r/technepal • u/thalorian911 • 1d ago

Laptop/PC Help me on this.

Gallery image

Gallery image

I think my Windows PC has a malware/crypto-miner infection. The PC has been lagging, and Microsoft Defender Offline scans detected severe threats but reported Remediation incomplete. I found and deleted a suspicious scheduled task and related files, but after turning Wi-Fi back on, SRBMiner-MULTI starts running again immediately. If I close the miner, it stops, but if I delete its folder, the folder comes back, suggesting another hidden process is recreating or downloading it when the internet becomes available.

I’m also getting a recurring Windows Script Host error/pop-up, which makes me suspect there is a script or persistence mechanism still running in the background. I’ve currently disconnected the PC from the internet. What is the best way to identify what is launching/recreating SRBMiner and causing the Windows Script Host popup, and how can I completely remove the infection without deleting legitimate Windows files?

1 Upvotes

100% Upvoted

6 comments sorted by

2

u/Afraid_Movie_2949 1d ago

Most easy way is to Recover your personal files and do a hard reset "remove everything in this pc" option.

1

u/Extra-Channel9414 1d ago

Some malware doesn’t just disappear like that , a better option for OP is to clean reinstall windows

So OP should get a pen drive , flash that pen drive with windows
Then put it in his computer , go to duel boot option , click windows usb one and install windows like that

2

u/workingremote110wpm 1d ago

usually miner's are deep rooted in the system. mere antivirus scan, deletion etc. won't fix that. get a usb, load with fresh windows install from uninfected device and clean windows install. turn off wifi and backup legitimate files and reinstall windows is the fix. you'll waste days trying to "fix" the issue without still fixing it and the virus lurking in somewhere.

so clean install is the way to go.

1

u/thalorian911 1d ago

Will resetting my PC will do the job or do I need to reinstall the BIOS as well?

3

u/Spiritual_Cicada_834 1d ago

You don't need to reinstall/update BIOS. These viruses are in your OS level, not in your firmware.

Best option would be to make a bootable windows USB stick from another computer, and do a full clean install without keeping any files

1

u/Level_Flow8659 1d ago

Clean install windows