Author Topic: Coinhive threat warning  (Read 67510 times)

Offline Hannes van Rijn

  • Top Poster
  • *****
  • Posts: 12,571
    • View Profile
    • http://www.shipspotting.com/userinfo.php?uid=20488
Re: Coinhive threat warning
« Reply #30 on: October 15, 2017, 03:00:13 PM »

Offline Peter Lenderink

  • Posts: 1
    • View Profile
Re: Coinhive threat warning
« Reply #31 on: October 15, 2017, 09:08:59 PM »
I have noticed slowing of the site as well, plus when this site is opened, some other programs are also slowing down.

Offline lappino

  • Home away from home
  • ****
  • Posts: 375
    • View Profile
Re: Coinhive threat warning
« Reply #32 on: October 16, 2017, 02:05:05 AM »
Simple check: processor usage jumps to 100% as soon as the site opens.

This is theft, you know. :)

I am outta here until they sort it out.

Offline davidships

  • Webmaster
  • Top Poster
  • *****
  • Posts: 2,304
    • View Profile
Re: Coinhive threat warning
« Reply #33 on: October 16, 2017, 02:34:38 AM »
A reminder - I think that it is mentioned somewhere below that the problem is only related to www.shipspotting.com addresses and not to the different domain that runs this Forum.

We do not recommend that members ignore the 99% CPU usage caused by this if your anti-virus or other security software doen't fix it, at least temporarily.  I suggest members, especially those who have no temporary fix for the main site and wish to withdraw from general activity for the moment, keep in touch with progress via this forum and access it directly by bookmarking http://forum.shipspotting.com/index.php

We are in the hands of Henrik at the moment and I am sure that he will post an update here as soon as possible.

best wishes to all

David




Offline ChasB46

  • Top Poster
  • *****
  • Posts: 963
    • View Profile
Re: Coinhive threat warning
« Reply #34 on: October 16, 2017, 10:11:14 AM »
To see if you have Coin-hive aboard give Zemana a try. https://www.zemana.com/download .If you do not want to load the programme into your system there is a portable version available. Its free for 14 days and does remove any nasties it finds without you having to pay in that time span (some "free for 30 days etc" ones scan but ask for cash before removing). I've been a regular user of Malwarebytes and SuperAntispyware but trialling Zemana found extra nasties and removed them. In reviews it does zap coin-hive so if you suspect your infected give it a try. To prevent reinfection initiate a good adblocker.
As Shipspotting is reliant on ads, once the site has been cleared of the coin-hive intrusion, you can support the site by allowing its ads etc.  
NOTE ... Zemana will do an initial scan of most likely areas of infection but not the whole drive . To search whole drive drag and drop your 'C' drive etc. into the box on its start-up page.
« Last Edit: October 16, 2017, 10:14:43 AM by ChasB46 »

Offline Patrick Hill

  • Top Poster
  • *****
  • Posts: 599
    • View Profile
    • http://www.quaysides.co.uk
Re: Coinhive threat warning
« Reply #35 on: October 16, 2017, 07:23:05 PM »
Just a quick point, I have run AdBlock plus for quite some time but still suffered with this trojan - however all scans with McAfee and Malwarebytes found no issues on my system.

Offline ChasB46

  • Top Poster
  • *****
  • Posts: 963
    • View Profile
Re: Coinhive threat warning
« Reply #36 on: October 16, 2017, 08:24:02 PM »
How do you know that its coin-hive (Manero) causing your problem if its not been detected? Malwarebytes is blocking 5 million "attacks" a day.

Offline Patrick Hill

  • Top Poster
  • *****
  • Posts: 599
    • View Profile
    • http://www.quaysides.co.uk
Re: Coinhive threat warning
« Reply #37 on: October 16, 2017, 08:44:49 PM »
How do you know that its coin-hive (Manero) causing your problem if its not been detected? Malwarebytes is blocking 5 million "attacks" a day.

Because malwarebytes blocks the outgoing connection to coin-hive sites....

Offline Oldkayaker

  • Supporter
  • Home away from home
  • ****
  • Posts: 391
    • View Profile
    • Biking Benicia
Malware warning - Coinhive
« Reply #38 on: October 17, 2017, 04:40:44 PM »
Hi
FYI...about the site...my malware protection keeps giving me a warning about one of the sponsors or addresses that shows up on the Shipspotting home page.

Offline Oldkayaker

  • Supporter
  • Home away from home
  • ****
  • Posts: 391
    • View Profile
    • Biking Benicia
Re: Coinhive threat warning
« Reply #39 on: October 17, 2017, 04:42:50 PM »
Yes, getting the same malware warning about coinhive.com

Offline Cody Williams

  • Top Poster
  • *****
  • Posts: 1,117
    • View Profile
    • ~Ydoc~ on Flickr
Re: Coinhive threat warning
« Reply #40 on: October 18, 2017, 01:31:22 AM »
How to Block Coin-Hive

Hi Everyone,

I think I may have found a solution. You can add the extension, No Coin for your browser:

No Coin for:
Chrome
Firefox
Opera

Alternatively you can block Coin-Hive within Ad-Block itself. Here’s how you can do that:

1. Click on the Ad-block icon in your browser and select Options.
2. Click on the Customise tab at the top of the page.
3. Click block an ad by its URL.
4. In the text field that appears, enter the URL from the code box below.

Code: [Select]
https://coinhive.com/lib/coinhive.min.js

And that should hopefully block it.

Best Wishes
Cody

EDIT: Corrected link
« Last Edit: October 18, 2017, 08:27:49 AM by Cody Williams »

Offline pieter melissen

  • Photo Corrections
  • Top Poster
  • *****
  • Posts: 507
    • View Profile
    • ultimatecarpage.com
Re: Coinhive threat warning
« Reply #41 on: October 18, 2017, 06:01:48 AM »
Thanks Cody, I can get as far as clicking on the icon, (Adblock ultimate 2.28) but nowhere the "options" button appears. Where do I go wrong?

Offline Cody Williams

  • Top Poster
  • *****
  • Posts: 1,117
    • View Profile
    • ~Ydoc~ on Flickr
Re: Coinhive threat warning
« Reply #42 on: October 18, 2017, 06:15:17 AM »
Sorry Pieter, I meant this AdBlock extension.




Offline pieter melissen

  • Photo Corrections
  • Top Poster
  • *****
  • Posts: 507
    • View Profile
    • ultimatecarpage.com
Re: Coinhive threat warning
« Reply #43 on: October 18, 2017, 06:38:25 AM »
OK, I did that, but I had to retyp the link in Domain, not in the URL box, because when I did that the "flash" extension that was there reappered after typing the URL (Copy-paste did not work there).
The results are that I do not get a message from AVG anymore that the connection with coinhave was discontinued, so I hopefully can assume that it was established. In other words cody, your suggestion works. Thanks a lot.

Offline sisko111

  • Top Poster
  • *****
  • Posts: 1,625
    • View Profile
Re: Coinhive threat warning
« Reply #44 on: October 18, 2017, 08:22:21 AM »
Hi all ,
I am using Chrome and AdBlock too
In my case correct code is : https://coinhive.com/lib/coinhive.min.js
and the problem is solved !
Brgds Siniša