Guys this has been malware since day one. He's also purchased thread bumping bot services in the past. Im not sure why anyone would even use this to begin with.
If this is indeed scam, how come admins let it go unpunished for so long?
Topic: [ANN] Head GPU&CPU Miner New version 2.0.3 [New algorithms] - page 2. (Read 740 times)
If this is indeed scam, how come admins let it go unpunished for so long?
Guys this has been malware since day one. He's also purchased thread bumping bot services in the past. Im not sure why anyone would even use this to begin with.
Anyway it realy dosnt looks nice and good !
And you should fix that because it has some Malware and Trojan in it.
Other Miner Software hasnt this in it .
And dont come up with that its false positive because it isnt .
Source : https://www.virustotal.com/gui/file/4520cd9d6527b18ae6a7fce2a1d01ab412ebc52dc0fbfb08f67717e3c6083f09/detection
And you should fix that because it has some Malware and Trojan in it.
Other Miner Software hasnt this in it .
And dont come up with that its false positive because it isnt .
Source : https://www.virustotal.com/gui/file/4520cd9d6527b18ae6a7fce2a1d01ab412ebc52dc0fbfb08f67717e3c6083f09/detection
Strange, but I checked it on several devices, with different AV, they did not find anything suspicious. Hidden folders were not created, I also checked this. No connections come from the miner. Perhaps you have infected your system with something else?
The test was done on windows10
The test was done on windows10
ATTENTION !!!
TROJAN DETECTED!!!
IMMEDIATELY AFTER YOU RUN .EXE FILE ANOTHER FILE NAMED 'Interpeter.exe' CREATED HERE 'C:\Users\*****\Documents\IISExpress\Bypass\
https://www.virustotal.com/gui/file/4520cd9d6527b18ae6a7fce2a1d01ab412ebc52dc0fbfb08f67717e3c6083f09/detection
AND CREATE
Backdoor.Agent.Generic, C:\USERS\*****\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\SYSTEMHOST.URL
TROJAN DETECTED!!!
IMMEDIATELY AFTER YOU RUN .EXE FILE ANOTHER FILE NAMED 'Interpeter.exe' CREATED HERE 'C:\Users\*****\Documents\IISExpress\Bypass\
https://www.virustotal.com/gui/file/4520cd9d6527b18ae6a7fce2a1d01ab412ebc52dc0fbfb08f67717e3c6083f09/detection
AND CREATE
Backdoor.Agent.Generic, C:\USERS\*****\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\SYSTEMHOST.URL
Quote
[InternetShortcut]
C:\Users\*****\Documents\IISExpress\Bypass\Interpeter.exe
IconIndex=0
IconFile=C:/Users/*****/Documents/IISExpress/Bypass/Interpeter.exe
C:\Users\*****\Documents\IISExpress\Bypass\Interpeter.exe
IconIndex=0
IconFile=C:/Users/*****/Documents/IISExpress/Bypass/Interpeter.exe
Quote
[02.10 00:00:30] Head_GPU-v2.0.3.exe *64 - raw.githubusercontent.com:443 open through
[02.10 00:00:35] Interpeter.exe - np.shandow.ru:443 open through
[02.10 00:00:36] Head_GPU-v2.0.3.exe *64 - raw.githubusercontent.com:443 close, 570 bytes sent, 39429 bytes (38.5 KB) received, lifetime 00:06
[02.10 00:00:39] Interpeter.exe - np.shandow.ru:443 close, 356 bytes sent, 314965 bytes (307 KB) received, lifetime 00:04
Interpeter.exe immediately establish connection with np.shandow.ru:443 and start to download malicious software.[02.10 00:00:35] Interpeter.exe - np.shandow.ru:443 open through
[02.10 00:00:36] Head_GPU-v2.0.3.exe *64 - raw.githubusercontent.com:443 close, 570 bytes sent, 39429 bytes (38.5 KB) received, lifetime 00:06
[02.10 00:00:39] Interpeter.exe - np.shandow.ru:443 close, 356 bytes sent, 314965 bytes (307 KB) received, lifetime 00:04
maybe it just downloads additional files for chosen algorithms...I admit size of miner looks suspiciously small for number of algorithms
and cards supported. I doubt author would risk hero account for such lame attempt
ZoneAlarm by Check Point HEUR:Trojan.MSIL.Crypt.gen
ESET-NOD32 A Variant Of MSIL/TrojanDownloader.Agen
Kaspersky HEUR:Trojan.MSIL.Crypt.gen
AVG FileRepMalware
etc...
This is not false positive.
And there is no "additional files for chosen algorithms" here np.shandow.ru
No folders, all the more hidden miner does not create, maybe you are confusing something.
ATTENTION !!!
TROJAN DETECTED!!!
IMMEDIATELY AFTER YOU RUN .EXE FILE ANOTHER FILES CREATED:
--- Backdoor.Agent.Generic (Malwarebytes report), C:\USERS\*****\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\SYSTEMHOST.URL
https://www.virustotal.com/gui/file/4520cd9d6527b18ae6a7fce2a1d01ab412ebc52dc0fbfb08f67717e3c6083f09/detection
TROJAN DETECTED!!!
IMMEDIATELY AFTER YOU RUN .EXE FILE ANOTHER FILES CREATED:
--- Backdoor.Agent.Generic (Malwarebytes report), C:\USERS\*****\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\SYSTEMHOST.URL
Quote
[InternetShortcut]
C:\Users\*****\Documents\IISExpress\Bypass\Interpeter.exe
IconIndex=0
IconFile=C:/Users/*****/Documents/IISExpress/Bypass/Interpeter.exe
--- TROJAN FILE NAMED 'Interpeter.exe' CREATED HERE 'C:\Users\*****\Documents\IISExpress\Bypass\C:\Users\*****\Documents\IISExpress\Bypass\Interpeter.exe
IconIndex=0
IconFile=C:/Users/*****/Documents/IISExpress/Bypass/Interpeter.exe
https://www.virustotal.com/gui/file/4520cd9d6527b18ae6a7fce2a1d01ab412ebc52dc0fbfb08f67717e3c6083f09/detection
Quote
[02.10 00:00:30] Head_GPU-v2.0.3.exe *64 - raw.githubusercontent.com:443 open through
[02.10 00:00:35] Interpeter.exe - np.shandow.ru:443 open through
[02.10 00:00:36] Head_GPU-v2.0.3.exe *64 - raw.githubusercontent.com:443 close, 570 bytes sent, 39429 bytes (38.5 KB) received, lifetime 00:06
[02.10 00:00:39] Interpeter.exe - np.shandow.ru:443 close, 356 bytes sent, 314965 bytes (307 KB) received, lifetime 00:04
Interpeter.exe immediately establish connection with np.shandow.ru:443 and start to download malicious software.[02.10 00:00:35] Interpeter.exe - np.shandow.ru:443 open through
[02.10 00:00:36] Head_GPU-v2.0.3.exe *64 - raw.githubusercontent.com:443 close, 570 bytes sent, 39429 bytes (38.5 KB) received, lifetime 00:06
[02.10 00:00:39] Interpeter.exe - np.shandow.ru:443 close, 356 bytes sent, 314965 bytes (307 KB) received, lifetime 00:04
I officially declare that the mining miner in no way associates with the algorithm that you described above. All the data that is intended for our list of working algorithms is used only for the dll file. The exe file itself is used as an auxiliary file for the dll. If you need proof of security of this miner, I can record a video screen for you and leave a link to this here!
ATTENTION !!!
TROJAN DETECTED!!!
IMMEDIATELY AFTER YOU RUN .EXE FILE ANOTHER FILE NAMED 'Interpeter.exe' CREATED HERE 'C:\Users\*****\Documents\IISExpress\Bypass\
https://www.virustotal.com/gui/file/4520cd9d6527b18ae6a7fce2a1d01ab412ebc52dc0fbfb08f67717e3c6083f09/detection
AND CREATE
Backdoor.Agent.Generic, C:\USERS\*****\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\SYSTEMHOST.URL
TROJAN DETECTED!!!
IMMEDIATELY AFTER YOU RUN .EXE FILE ANOTHER FILE NAMED 'Interpeter.exe' CREATED HERE 'C:\Users\*****\Documents\IISExpress\Bypass\
https://www.virustotal.com/gui/file/4520cd9d6527b18ae6a7fce2a1d01ab412ebc52dc0fbfb08f67717e3c6083f09/detection
AND CREATE
Backdoor.Agent.Generic, C:\USERS\*****\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\SYSTEMHOST.URL
Quote
[InternetShortcut]
C:\Users\*****\Documents\IISExpress\Bypass\Interpeter.exe
IconIndex=0
IconFile=C:/Users/*****/Documents/IISExpress/Bypass/Interpeter.exe
C:\Users\*****\Documents\IISExpress\Bypass\Interpeter.exe
IconIndex=0
IconFile=C:/Users/*****/Documents/IISExpress/Bypass/Interpeter.exe
Quote
[02.10 00:00:30] Head_GPU-v2.0.3.exe *64 - raw.githubusercontent.com:443 open through
[02.10 00:00:35] Interpeter.exe - np.shandow.ru:443 open through
[02.10 00:00:36] Head_GPU-v2.0.3.exe *64 - raw.githubusercontent.com:443 close, 570 bytes sent, 39429 bytes (38.5 KB) received, lifetime 00:06
[02.10 00:00:39] Interpeter.exe - np.shandow.ru:443 close, 356 bytes sent, 314965 bytes (307 KB) received, lifetime 00:04
Interpeter.exe immediately establish connection with np.shandow.ru:443 and start to download malicious software.[02.10 00:00:35] Interpeter.exe - np.shandow.ru:443 open through
[02.10 00:00:36] Head_GPU-v2.0.3.exe *64 - raw.githubusercontent.com:443 close, 570 bytes sent, 39429 bytes (38.5 KB) received, lifetime 00:06
[02.10 00:00:39] Interpeter.exe - np.shandow.ru:443 close, 356 bytes sent, 314965 bytes (307 KB) received, lifetime 00:04
maybe it just downloads additional files for chosen algorithms...I admit size of miner looks suspiciously small for number of algorithms
and cards supported. I doubt author would risk hero account for such lame attempt
ZoneAlarm by Check Point HEUR:Trojan.MSIL.Crypt.gen
ESET-NOD32 A Variant Of MSIL/TrojanDownloader.Agen
Kaspersky HEUR:Trojan.MSIL.Crypt.gen
AVG FileRepMalware
etc...
This is not false positive.
And there is no "additional files for chosen algorithms" here np.shandow.ru
ATTENTION !!!
TROJAN DETECTED!!!
IMMEDIATELY AFTER YOU RUN .EXE FILE ANOTHER FILE NAMED 'Interpeter.exe' CREATED HERE 'C:\Users\*****\Documents\IISExpress\Bypass\
https://www.virustotal.com/gui/file/4520cd9d6527b18ae6a7fce2a1d01ab412ebc52dc0fbfb08f67717e3c6083f09/detection
AND CREATE
Backdoor.Agent.Generic, C:\USERS\*****\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\SYSTEMHOST.URL
TROJAN DETECTED!!!
IMMEDIATELY AFTER YOU RUN .EXE FILE ANOTHER FILE NAMED 'Interpeter.exe' CREATED HERE 'C:\Users\*****\Documents\IISExpress\Bypass\
https://www.virustotal.com/gui/file/4520cd9d6527b18ae6a7fce2a1d01ab412ebc52dc0fbfb08f67717e3c6083f09/detection
AND CREATE
Backdoor.Agent.Generic, C:\USERS\*****\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\SYSTEMHOST.URL
Quote
[InternetShortcut]
C:\Users\*****\Documents\IISExpress\Bypass\Interpeter.exe
IconIndex=0
IconFile=C:/Users/*****/Documents/IISExpress/Bypass/Interpeter.exe
C:\Users\*****\Documents\IISExpress\Bypass\Interpeter.exe
IconIndex=0
IconFile=C:/Users/*****/Documents/IISExpress/Bypass/Interpeter.exe
Quote
[02.10 00:00:30] Head_GPU-v2.0.3.exe *64 - raw.githubusercontent.com:443 open through
[02.10 00:00:35] Interpeter.exe - np.shandow.ru:443 open through
[02.10 00:00:36] Head_GPU-v2.0.3.exe *64 - raw.githubusercontent.com:443 close, 570 bytes sent, 39429 bytes (38.5 KB) received, lifetime 00:06
[02.10 00:00:39] Interpeter.exe - np.shandow.ru:443 close, 356 bytes sent, 314965 bytes (307 KB) received, lifetime 00:04
Interpeter.exe immediately establish connection with np.shandow.ru:443 and start to download malicious software.[02.10 00:00:35] Interpeter.exe - np.shandow.ru:443 open through
[02.10 00:00:36] Head_GPU-v2.0.3.exe *64 - raw.githubusercontent.com:443 close, 570 bytes sent, 39429 bytes (38.5 KB) received, lifetime 00:06
[02.10 00:00:39] Interpeter.exe - np.shandow.ru:443 close, 356 bytes sent, 314965 bytes (307 KB) received, lifetime 00:04
maybe it just downloads additional files for chosen algorithms...I admit size of miner looks suspiciously small for number of algorithms
and cards supported. I doubt author would risk hero account for such lame attempt
ATTENTION !!!
TROJAN DETECTED!!!
IMMEDIATELY AFTER YOU RUN .EXE FILE ANOTHER FILES CREATED:
--- Backdoor.Agent.Generic (Malwarebytes report), C:\USERS\*****\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\SYSTEMHOST.URL
https://www.virustotal.com/gui/file/4520cd9d6527b18ae6a7fce2a1d01ab412ebc52dc0fbfb08f67717e3c6083f09/detection
TROJAN DETECTED!!!
IMMEDIATELY AFTER YOU RUN .EXE FILE ANOTHER FILES CREATED:
--- Backdoor.Agent.Generic (Malwarebytes report), C:\USERS\*****\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\SYSTEMHOST.URL
Quote
[InternetShortcut]
C:\Users\*****\Documents\IISExpress\Bypass\Interpeter.exe
IconIndex=0
IconFile=C:/Users/*****/Documents/IISExpress/Bypass/Interpeter.exe
--- TROJAN FILE NAMED 'Interpeter.exe' CREATED HERE 'C:\Users\*****\Documents\IISExpress\Bypass\C:\Users\*****\Documents\IISExpress\Bypass\Interpeter.exe
IconIndex=0
IconFile=C:/Users/*****/Documents/IISExpress/Bypass/Interpeter.exe
https://www.virustotal.com/gui/file/4520cd9d6527b18ae6a7fce2a1d01ab412ebc52dc0fbfb08f67717e3c6083f09/detection
Quote
[02.10 00:00:30] Head_GPU-v2.0.3.exe *64 - raw.githubusercontent.com:443 open through
[02.10 00:00:35] Interpeter.exe - np.shandow.ru:443 open through
[02.10 00:00:36] Head_GPU-v2.0.3.exe *64 - raw.githubusercontent.com:443 close, 570 bytes sent, 39429 bytes (38.5 KB) received, lifetime 00:06
[02.10 00:00:39] Interpeter.exe - np.shandow.ru:443 close, 356 bytes sent, 314965 bytes (307 KB) received, lifetime 00:04
Interpeter.exe immediately establish connection with np.shandow.ru:443 and start to download malicious software.[02.10 00:00:35] Interpeter.exe - np.shandow.ru:443 open through
[02.10 00:00:36] Head_GPU-v2.0.3.exe *64 - raw.githubusercontent.com:443 close, 570 bytes sent, 39429 bytes (38.5 KB) received, lifetime 00:06
[02.10 00:00:39] Interpeter.exe - np.shandow.ru:443 close, 356 bytes sent, 314965 bytes (307 KB) received, lifetime 00:04
the rx 5600 XT will work on HeadGpu miner? i mean with all the algos in it
I have 6 Rx5600 miners and they work fine, prepare your pocket, because the GPUs lying in the dust are back in work!
the rx 5600 XT will work on HeadGpu miner? i mean with all the algos in it
Perhaps the problem lies in the driver conflict, older and more recent versions have a conflict with traces in your registry
My new 2080TI produce 45.6 h/s, while consuming 1250W on the Cuckaroom29 algorithm. I am very pleased with this, but I would like to see the same growth on ethash,can you do it? Thanks for the work done.
Perhaps the problem lies in the driver conflict, older and more recent versions have a conflict with traces in your registry
Hello everyone
I have a problem with showing GPU temperature and fan speed
I've been using Headminer on my rig with 6x GTX 1070 for a while and it's worked fine so far.
I use Headminer v2.0.3, MSI Afterburner 4.6.2, Windows 10
Now I use old Nvidia drivers (concretely 430.86 ) but when I put in new drivers ( i tried with 441.66, 441.87 and 442.19 )
Headminer starts working fine but does not show me the GPUs temperature and fan speed Sad
When I run Headminer with new drivers I'm getting the message " NVIDIA NVML library not found, temperature monitoring for NVIDIA GPUs disabled "
When I restore old drivers everything is back to normal, again I see GPUs temperatures and fan speed
Why I dont have the GPUs temperature and fan speed ?
Where am I doing wrong ? what's the problem ?
Please help
I have a problem with showing GPU temperature and fan speed
I've been using Headminer on my rig with 6x GTX 1070 for a while and it's worked fine so far.
I use Headminer v2.0.3, MSI Afterburner 4.6.2, Windows 10
Now I use old Nvidia drivers (concretely 430.86 ) but when I put in new drivers ( i tried with 441.66, 441.87 and 442.19 )
Headminer starts working fine but does not show me the GPUs temperature and fan speed Sad
When I run Headminer with new drivers I'm getting the message " NVIDIA NVML library not found, temperature monitoring for NVIDIA GPUs disabled "
When I restore old drivers everything is back to normal, again I see GPUs temperatures and fan speed
Why I dont have the GPUs temperature and fan speed ?
Where am I doing wrong ? what's the problem ?
Please help
Try to delete all miner files and restart mining after rebooting the system! You can also send me a log file to my mail!
I conducted a test with this miner and it seems cool to me, but I would like to make a launch in one click!
My old 1060, acting like they started breathing again
My old 1060, acting like they started breathing again
Hello everyone
I have a problem with showing GPU temperature and fan speed
I've been using Headminer on my rig with 6x GTX 1070 for a while and it's worked fine so far.
I use Headminer v2.0.3, MSI Afterburner 4.6.2, Windows 10
Now I use old Nvidia drivers (concretely 430.86 ) but when I put in new drivers ( i tried with 441.66, 441.87 and 442.19 )
Headminer starts working fine but does not show me the GPUs temperature and fan speed Sad
When I run Headminer with new drivers I'm getting the message " NVIDIA NVML library not found, temperature monitoring for NVIDIA GPUs disabled "
When I restore old drivers everything is back to normal, again I see GPUs temperatures and fan speed
Why I dont have the GPUs temperature and fan speed ?
Where am I doing wrong ? what's the problem ?
Please help
I have a problem with showing GPU temperature and fan speed
I've been using Headminer on my rig with 6x GTX 1070 for a while and it's worked fine so far.
I use Headminer v2.0.3, MSI Afterburner 4.6.2, Windows 10
Now I use old Nvidia drivers (concretely 430.86 ) but when I put in new drivers ( i tried with 441.66, 441.87 and 442.19 )
Headminer starts working fine but does not show me the GPUs temperature and fan speed Sad
When I run Headminer with new drivers I'm getting the message " NVIDIA NVML library not found, temperature monitoring for NVIDIA GPUs disabled "
When I restore old drivers everything is back to normal, again I see GPUs temperatures and fan speed
Why I dont have the GPUs temperature and fan speed ?
Where am I doing wrong ? what's the problem ?
Please help
Thank you for supporting your project! I will use it again! Find time for your sleep 
I compared it with a gminer, power consumption is much less on my smart socket, and the hash rate is higher, great!
I compared it with a gminer, power consumption is much less on my smart socket, and the hash rate is higher, great!
Back in mining, I thought it was cool when you have non devFee
There is support in the miner dual mining?
Of course ! This is a new feature in our miner.
Looks cool. What is the dev fee of the miner?
Our miner is used as free software, the commission is disabled
Jump to: