected with viruses or malware
if windows is infected with a virus or malware, running an antivirus program from within windows is often not very effective. you can find and remove viruses as well as malware by scanning from outside windows.
How to choose antivirus applications for Windows and Mac
you are wondering why some antivirus applications like norton, mcafee or kaspersky require you to pay about $ 25-75 per year, while there are many good antivirus applications that are still free.
7 best antivirus programs for Ubuntu
viruses can still be spread, especially if you have a samba server (to share windows files on linux) or external devices often interact with both linux and windows.

Malware digs virtual money over antivirus programs, forcing Windows to crash

You should read it

May be interested

Attack the network