Bitcoin Miner Detected

Question

I'm trying to remove mstdc.exe from the machine, but it won't allow me to delete and the auto-cleanup from the Enterprise Console doesn't work. Has anyone else come across this? 
 Thanks in advance.

JeffCho · Accepted Answer

Hello, 
 
Please have a look at this: www.sophos.com/.../detailed-analysis.aspx 
 
Based on how the virus works, it looks like the worm is getting removed, then getting dropped into your environment again via the web. Please trying booting up the infected machine in safe mode without networking and removing it there.

QC · Answer

Hello InternationalPossumBrotherhood, 
 cleanup from the Enterprise Console (I'm maybe nit-picky here but it's never auto ) might or might not be possible for a PUA.. How to remove ... is pretty comprehensive, if it doesn't help there's a link to Further steps ... and from that article items 6. and 5. likely apply. 
 Christian