BitCoinMiner help

Hello
Can anyone explain how the Coinminer trojan infects a machine?  Our web server keeps getting re-infected.
We have AVG File Server edition and CCleaner running on it, plus Malwarebytes(free version only at this stage).
AVG and Malwarebytes keep picking up the infection and remove it, but within a day it's back.
thanks
hgibbsAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Dr. KlahnPrincipal Software EngineerCommented:
Sounds like you have a polymorphic virus there.  These are exceedingly clever viruses that hide all over a machine using methods that make them undetectable by virus scanners.  

If that is the case, the only solution will be to restore the machine from the last full backup that was uncorrupted ... or reload it from scratch.

Then open the case and disconnect the USB sockets on the front of the machine, as this is likely how it was infected in the first place.
0
Shaun VermaakTechnical Specialist IVCommented:
Someone keeps visiting a site that does in browser mining. The site does not even need to be malicious. For example, this site asks for concent and mines for the user.
http://miningfaucet.pw
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
mbkitmgrCommented:
I would also go to the expense of a Better AV solution - Symantec, McAfee, Ksperksy...  While AVG do produce a server product its not one I'd use on any production server
0
Dr. KlahnPrincipal Software EngineerCommented:
Points split among contributors who addressed the problem at hand.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.