Announcement

Collapse
No announcement yet.

Trojan:HTML/CoinMiner

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Trojan:HTML/CoinMiner

    I updated Advanced System Care 13.0.2 and received an threat alert concerning "Trojan:HTML/CoinMiner". The affected area was file: "C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Database\ASCSpecialUrl.db". The threat has been quarantined now. Did this result from the ASC update?

  • #2
    same here... trojan CoinMIner

    Comment


    • #3
      Itens afetados:

      containerfile: C:\Program Files (x86)\IObit\Advanced SystemCare\PatchSetup_A13.exe

      file: C:\Program Files (x86)\IObit\Advanced SystemCare\PatchSetup_A13.exe->(inno#000356)

      Comment


      • #4
        Originally posted by Roberto Fleury View Post
        Itens afetados:

        containerfile: C:\Program Files (x86)\IObit\Advanced SystemCare\PatchSetup_A13.exe

        file: C:\Program Files (x86)\IObit\Advanced SystemCare\PatchSetup_A13.exe->(inno#000356)
        If you received ASC from a third party vendor, it is possible that the Trojan may have been added by the vendor.
        I suggest uninstalling ASC making sure to clean all remnants and folders. Then download ASC from the recommended sites in in the News & Updates section of the Forum.
        To err is Human. To really mess things up you need a PC.

        Comment


        • #5
          I have a similar issue and tried uninstalling ASCv13 using IObit uninstaller, cleaning disc of IOBit data, and cleaning registry - to no avail. Installed the version 12 downloaded at the time of purchase and everything seem to work fine. But when ASC upgraded to V13, I got the Trojan message again similar to the ones reported. What gives??
          Problems occur - suffering is optional!

          Comment


          • #6
            same issue. I wish they could fix it soon, I'm worryed. Otherwise i'm going to uninstall and ask for a refund

            Comment


            • #7
              Originally posted by Dabbler45 View Post
              I have a similar issue and tried uninstalling ASCv13 using IObit uninstaller, cleaning disc of IOBit data, and cleaning registry - to no avail. Installed the version 12 downloaded at the time of purchase and everything seem to work fine. But when ASC upgraded to V13, I got the Trojan message again similar to the ones reported. What gives??
              As I do not know whether you got your ASC or your upgrade from a third party vendor...it is difficult to help you.
              So, as per my previous post when you uninstall ASC download ASC 13 from the approved site(s)/
              If you then have the same issue we can assume Iobit are at fault. If not then the 3rd party vendor is the culprit.

              To err is Human. To really mess things up you need a PC.

              Comment


              • #8
                The installation was performed directly from IObit servers. Windows Defender is blocking every single action made with ASC or other IObit productos

                Comment


                • #9
                  Came here looking for answers about the same thing.

                  Windows Defender quantified this ASCSpecialUrl.db file as an HTML/CoinMiner trojan.

                  But I know that I received ACS directly from the source, not third party, so I selected Allow, however, Win10 opted to quarantine regardless.

                  Comment


                  • #10
                    Originally posted by ArthurInn View Post
                    The installation was performed directly from IObit servers. Windows Defender is blocking every single action made with ASC or other IObit productos
                    It you download from the News and Update section of the forum as I suggested.....you will download from Majorgeeks....not Iobits servers.
                    If you do not want to follow my advice, it is difficult to solve your issue.

                    To err is Human. To really mess things up you need a PC.

                    Comment


                    • #11
                      Well Scannon, this is interesting! I've tried both the News & Updates with no success in resolving the issue. However, I did reinstall the previous version12 that was downloaded with my original purchase with success (no Trojan reported!). However when the ASC12 does the auto update to Version13, the Trojan comes back after a reboot. I am assuming that updates come from the IOBit servers and not 'Major Geeks' or for that matter 'Download.com' Perhaps if you could provide a link direct to IOBit.com servers, we could assess where the issue lies. This is because IOBits web page 'free download' redirects you to 3rd party download sites unless you want to purchase a fresh copy of ASC13 - and I don't as I've already paid for it!
                      Problems occur - suffering is optional!

                      Comment


                      • #12
                        Dabbler45
                        Just to be clear...You went to the Major geeks site and downloaded ASC 13 from them, and once again you received the Trojan.
                        To err is Human. To really mess things up you need a PC.

                        Comment


                        • #13
                          Hi Scannan, Yep that was one attempt, but more importantly when the V12 is reinstalled, it works fine (No trojan reported on next boot), but when you expedite an update using the update feature on V12 to take it from V12 to V13, the next time you boot the Trojan report re-occurs. I am assuming that the internal sw update mechanism in V12 downloads the update from IOBit servers and not third party distributers - hence the request for a direct link to iobit servers. Hope that helps although methinks as many seem to have this issue from multiple sites, there's a serious problem
                          Problems occur - suffering is optional!

                          Comment


                          • #14
                            If you downloaded ASC 13 from Majorgeeks and got a trojan....then yes...there is a serious problem, as Majorgeeks is absolutely reliable and safe. This means that Iobit are responsible and Majorgeeks is not aware that the download is compromised.
                            I do not understand why you reinstall ASC 12 repeatedly and then Update to ASC 13 knowing that you will get a Trojan.
                            Obviously ASC 12 is clean and therefore you should stay with that for the time being.
                            It would appear that Iobit has decided to include the CoinMiner trojan in their ASC 13 release. They probably did this because the CoinMiner trojan can be used to download unwanted programs such as pups etc...
                            Windows Defender will remove it, so it is not a great issue.
                            sadly, Iobit are unlikely to respond to this Topic, as they no longer seem to care about Users issues.
                            So, I do not know where it will go from here, other than to suggest that you use ASC 12 for now.
                            Also it may be worth sending a report to Majorgeeks to make them aware of the issue.
                            To err is Human. To really mess things up you need a PC.

                            Comment


                            • #15
                              Thanks Scannan, not the answer I was expecting but will follow your advice. It's a pretty poor show for a Software supplier to do that and not expect some flack for it. I would be interested to know if other users have the same experience with iobit - in my country they would run foul of the law if they knowingly included a Trojan like that in a paid product. Cheers!
                              Problems occur - suffering is optional!

                              Comment

                              Working...
                              X