Malware Removal Instructions

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Friday, 21 June 2013

What is Macromedia.exe and how to remove it?

Posted on 10:31 by Unknown

Macromedia.exe - CPU miner for Bitcoin


What is Macromedia.exe?


Macromedia.exe is a part of multi-threaded CPU miner for Bitcoin crypto-currency system. Very often this application is eating up 70% or even more of the CPU. It's not essential for Windows and may cause problems. If you knowingly installed this Bitcoin miner on your computer then there's probably nothing to worry about. Unless you downloaded a rogue Bitcoin miner from a shady website. Please note that genuine miner might be flagged as malware as well. Very often, scammers are using this application to earn quick bucks by monetizing botnets. They drop the main mining modules Macromedia.exe and shell.exe on infected computers and start mining. They usually set low mining speed, so that the Macromedia.exe*32 process only uses unused CPU cycles. Infected users quickly notice that their computers became very slow. This is a sign that your computer is infected and not only with RiskTool.Win32.BitCoinMiner or PUP.BitCoinMiner but also with Trojan downloaders and spyware. I recommend you to remove Macromedia.exe from your computer and run a full system scan with recommended anti-malware software.







File name: Macromedia.exe
Publisher: Bitcoin miner
File Location Windows XP: %APPDATA%\WindowsLogonS\Macromedia.exe
File Location Windows 7: %APPDATA%\Roaming\WindowsLogonS\Macromedia.exe
Startup file: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 'Macromedia.exe'

Email ThisBlogThis!Share to XShare to FacebookShare to Pinterest
Posted in Process Information | No comments
Newer Post Older Post Home

0 comments:

Post a Comment

Subscribe to: Post Comments (Atom)

Popular Posts

  • False Positive: Ikarus and Comodo detecting TDSSKiller as a Trojan horse
    This awkward moment when you realize that your favorite rootkit removal utility is detected as malware. I probably wouldn't even have no...
  • What is wrtc.exe and how to remove it?
    wrtc.exe - by Perion Network Ltd. What is wrtc.exe? wrtc.exe is a part of IncrediMail software, digitally signed by Perion Network Ltd. This...
  • Trojan.MBRlock, Внимание! Ваш компьютер заблокирован
    Trojan.MBRlock is a very disturbing piece of malicious code which infects the master boot record (MBR) and prevents Windows from starting. ...
  • Remove ShopperReports (Uninstall Guide)
    ShopperReports is defined as adware or a potentially unwanted program that displays marketing related results in a side pane of the browser...
  • Remove Adware.StartPage (Uninstall Guide)
    Adware.StartPage pretends to be a valid program but actually it is an adware that modifies the Internet Explorer home page without the user...
  • WebCake Adware Removal Guide
    If you’re reading this it is very likely that your computer is infected with WebCake adware which displays extremely obnoxious and intrusiv...
  • Show Hidden Files and Folders in Windows
    By default Microsoft Windows hides important files from being seen with Windows Explorer in order to protect these files from being modified...
  • Remove Windows XP Recovery (Uninstall Guide)
    Windows XP Recovery is a fake computer repair and optimization program that reports nonexistent security threats, registry errors and some ...
  • Remove "System Check" (Uninstall Guide)
    System Check is malicious software posing as Windows system utility. Although, it may look like a real thing, it isn't! You are actuall...
  • SaaS - Cloud Computing
    What is Software as a Service (SaaS)? Software as a Service (SaaS) is a cloud computing model, which hosts various software applications and...

Categories

  • Adware
  • Answers
  • Antivirus software
  • Browser Hijackers
  • Cloud Computing
  • Fake Alerts
  • Giveaways
  • Hoax
  • How-To
  • IaaS
  • Internet
  • Malicious websites
  • Malware
  • PaaS
  • Parental Controls
  • Passwords
  • Phishing
  • Process Information
  • Ransomware
  • Rogue programs
  • Rootkits
  • SaaS
  • Security Advisories
  • Spam
  • Spyware
  • Trojans
  • Viruses
  • Web Browsers
  • Worms

Blog Archive

  • ▼  2013 (173)
    • ►  December (6)
    • ►  November (13)
    • ►  October (11)
    • ►  September (20)
    • ►  August (4)
    • ►  July (17)
    • ▼  June (31)
      • How to Remove DomaIQ, removal instructions
      • Remove bizcoaching.info, removal instructions
      • What is CltMngSvc.exe and how to remove it?
      • What is Search Assistant WebSearch 1.74 and how to...
      • What is Search Protect by conduit and how to remov...
      • What is IB Updater Service and how to remove it?
      • Remove vGrabber, removal instructions
      • Remove inksdata.com, removal instructions
      • How To Get Rid of the "FBI Your computer has been ...
      • PC Health Boost Review and Removal Instructions
      • Remove OtShot, removal instructions
      • What is Macromedia.exe and how to remove it?
      • Is it safe to use a VPN service to change IP? How ...
      • What is wrtc.exe and how to remove it?
      • What is DTUpdate.exe and how to remove it?
      • Remove "Value Apps" pop-up, removal instructions
      • Remove start.search.us.com homepage redirect (Unin...
      • Remove TR/ATRAPS.Gen2, removal instructions
      • How to remove 'TidyNetwork' adware virus from your...
      • What is stij.exe and how to remove it?
      • What is wscript.exe and how to remove it?
      • How to remove Luhe.Sirefef.A Trojan virus (Uninsta...
      • What is minerd.exe and how to remove it?
      • What is wssetup.exe and how to remove it?
      • Alert: Fake Google Chrome Update
      • Fixing ievbz.com redirection/hijacking problem
      • What is dmwu.exe and how to remove it?
      • WebCake Adware Removal Guide
      • Remove trustedoffer.com pop-ups and redirection (U...
      • Fake Flash Player Update Virus Removal
      • V9 Portal Site Removal Guide
    • ►  May (25)
    • ►  April (15)
    • ►  March (17)
    • ►  February (7)
    • ►  January (7)
  • ►  2012 (86)
    • ►  November (2)
    • ►  October (4)
    • ►  September (6)
    • ►  August (6)
    • ►  July (11)
    • ►  June (1)
    • ►  May (5)
    • ►  April (7)
    • ►  March (7)
    • ►  February (17)
    • ►  January (20)
  • ►  2011 (239)
    • ►  December (8)
    • ►  November (18)
    • ►  October (21)
    • ►  September (24)
    • ►  August (28)
    • ►  July (32)
    • ►  June (16)
    • ►  May (23)
    • ►  April (15)
    • ►  March (16)
    • ►  February (9)
    • ►  January (29)
  • ►  2010 (2)
    • ►  December (2)
Powered by Blogger.

About Me

Unknown
View my complete profile