How is that related to FF itself?

Would you please take a look at this article and follow the instructions :

https://malwaretips.com/blogs/remove-coinhive-miner-virus/

McCoy said

Would you please take a look at this article and follow the instructions : https://malwaretips.com/blogs/remove-coinhive-miner-virus/

Not working, thanks for reply.

Please use more than 1 scanner as each uses diff tech :

• https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware

Save your Report and google each before deleting anything as do not want to delete something you need, If need help :

• https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/

Uninstall any Bittorrent apps, uninstall cracked programs and delete cracks then Post in only 1 forum, then wait. Please let us know if this solved your issue or if need further assistance.

Maybe this will help :

https://www.bleepingcomputer.com/virus-removal/remove-coinhive.com-in-browser-miner

and :

https://www.pcrisk.com/removal-guides/12449-coinhive-virus

also :

http://greatis.com/blog/howto/remove-coinhive.htm

If everything else fails, maybe you'd like to try this add-on :

https://addons.mozilla.org/en-US/firefox/addon/coinhive-blocker/

Under "About this extension" the developer says :

" If you found a page, where is mining script still active, please contact me by contact form (http://mofo22.net/?page=kontakt) "

You can check for recently installed suspicious or unknown extensions.

Start Firefox in Safe Mode to check if one of the extensions ("3-bar" menu button or Tools -> Add-ons -> Extensions) or if hardware acceleration is is causing the problem.

• switch to the DEFAULT theme: "3-bar" menu button or Tools -> Add-ons -> Appearance
• do NOT click the "Refresh Firefox" button on the Safe Mode start window

• https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode
• https://support.mozilla.org/en-US/kb/troubleshoot-extensions-themes-to-fix-problems

See also:

• https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware

cor-el said

You can check for recently installed suspicious or unknown extensions. Start Firefox in Safe Mode to check if one of the extensions ("3-bar" menu button or Tools -> Add-ons -> Extensions) or if hardware acceleration is is causing the problem.

• switch to the DEFAULT theme: "3-bar" menu button or Tools -> Add-ons -> Appearance
• do NOT click the "Refresh Firefox" button on the Safe Mode start window

• https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-using-safe-mode
• https://support.mozilla.org/en-US/kb/troubleshoot-extensions-themes-to-fix-problems

See also:

• https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware

In safe mode still showing coinhive script. I tried malwarebytes and malwarefox still not working. Do i have to install fresh Windows .

Thanks, Ali

HI, you can do as you wish, we do not recommend you do that if there are places you have yet to explore or avail your self of the free service. We also would not be recommending such extreme things as that is up to you to decide.

We have provided you with a lot of information but you have yet not decided to go to the Pros as was suggested many reply's ago by myself. Please do so.

Save your Report and google each before deleting anything as do not want to delete something you need, If need help :

• https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/

Uninstall any Bittorrent apps, uninstall cracked programs and delete cracks then Post in only 1 forum, then wait.

As Mozilla Firefox Support is for a Browser please take your questions to the appropriate virus/malware companies and support sites and forums.

These people specialize in malware while Firefox Support does a browser.

McCoy said

If everything else fails, maybe you'd like to try this add-on :
https://addons.mozilla.org/en-US/firefox/addon/coinhive-blocker/
Under "About this extension" the developer says :
" If you found a page, where is mining script still active, please contact me by contact form (http://mofo22.net/?page=kontakt) "

There must have been a reason why the developer wrote this extension .....