Not what you are looking for? Ask the experts!
System Infected: Miner.BitcoinMiner Activity 7 and 9
First of all, sorry for my bad english in some cases.
Last few days, I am getting a warning messages about blocking some pc that is trying to attack my PC with certain IP adresses. Usually I solve PC problems myself, but this issue is beyond my knowledge, so I am going to as you about my issues. I also read here on forum about bitcoin websites, but I use only certified websites and error shows with / without turned on web browser.. Better be safe, than sorry..
So: I am constantly getting 2 notifications that 2 IP adresses were blocked with text "System Infected: Miner.Bitcoinminer Activity 7" and "System Infected: Miner.Bitcoinminer Activity 9". When I open mentioned message from Norton, it shows under Attaking computer: "log2.cloudtool.com" for both cases and what I observed is, that those 2 IP adresses are always same. I am attaching Recent History.txt file that should contain additional info about my issue.
Also, I tried to "blacklist" those 2 IP in hope that my modem will block them ("attacking IP", port 452, TCP) but unfortunately it didn't work and in addition i tried it with Norton Power Eraser, but it found nothing and block warning keep frequently showing.
Is there any chance to ban those attacking IP, or remove something from my PC to stop this things happening (without new clear windows installation)? And also I am getting a message (see "screen1.png"), can this also be connected to bitcoiner activities (mentioned above)? -> when I run Norton Power Eraser, it find only Riched32.dll (placed in C:\Windows\SysWOW64\XPSViewer\S-1-4-32\Riched32.dll), but when i let Eraser remove it and PC restarts, it shows again in my PC..
Modem: Asus DSL-AC52U
Using web browser - Mozilla Firefox
OS - Windows 10 Home
p.s.: my CPU GPU, SSD and SSHD load is in normal values (CPU idle mode around 1-2%, 1.2GHz, GPU 0-1%, neither in load it is totally ok, temperatures same, both SSD and SSHD load in idle is on 0%)
p.s.2.: Block start especially when my PC start and then keep showing every 30 min +- , if I am using or not web browser. (for example it shows when I have open only Facebook, or when PC is in idle mode.)
Thank you for your replies!