Windows 11

Question

Hello,

Pls take note after starting my pc below information is comming automatically in windows 11.

C:\Users\Admin\AppData\Roaming\Dll\dlIhost.exe

with below information

c\users\admin\appdata\roaming\dll\config.json

c\users\admin.xmrig.json

c\users\admin.config\xmrig.json

pls help to solve

Answer 1

Thank you it has been solved

Answer 2

Hi arzuman, it would appear that you have an xmrig miner at work. See if scanning with Malwarebytes removes it:

https://www.malwarebytes.com/mwb-download

if that doesn't work, if you could scan with Farbar Recovery Scan Tool (FRST), and share the logs it creates, I'll help you remove it.

https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

Run FRST as administrator, use default settings and press Scan. Two logs are created in the folder that FRST is run from, FRST.txt and Addition.txt. Zip the logs and share on OneDrive, Google Drive or any file sharing service, then post the share link.

* Note: If you are downloading FRST with Edge, smartscreen will initially block it.

Click on the 3 dots next to the warning and select Keep -> Show more -> Keep anyway.