Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Este fío arquivouse. Faga unha nova pregunta se precisa axuda.

How do I get rid of JSCoinminer malware?

  • 1 resposta
  • 2 have this problem
  • 13 views
  • Last reply by SueWitch

interlop3r
interlop3r
more options

I'll try to put it simple:

I restored Firefox because I messed up with fonts and wanted to go back to Default. As expected Firefox created a folder with old stuff and kept my History, Favorites, Downloads and so on. Right after it restored I noticed it kept downloading a lot of .dll and they were all okay according to my antivirus Norton by Symantec.

However, right after that Norton started notifying I was being attacked by JS Coinminer Download 6 and it came from my College website that I haven't visited in weeks. Why is that so? How can I get firefox 100% clean? Everytime I open firefox Norton shows up and says it blocked this cryptocurrency mining attack.

Further info: This is what Norton says about the malware: JScoinminer is a detection for a JavaScript cryptocurrency miner that runs in web browsers. The javascript coin miner consumes enormous CPU resources, making computer use sluggish. The JavaScript is loaded in the browser when the user visits a web page hosting the JavaScript. The JavaScript runs as long as the user stays on the web page.

And Norton notifies me that the intrusion attempt comes from \DEVICE\HARDDISKVOLUME3\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE.

I'll try to put it simple: I restored Firefox because I messed up with fonts and wanted to go back to Default. As expected Firefox created a folder with old stuff and kept my History, Favorites, Downloads and so on. Right after it restored I noticed it kept downloading a lot of .dll and they were all okay according to my antivirus Norton by Symantec. However, right after that Norton started notifying I was being attacked by JS Coinminer Download 6 and it came from my College website that I haven't visited in weeks. Why is that so? How can I get firefox 100% clean? Everytime I open firefox Norton shows up and says it blocked this cryptocurrency mining attack. Further info: This is what Norton says about the malware: JScoinminer is a detection for a JavaScript cryptocurrency miner that runs in web browsers. The javascript coin miner consumes enormous CPU resources, making computer use sluggish. The JavaScript is loaded in the browser when the user visits a web page hosting the JavaScript. The JavaScript runs as long as the user stays on the web page. And Norton notifies me that the intrusion attempt comes from \DEVICE\HARDDISKVOLUME3\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE.

All Replies (1)

SueWitch
SueWitch
more options

Try this

https://support.norton.com/sp/en/us/home/current/solutions/v119650544_EndUserProfile_en_us