goldenrat10
New Member
- Joined
- Aug 30, 2016
I Found a rare Post by from Member called "ThatOtherPlace" at Reddit,
If you downloaded Just Cause 3 XL Edition via torrent and installed the repack or browsed, you should check your computer for a bitcoin miner. If you got any other recent repacks from Seyter elsewhere, I'd recommend checking those games as well. Better safe than sorry!![Salute :salute: :salute:](/forums/images/smilies/salute.gif)
The disinfection instructions:
Check Task Scheduler for a task named "InstallShield Updater" delete it if you see it.
Use 'Everything' search by voidtools to search for all folders that contain BOTH "issch.exe" and "libcurl.dll" in the SAME folder and delete it as this is the miner. There are legitimate things that use both of those filenames so be careful. The miner installs to either \Users\User\AppData\Roaming or \Users\User\AppData\Local\The legit issch.exe file should be no larger than 100kB.
The miner issch.exe file is around 1MB in size or less, also it might have a folder called "ISSCH".![Big grin :D :D](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
P.S Malwarebytes Premium detects bitcoin miners instantly. I recommend everyone go get a copy.
Here is the links, plz read through mostly by end of thread you should see some results and tips:
" ".
Always be aware of your environment.![Thumbs Up :thup: :thup:](/forums/images/smilies/thumbsup.gif)
If you downloaded Just Cause 3 XL Edition via torrent and installed the repack or browsed, you should check your computer for a bitcoin miner. If you got any other recent repacks from Seyter elsewhere, I'd recommend checking those games as well. Better safe than sorry!
![Salute :salute: :salute:](/forums/images/smilies/salute.gif)
The disinfection instructions:
Check Task Scheduler for a task named "InstallShield Updater" delete it if you see it.
Use 'Everything' search by voidtools to search for all folders that contain BOTH "issch.exe" and "libcurl.dll" in the SAME folder and delete it as this is the miner. There are legitimate things that use both of those filenames so be careful. The miner installs to either \Users\User\AppData\Roaming or \Users\User\AppData\Local\The legit issch.exe file should be no larger than 100kB.
The miner issch.exe file is around 1MB in size or less, also it might have a folder called "ISSCH".
P.S Malwarebytes Premium detects bitcoin miners instantly. I recommend everyone go get a copy.
Here is the links, plz read through mostly by end of thread you should see some results and tips:
" ".
Always be aware of your environment.
![Thumbs Up :thup: :thup:](/forums/images/smilies/thumbsup.gif)
Last edited by a moderator: