PhoenixMiner 6.2c: fastest Ethereum/Ethash miner with lowest devfee (Win/Linux)

[vapourminer]

This morning two different users posted a 6.0 version of this miner.
I noticed both posts got deleted so I guess they were spammers.

Sadly I downloaed and launched that 6.0 version.

I didn't mine because I got an error saying there was a problem with my drivers, advising me to go back to the 5.5c version.

Now I deleted it but I'm worried I could have installed some kind of virus in my pc.

Does someone knows what was that supposed 6.0 version?

I know it's clearly a fake version, but what was supposed to do? Maybe just to mine for another wallet instead of mine?

I mostly need to know if my passwords and everything in my pc could be compromised, or if I'm fine by just deleting it.

By the way, windows didn't find any virus. That's weird considering that the official phoenixminer gets blocked by Chrome and by windows because they see it as a threat.

considering the amount of time and money used (as in bought/hacked accounts sometimes) posting these malicious versions i would take no chances and change all passwords and format/reinstall windows.

the fact windows AV didnt pickup anything just means it hasnt seen it before, it can still steal stuff, install keyloggers, rootkits etc.

i have dedicated mining rigs, so if one gets compromised there is nothing of value on it and i just reimage the disk back to a known good image. or just format/reinstall from scratch.

tldr do not trust that machine anymore.

[atwd]

This morning two different users posted a 6.0 version of this miner.
I noticed both posts got deleted so I guess they were spammers.

Sadly I downloaed and launched that 6.0 version.

I didn't mine because I got an error saying there was a problem with my drivers, advising me to go back to the 5.5c version.

Now I deleted it but I'm worried I could have installed some kind of virus in my pc.

Does someone knows what was that supposed 6.0 version?

I know it's clearly a fake version, but what was supposed to do? Maybe just to mine for another wallet instead of mine?

I mostly need to know if my passwords and everything in my pc could be compromised, or if I'm fine by just deleting it.

By the way, windows didn't find any virus. That's weird considering that the official phoenixminer gets blocked by Chrome and by windows because they see it as a threat.

considering the amount of time and money used (as in bought/hacked accounts sometimes) posting these malicious versions i would take no chances and change all passwords and format/reinstall windows.

the fact windows AV didnt pickup anything just means it hasnt seen it before, it can still steal stuff, install keyloggers, rootkits etc.

i have dedicated mining rigs, so if one gets compromised there is nothing of value on it and i just reimage the disk back to a known good image. or just format/reinstall from scratch.

tldr do not trust that machine anymore.

I checked it with malwarebytes and it found a malware that it's supposed to mine for himself instead of me.

It didn't find any Spyware or anything else. Maybe these scammers are not that good at coding and they just released a version of the miner that will mine at their wallet and nothing else.

Anyway it's my gaming pc so I don't have any document on it, just games and mining.

[Xal0lex]

This morning two different users posted a 6.0 version of this miner.
I noticed both posts got deleted so I guess they were spammers.

Sadly I downloaed and launched that 6.0 version.

During the day, a huge number of posts with suspicious links to download PhoenixMiner 6.0 are deleted. I personally nuke several dozen users who post such posts during the day.

Before downloading, read the first post of the topic. It also clearly states that:

IMPORTANT! You can find the latest version of PhoenixMiner (as well as older releases and beta versions) here:

    https://phoenixminer.info/downloads/

Follow only the posts of the author of the topic and the changes in the first post. Only his posts contain clean download links.

[Welsh]

I mostly need to know if my passwords and everything in my pc could be compromised, or if I'm fine by just deleting it.

By the way, windows didn't find any virus. That's weird considering that the official phoenixminer gets blocked by Chrome and by windows because they see it as a threat.

I always advise users that if they suspect they're compromised, but can't actually verify it themselves, i.e would have to rely on others opinion on the severity to take the approach of nuking everything, and starting again. Although, it's likely that the malicious links aren't very sophisticated, and won't evade most security sweeps, I'd still recommend a complete reinstall of your operating system, changing of passwords, potentially reinstalling bios if you think its warranted.

When you are your own bank, there shouldn't be any compromises when it comes to securing your Bitcoin. Take every precaution you can, secure your system, and be a little more careful next time.

As stated above, hundreds of accounts per month get nuked to oblivion spreading this, however it's a concentrated attack, and therefore can't always be caught before someone downloads it unfortunately.

Don't rely on Windows Security. It's just as reliable as other anti viruses i.e more bloatware than usefulness for the security conscious. 

[Real-Duke]

Sadly I downloaed and launched that 6.0 version.

Sad to read that! The same thing happend to me some weeks ago and 24h later all my BTC have gone!
You have installed a trojan on your system, I got exactly the same driver message after running the bat file.

They scan you system and look for everything related to crypto. Also if you have a NAS or similiar would be scanned and files be downloaded by them.
Please take care that you have not made a digital copy of your seed! If yes move all your coins as fast as you can to a fresh gererated offline wallet!
Dont't use ur PC anymore before you have made a clean install of the OS and change all your passwords..first email and than from all saved accounts on your browser.
Also please have a look into your Bitcointalk Profile under: Account Related Settings - "Your logged IPs for the last 30 days." if you find a fresh login from a IP that dont' belongs to you!
If you find some, please change imediatly your Password from here (but still: first of all your email account!)
It tooks me 3 days to restore everything from backups, make a clean setup for my Ledger Nano S and so on...
Good luck to you!

[CrayjeksAjek]

Wow as Im reading about all these hacks I see a post about 6.0 beta. Reported that ish. DO NOT DOWNLOAD ANY VERSIONS OF ANYTHING FROM "NEW MEMBERS"

[dazmann]

You can’t use a 3gb card for eth

Why not?
And do you have any suggestions on what I can mine (profitably) with my setup?

Eth DAG is over 4GB, your GPU is only 3GB. You need a GPU with more than 4GB to mine Eth now.
To see what you can mine with your GPU you can start at whattomine dot com.

[frankj]

hi, newbie here.

I am using RaveOS. Been trying to OC my ASUS RTX 2060 Dual OC but unable to get 30Mhs.
Power consumption always around 130W+ (with Trex, I get 95W-100W)

If anyone can share your RTX 2060 OC setting, that'd be great.

Thanks!

[maxeprom]

Wow as Im reading about all these hacks I see a post about 6.0 beta. Reported that ish. DO NOT DOWNLOAD ANY VERSIONS OF ANYTHING FROM "NEW MEMBERS"

Now that you mention about "other" downloads, what about phoenixminer.ORG? It differ's from phoenixminer.INFO?

[Toughit]

I mostly need to know if my passwords and everything in my pc could be compromised, or if I'm fine by just deleting it.

By the way, windows didn't find any virus. That's weird considering that the official phoenixminer gets blocked by Chrome and by windows because they see it as a threat.

I always advise users that if they suspect they're compromised, but can't actually verify it themselves, i.e would have to rely on others opinion on the severity to take the approach of nuking everything, and starting again. Although, it's likely that the malicious links aren't very sophisticated, and won't evade most security sweeps, I'd still recommend a complete reinstall of your operating system, changing of passwords, potentially reinstalling bios if you think its warranted.

When you are your own bank, there shouldn't be any compromises when it comes to securing your Bitcoin. Take every precaution you can, secure your system, and be a little more careful next time.

As stated above, hundreds of accounts per month get nuked to oblivion spreading this, however it's a concentrated attack, and therefore can't always be caught before someone downloads it unfortunately.

Don't rely on Windows Security. It's just as reliable as other anti viruses i.e more bloatware than usefulness for the security conscious. 

I thought newbies with zero merit and less than 10 posts couldn't post links?

[UserU]

I thought newbies with zero merit and less than 10 posts couldn't post links?

They are still able to embed links in texts using the URL BB code

For instance:

Code:

[url=https://google.com]This is a Google link[/url]

This is a Google link

[deedeeranged]

Wow as Im reading about all these hacks I see a post about 6.0 beta. Reported that ish. DO NOT DOWNLOAD ANY VERSIONS OF ANYTHING FROM "NEW MEMBERS"

Now that you mention about "other" downloads, what about phoenixminer.ORG? It differ's from phoenixminer.INFO?

Yes they are completely different the phoenixminer.INFO is the only one, all others I wouldn't touch with a bargepole or in other words avoid them like the plague.

[Tiggz]

Hey All, I've been using phoenix since v5.5 I just updated to 5.9 from this site and I received a security warning I've never seen. Says it has a trojan called AndroidOS/Multiverze in the miner. I have seen all the !pua and coinminer warnings for all miners, but never anything like this. I have confirmed multiple times this is in the zip. Any idea what this is or if it's concerning? Thanks!

[Lafu]

Hey All, I've been using phoenix since v5.5 I just updated to 5.9 from this site and I received a security warning I've never seen. Says it has a trojan called AndroidOS/Multiverze in the miner. I have seen all the !pua and coinminer warnings for all miners, but never anything like this. I have confirmed multiple times this is in the zip. Any idea what this is or if it's concerning? Thanks!

Do you have downloaded the files from Real download link for PhoenixMiner : https://phoenixminer.info/downloads/  ?
Or what kind of links you have used ? If you have used some download links posted from random Users lately you should change your password everywhere and scan your system.
Because if you downloaded the files from random posted Users it was Malware , if you got the files from the Original download then you should be good.

[Real-Duke]

Download only content from the first post of this thread!!
Avoid any other Post from new Members wich contain:

"Glad to see you new crypto software LHR-pill"




This Posts contain malware so please be carefull!

[Tiggz]

Hey All, I've been using phoenix since v5.5 I just updated to 5.9 from this site and I received a security warning I've never seen. Says it has a trojan called AndroidOS/Multiverze in the miner. I have seen all the !pua and coinminer warnings for all miners, but never anything like this. I have confirmed multiple times this is in the zip. Any idea what this is or if it's concerning? Thanks!

Do you have downloaded the files from Real download link for PhoenixMiner : https://phoenixminer.info/downloads/  ?
Or what kind of links you have used ? If you have used some download links posted from random Users lately you should change your password everywhere and scan your system.
Because if you downloaded the files from random posted Users it was Malware , if you got the files from the Original download then you should be good.

I got it from the first page of this forum like always. its the .info directory.

[deedeeranged]

Hey All, I've been using phoenix since v5.5 I just updated to 5.9 from this site and I received a security warning I've never seen. Says it has a trojan called AndroidOS/Multiverze in the miner. I have seen all the !pua and coinminer warnings for all miners, but never anything like this. I have confirmed multiple times this is in the zip. Any idea what this is or if it's concerning? Thanks!

Do you have downloaded the files from Real download link for PhoenixMiner : https://phoenixminer.info/downloads/  ?
Or what kind of links you have used ? If you have used some download links posted from random Users lately you should change your password everywhere and scan your system.
Because if you downloaded the files from random posted Users it was Malware , if you got the files from the Original download then you should be good.

I got it from the first page of this forum like always. its the .info directory.

Then you are good. A lot of miners are getting these warnings and I think it maybe has also something to do with LHR code being used.

[AlexanderM2]

Still not LHR Unlock??

[mrbillishere]

Hey all, got what amounts to a head's up for folks. (Not sure there's a solution...)

I have a rig running Win10 with two nVidia GPUs, one being a 3060 so I have the drivers v470.05 installed to unlock full hashrate for that GPU which is also installed in a 16-bit slot and cabled up to HDMI. The other nVidia card is a 3060 Ti (non-LHR) and this system also has a pair of AMD RX580-8GB in it. PM is in charge of all hardware control for all four cards.

Things were completely stable until yesterday and the rig was still running PM v5.7b (just due to laziness on my part - no incentive to update PM's bits, as nothing was having an issue.)

As I said, all was well - the rig was up over 600 hours non-stop until I un-paused updates and allowed the monthly cumulative updates for Windows to be installed yesterday. (I do this manually, every month.)

Now, for these two nVidia cards on that driver version, PM has lost its ability to set clock speeds for GPU and Memory. Instead, I get messages with error - 137, like this:

GPU1: Unable to reset memory clock delta - error -137
GPU3: Unable to reset memory clock delta - error -137
GPU1: Unable to set GPU clock delta to -400 MHz - error -137
GPU1: Unable to set memory clock delta to 1200 MHz - error -137
GPU3: Unable to set GPU clock delta to -200 MHz - error -137
GPU3: Unable to set memory clock delta to 1370 MHz - error -137

I can only assume that something in this month's Win10 patches is messing with stuff and it could be/probably is specific to this particular nVidia driver. One thing I did note was that for the first 20 minutes after the reboot, after patching, everything was still normal as far as mining was concerned. But 22 minutes into it, I saw this appear in the log:

2021.12.17:19:03:55.165: gps3 CUDA error in CudaProgram.cu:256 : unknown error (999)
2021.12.17:19:03:55.165: GPU3 CUDA error in CudaProgram.cu:474 : unknown error (999)
2021.12.17:19:03:55.165: GPU3 GPU3 search error: unknown error
2021.12.17:19:03:55.165: gps3 CUDA error in CudaProgram.cu:256 : unknown error (999)
2021.12.17:19:03:55.165: wdog Fatal error detected. Restarting.
2021.12.17:19:03:55.165: eths Eth: New job #7a9544e3 from ssl://us1.ethermine.org:5555; diff: 4295MH
2021.12.17:19:03:55.219: GPU1 CUDA error in CudaProgram.cu:474 : unknown error (999)
2021.12.17:19:03:55.219: GPU1 GPU1 search error: unknown error

(GPU3 is the 3060, GPU1 is the 3060Ti)


FWIW, there is no difference if I run PM v5.9d with my same config file, I get exactly the same error when PM is starting up as above, the 'unable to set/reset clocks' errors. My next action will be to look in recently-installed updates to see if there is something like a driver that was downloaded after the reboot which I might be able to uninstall.

What's truly insidious about this is the fact that if I test by using PM in benchmark mode and I employ MSI Afterburner to set core clocks/frequencies/undervolts (instead of PM) - that all still works just fine. And Afterburner is not a recent version, it's one that's a few versions behind because I prefer the one with the older UI - which shows that evidently it is still possible (for apps other than PM) to set clock deltas, post this-month's Win10 updates, and with the same version of the nVidia driver, and without said app requiring some sort of update.

OK, there you have it. Sorry about the long post. Just sharing with the class. I've been using PM for a long time and love how stable my particular (four) rigs are - or, were - up till now. BTW, none of the other rigs I have require that funky driver, in fact they're using older nVidia drivers than 470.05, and none of them are any worse for the wear after yesterday's patching. Just this funky one. Cheers.

[miner29]

Current is 497.09 for windows.  This is most likely the issue.