ShipSpotting.com
Login: Lost Password? SIGN UP
Ship Photo Search
Advanced Search
Pages: 1 ... 3 4 [5] 6
  Print  
Author Topic: Coinhive threat warning  (Read 8101 times)
0 Members and 1 Guest are viewing this topic.
Bjørn Knudsen
Supporter
Home away from home
****
Offline Offline

Posts: 266



View Profile
« Reply #60 on: October 22, 2017, 09:11:15 pm »

Hello
I use MalwareBytes : If you don't want it to pop up , I did so :

Malware + setting + exclusion : Put in the following if you use Microsoft Edge .

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Report to moderator   Logged

Don't worry be happy                    Regards Knudde
Bjørn Knudsen
Supporter
Home away from home
****
Offline Offline

Posts: 266



View Profile
« Reply #61 on: October 22, 2017, 09:23:37 pm »

Hello again .

If you use I.E. 11

Malware + setting + exclusion.

C:\Program Files (x86)\ Internet Explorer\iexplore.exe
Report to moderator   Logged

Don't worry be happy                    Regards Knudde
Tomislav Raymondi
Top Poster
*****
Offline Offline

Posts: 2,140


View Profile
« Reply #62 on: October 23, 2017, 11:44:01 am »

I am constantly receiving a warning from Avast anti virus program stating that the connection has been suspended with comhive.com as infested with JS: Miner-C

Regards

Tomi.
Report to moderator   Logged
lappino
Home away from home
****
Offline Offline

Posts: 215


View Profile
« Reply #63 on: October 24, 2017, 06:25:02 am »

Any news?

In the meantime, immediately upon opening the site, I got reported to my company's IT department for breach of security by visiting malware sites.

This was something I definitely could live without.

However, one hour before that, my home computer did not show any increase in processor activity after visiting the site - and it would jump to 100% immediately yesterday.

So, what's the news? Smiley
Report to moderator   Logged
MO Roy
Just can't stay away
***
Offline Offline

Posts: 87


View Profile
« Reply #64 on: October 24, 2017, 06:08:04 pm »

Well I abstained from visiting this site on my laptop for almost two weeks and only checked this forum on my mobile.
Tried it today and 100% cpu-usage....
Installed malwarebytes on my mac and it found some files, though not sure it has to do something with coin-hive.
Anyway still have 100% cpu-usage after opening this website. Only when I disable JavaScript it has a normal cpu-usage.
When doing the test (opening this website) after running malwarebytes and have a cpu-usage of 100% malwarebytes found no malicious files....

Anyway it's about time the malicious ads are removed the website, really don't know why this have to take such a long time.

Cheers,
Roy
Report to moderator   Logged
ChasB46
Top Poster
*****
Offline Offline

Posts: 814


View Profile
« Reply #65 on: October 24, 2017, 07:54:34 pm »

Coin-hive and its variants use Javascript. As you have found turning off Javascript returns the CPU to "normal". If Shipspotting members can live without Javascript turn it off in your browser options. If you occasionally need to use it then get a browser addon that sits in browser bar and can be turned off/on with a mouse click.
Report to moderator   Logged
Cody Williams
Webmaster
Top Poster
*****
Offline Offline

Posts: 1,112



View Profile WWW
« Reply #66 on: October 25, 2017, 04:28:57 am »

David and I have been trying to get some news. As soon as we receive some, we'll let you know.

In the meantime, the browser extension "No Coin" seems to be work quite well at blocking it.

My apologise for the length of time this is taking to resolve this problem.

Cody
Report to moderator   Logged

I can be contacted at cody@shipspotting.com
pieter melissen
Photo Corrections
Home away from home
*****
Offline Offline

Posts: 218


View Profile WWW
« Reply #67 on: October 25, 2017, 06:50:40 am »

I have been away for a number of days, but since my return Tuesday morning I have experienced no problems any more with the site, the fan stayed quiet and the CPU worked like it should be. Apparently something has changed.
Report to moderator   Logged
Clyde Dickens
FAQ Administrator
Top Poster
*****
Offline Offline

Posts: 2,480



View Profile
« Reply #68 on: October 25, 2017, 10:27:05 am »

Until I reinstalled Malwarebytes after a 2 month absence, I did not get any messages.  Now I regularity do - from Malwarebytes, stating that Coinhive has been blocked.

I have never noticed any slowing of my CPU

I usually use Chrome as my browser, occasionally Firefox which gives the same result

Good luck Cody and David.  I hope you get appropriate advice from Henrik

Clyde
Report to moderator   Logged

To view some of the shipspotting sites I use, see the listing at  http://www.shipspotting.com/modules/myalbum/photo.php?lid=510326.
Clyde Dickens
FAQ Administrator
Top Poster
*****
Offline Offline

Posts: 2,480



View Profile
« Reply #69 on: October 25, 2017, 12:14:21 pm »

I have uninstalled Malwarebytes and am now relying on AVG CloudCare AntiVirus.

The pop up windows about blocking no longer appear

I have the No Coin browser extension as earlier advised by Cody

Clyde
Report to moderator   Logged

To view some of the shipspotting sites I use, see the listing at  http://www.shipspotting.com/modules/myalbum/photo.php?lid=510326.
Patrick Hill
Top Poster
*****
Offline Offline

Posts: 520



View Profile WWW
« Reply #70 on: October 25, 2017, 04:26:49 pm »

Turning off java for the site in Chrome settings appears to have resolved the issue for me for now, Malewarebytes no longer popping up every few seconds and no processor overload.
Report to moderator   Logged
victor radio74
Home away from home
****
Offline Offline

Posts: 162


View Profile
« Reply #71 on: October 25, 2017, 04:47:10 pm »

Hi ,using Firefox my antivirus was constantly advising me that Coinhive has been blocked.
Irritant! After adding the browser extension" No coin",thanks Cody Williams!,no problem at all
Cheers 
Report to moderator   Logged
Cody Williams
Webmaster
Top Poster
*****
Offline Offline

Posts: 1,112



View Profile WWW
« Reply #72 on: October 26, 2017, 09:00:44 am »

No worries, guys. I'm glad I've been able to help.

Best Wishes
Cody
Report to moderator   Logged

I can be contacted at cody@shipspotting.com
Anthony Legg
Just popping in

Offline Offline

Posts: 18


View Profile
« Reply #73 on: October 26, 2017, 09:34:11 am »

Had no problems up to today, now am riddled with coinminer 6&8. Have removed Java and installed no coin, it tells me page is infected,but won't remove or block it. Nortons tells me it is being blocked,not sure wherther it is safe to use the site or not. Norton tells me that it is Shipspotting that is attacking my computer...
Report to moderator   Logged
Robert J Smith
Top Poster
*****
Offline Offline

Posts: 5,557


View Profile
« Reply #74 on: October 26, 2017, 11:09:24 am »

Well, that's disappointing..

I loaded "No Coin" yesterday although it only mask's the site problem and it worked fine, today "coinminer 6&8" back as bad as ever..

Pop ups still say "Norton" is blocking them plus "No Coin" saying this site is unsafe.

Hope the Tech's sort this asap. I will only check progress by logging on directly to the forum page where's there's no photos so no pop ups.

Regards

Bob
Report to moderator   Logged
Pages: 1 ... 3 4 [5] 6
  Print  
 
Jump to:  


Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC
Page created in 0.049 seconds with 19 queries.
Copyright © 2010 All rights reserved