Your computer is infected with malicious software? Do you have pop-ups on your PC?
If so, search this blog for removal instructions or browse computer threats by category.

Friday, June 21, 2013

What is Macromedia.exe and how to remove it?

Tell your friends:

Macromedia.exe - CPU miner for Bitcoin

What is Macromedia.exe?

Macromedia.exe is a part of multi-threaded CPU miner for Bitcoin crypto-currency system. Very often this application is eating up 70% or even more of the CPU. It's not essential for Windows and may cause problems. If you knowingly installed this Bitcoin miner on your computer then there's probably nothing to worry about. Unless you downloaded a rogue Bitcoin miner from a shady website. Please note that genuine miner might be flagged as malware as well. Very often, scammers are using this application to earn quick bucks by monetizing botnets. They drop the main mining modules Macromedia.exe and shell.exe on infected computers and start mining. They usually set low mining speed, so that the Macromedia.exe*32 process only uses unused CPU cycles. Infected users quickly notice that their computers became very slow. This is a sign that your computer is infected and not only with RiskTool.Win32.BitCoinMiner or PUP.BitCoinMiner but also with Trojan downloaders and spyware. I recommend you to remove Macromedia.exe from your computer and run a full system scan with recommended anti-malware software.

File name: Macromedia.exe
Publisher: Bitcoin miner
File Location Windows XP: %APPDATA%\WindowsLogonS\Macromedia.exe
File Location Windows 7: %APPDATA%\Roaming\WindowsLogonS\Macromedia.exe
Startup file: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 'Macromedia.exe'


joey de bruijne said...

wow, this post helped me a lot. but at my pc is something different then the description said. i am using WIN 7
and that coin miner was at a map named WindowsHelp, but that can be somthing from my side