EWBF's CUDA Zcash miner

[essocup]

Hi EWBF
   
   Today I found miner as trojan Win32/Detplock.

https://i.imgur.com/OULSM5T.jpg

[1713560972]

1713560972

[mirny]

Just  an fyi if you loose the miner.exe file off your system and running windows 10, you can thank defender for auto deleting the file without permission for that, only way around it seeing you cant permanently disable defender is to allow an exception, have to use admin account disable realtime protection and then unzip and point to the miner.exe file and exclude it, else one day you'll wont have the file.

Yet again Microsoft  thinking for us poor humans..

Icon

Avast is doing same thing.

[Velgelm]

EWBF thanks for the miner!
0.0.8b works like EQM 1.0.4a
My speeds on your miner:


Nice work!

[ioglnx]

The Virus detection is a false positive. Meanwhile I got the check report of Avast labs of version 0.0.7 was virus free.

[Amph]

The Virus detection is a false positive. Meanwhile I got the check report of Avast labs of version 0.0.7 was virus free.

hidden/stealth malicious code cannot be detected in that way, it's almost impossible to detect them with antivirus of any kind

i'm running it in a secure machine where there is nothing to steal


btw i can not connect to suprnova zclassic with this miner

[pallas]

The Virus detection is a false positive. Meanwhile I got the check report of Avast labs of version 0.0.7 was virus free.

hidden/stealth malicious code cannot be detected in that way, it's almost impossible to detect them with antivirus of any kind

i'm running it in a secure machine where there is nothing to steal

I remember thunderbyte antivirus detecting new viruses heuristically back in '94. It worked by analising machine code.
But I don't know how that technology progressed over the years. Given the recent focus on AI, they should be doing good. If they want to, that is ;-)

[ioglnx]

The Virus detection is a false positive. Meanwhile I got the check report of Avast labs of version 0.0.7 was virus free.

hidden/stealth malicious code cannot be detected in that way, it's almost impossible to detect them with antivirus of any kind

i'm running it in a secure machine where there is nothing to steal


btw i can not connect to suprnova zclassic with this miner

As I said i sent it the AVAST Lab they have other methods and analysis than just rely on the scanner and heuristics. I'm sure they go much deeper than you can imagine.

[prologas]

Anyone have the hashrate for GTX 1050/ ti just want to know?

thanks in advance

GTX 1050 - 125 Sol/s 60W Stock // 118 Sol/s OC TDP 70% slow down 50W = 2.36s/w
GtX 750 Ti - 64 Sol/s 30W Stock // 75 Sol/s OC 32W = 2.34s/w

I think a good idea to buy GTX 1060, because it makes ~200 Sol/s OC with slow down of TDP to 65W = 3.07s/w

That still makes it a tough call too, because of price per card vs. sol's, 1060's are really sweet though I have two but can't get them stable when I change the TDP so left them at stock and OC'ed a little to get them to 245 - 255 sol's, but power is worse than the 65w. they are the Zotec GTX 1060 3GB mini though so this might be the issue.  I would really like to just force them in to P0 but can't get it even with NVidia-smi utility.  they stay in P2 which underclocks the memory and hobbles the core as well.  OCing to just 1911 core and 8008 on memory at least gets me to where I want to be minus the power reduction.  Does go to P0 if I game with it though.  10 series is just strange with this

I am using Palit products, seems quite well with OC, but it is not a mini version although. And one more thing, I had a strange experience with OC on differend pools. Don't know how, but at suprnova you can do X OC and at mgate you can do Y OC before crash. I am tested it for a couple of days.

[bensam1231]

The Virus detection is a false positive. Meanwhile I got the check report of Avast labs of version 0.0.7 was virus free.

hidden/stealth malicious code cannot be detected in that way, it's almost impossible to detect them with antivirus of any kind

i'm running it in a secure machine where there is nothing to steal

I remember thunderbyte antivirus detecting new viruses heuristically back in '94. It worked by analising machine code.
But I don't know how that technology progressed over the years. Given the recent focus on AI, they should be doing good. If they want to, that is ;-)

Heuristical virus detection is in pretty much every new good AVS. They name it different things, but you can find it in there. Thing is it doesn't know what to look for if there isn't a pattern, so someone can just change their code a bit so it operates in a different way and it wont find anything. Heuristical virus detection isn't the same thing as being able to find something that is a virus no matter what or functions like one.

[pallas]

The Virus detection is a false positive. Meanwhile I got the check report of Avast labs of version 0.0.7 was virus free.

hidden/stealth malicious code cannot be detected in that way, it's almost impossible to detect them with antivirus of any kind

i'm running it in a secure machine where there is nothing to steal

I remember thunderbyte antivirus detecting new viruses heuristically back in '94. It worked by analising machine code.
But I don't know how that technology progressed over the years. Given the recent focus on AI, they should be doing good. If they want to, that is ;-)

Heuristical virus detection is in pretty much every new good AVS. They name it different things, but you can find it in there. Thing is it doesn't know what to look for if there isn't a pattern, so someone can just change their code a bit so it operates in a different way and it wont find anything. Heuristical virus detection isn't the same thing as being able to find something that is a virus no matter what or functions like one.

Heuristic virus detection is not looking for a pattern. That's classic virus detection.
Thunderbite antivirus did automatic unencryption and code analysis more than 20 years ago. I played with it (at machine code level) back then, and you had to try hard to avoid detection. Again that was 20 years ago, so if they did their job, it must be a lot better now.

[sp_]

Heuristic virus detection is not looking for a pattern. That's classic virus detection.
Thunderbite antivirus did automatic unencryption and code analysis more than 20 years ago. I played with it (at machine code level) back then, and you had to try hard to avoid detection. Again that was 20 years ago, so if they did their job, it must be a lot better now.

But the antivirus software will not detect the buffer overflows. Compile nheqminer in visual studio and read the warnings, you will see that this new miner is using unsafe methods, ready for attack.

[pallas]

Heuristic virus detection is not looking for a pattern. That's classic virus detection.
Thunderbite antivirus did automatic unencryption and code analysis more than 20 years ago. I played with it (at machine code level) back then, and you had to try hard to avoid detection. Again that was 20 years ago, so if they did their job, it must be a lot better now.

But the antivirus software will not detect the buffer overflows. Compile nheqminer in visual studio and read the warnings, you will see that this new miner is using unsafe methods, ready for attack.

Then every program is "ready for attack" LoL!!! Especially all the software on which our PCs and servers are based on, like openssl apache bind etc.

[sp_]

Then every program is "ready for attack" LoL!!! Especially all the software on which our PCs and servers are based on, like openssl apache bind etc.

hehe :-) The point  is that you don't need to store the virus in the executable, you just add a backdoor(buffer overflow) that can be used to upload the virus. We have too many closed source miners right now.
Difficult to know if they contain backdoors or malware.

[pallas]

Then every program is "ready for attack" LoL!!! Especially all the software on which our PCs and servers are based on, like openssl apache bind etc.

hehe :-) The point  is that you don't need to store the virus in the executable, you just add a backdoor(buffer overflow) that can be used to upload the virus. We have too many closed source miners right now.
Difficult to know if they contain backdoors or malware.

I agree with you, but a buffer overflow is not a backdoor. You can exploit a buffer overflow to gain privileges, but you need access to the machine. The backdoor code must include networking and other routines which a good antivirus should be able to detect. This is a bit offtopic, though.
In general, "never trust any binary" is a good rule ;-)

[sp_]

I agree with you, but a buffer overflow is not a backdoor.

No, but the creator of a "harmless closed source miner" could exploit the buffer overflow to upload malware.

[bensam1231]

The Virus detection is a false positive. Meanwhile I got the check report of Avast labs of version 0.0.7 was virus free.

hidden/stealth malicious code cannot be detected in that way, it's almost impossible to detect them with antivirus of any kind

i'm running it in a secure machine where there is nothing to steal

I remember thunderbyte antivirus detecting new viruses heuristically back in '94. It worked by analising machine code.
But I don't know how that technology progressed over the years. Given the recent focus on AI, they should be doing good. If they want to, that is ;-)

Heuristical virus detection is in pretty much every new good AVS. They name it different things, but you can find it in there. Thing is it doesn't know what to look for if there isn't a pattern, so someone can just change their code a bit so it operates in a different way and it wont find anything. Heuristical virus detection isn't the same thing as being able to find something that is a virus no matter what or functions like one.

Heuristic virus detection is not looking for a pattern. That's classic virus detection.
Thunderbite antivirus did automatic unencryption and code analysis more than 20 years ago. I played with it (at machine code level) back then, and you had to try hard to avoid detection. Again that was 20 years ago, so if they did their job, it must be a lot better now.

What do you think heuristics is looking for in bits and pieces of code? Just because something isn't looking for a full virus doesn't mean it isn't looking for bits of one or the entry methods.

[giagge]

The Virus detection is a false positive. Meanwhile I got the check report of Avast labs of version 0.0.7 was virus free.

hidden/stealth malicious code cannot be detected in that way, it's almost impossible to detect them with antivirus of any kind

i'm running it in a secure machine where there is nothing to steal


btw i can not connect to suprnova zclassic with this miner

The problem is suprnova not miner , try now its ok .

[Qumiu]

 it's amazing for version 0.0.8b. I got speeds average 375 on my gtx1070, thanks EWBF

[Lucky - Luciano]

EWBF, Nicehash released improved miner. It seems that they hacked your computer and steal your improved version miner . Publish now a new version until it's too late .

[EWBF_]

EWBF, Nicehash released improved miner. It seems that they hacked your computer and steal your improved version miner . Publish now a new version until it's too late .

You ask and i give! 0.0.9b released see first post.