rmhuntley
Sr. Member
Offline
Activity: 980
Merit: 255
HALA MADRID
|
|
December 07, 2013, 09:26:18 AM |
|
hmm, it doesn't list anything when it does that for me. just says detecting gpu[]
|
|
|
|
hobbster
Newbie
Offline
Activity: 28
Merit: 0
|
|
December 07, 2013, 10:23:54 AM |
|
miner found by tucksmcgucks works and reports findings (yay !!!) but nothing appears in http://www.coinmine.pl/qrk??Anyone got QRK from this?
|
|
|
|
Pk9499
Newbie
Offline
Activity: 22
Merit: 0
|
|
December 07, 2013, 12:41:36 PM |
|
Re: ScarletRose miner - it does show a hash rate of about ~700-800 and has activity but AMD Catalyst shows 0% GPU activity whilst it's running AND the hashrate on my Quark CPU miner seems to more than halve.
No other GPUs, on board or otherwise in this system.
Oh and qcore64.dll was still active in Task Manager after closing the ScarletRose miner.... no thanks. I wish I could get Smelter working but I still have the "couldn't connect to server" issue.
|
|
|
|
MBTY
Newbie
Offline
Activity: 41
Merit: 0
|
|
December 07, 2013, 01:38:56 PM |
|
How long should I wait to mine quark in solo mode? 1:1262 A:0 R:0 HW:0 Speed: 1.47MH/s 5s: 1.46MH/s Sb.bat is smelter -o http://127.0.0.1:8772 -u username -p password -a QPuJArgxtDD997qUmkxLehRhxf7QST3SY8 -w 64 -g 2 -i 200
|
|
|
|
rmhuntley
Sr. Member
Offline
Activity: 980
Merit: 255
HALA MADRID
|
|
December 07, 2013, 02:14:44 PM |
|
Re: ScarletRose miner - it does show a hash rate of about ~700-800 and has activity but AMD Catalyst shows 0% GPU activity whilst it's running AND the hashrate on my Quark CPU miner seems to more than halve.
No other GPUs, on board or otherwise in this system.
Oh and qcore64.dll was still active in Task Manager after closing the ScarletRose miner.... no thanks. I wish I could get Smelter working but I still have the "couldn't connect to server" issue.
yup, exact same here. it's gone
|
|
|
|
macmac__
Newbie
Offline
Activity: 56
Merit: 0
|
|
December 07, 2013, 06:23:10 PM Last edit: December 07, 2013, 06:59:22 PM by macmac__ |
|
Looks like someone beat the OP to the catch on a QRK GPU miner that connects to a pool! Download link: http://rghost.net/50746534I just found this tonight, and it appears to be very recent. Not sure if I trust it yet, however.... as others have found out too: SCAM ALERT1. Libsnd is a email tool. 2. Qminer gets detected as a backdoor 3. You can give it any username/password combo you want, it doesn't care of authenticity 4. Fake stats 1) No gpu usage at all, cards power consumption same as in idle 2) qcore uses cpu to mine something, or just to cover it's steps, but the shown khash/s doesn't correlate in any way to either cpu, gpu or integrated gpu speed. 5. Libsnd starts to send data to a russian email server (smtp.yandex.ru) So if you've run this, on a machine with a wallets, I suggest you to move coins away from your current wallets! Your coinmine passwords are compromised too, so change them as soon as the site comes back. Some have fallen to this, atleast the account shown in miner window, if it's legit, has gotten some balance to it :/ http://176.221.46.81/address/QWu8maYVxDAmLG9VUyq7kdRQXLP8jksTNM
|
|
|
|
hobbster
Newbie
Offline
Activity: 28
Merit: 0
|
|
December 07, 2013, 08:23:39 PM |
|
Hello, i downloaded and used the scarletrose-thing around 11:00. I just synced my Quarkcoin Wallet and found a transaction to QXVK7V3vEEMPe8DaVTyqcSbDJ6WKGzcPHS I just wanted to start with a crypto and now lost my whole balance Status: 1177 Bestätigungen Datum: 07.12.2013 11:58 An: QXVK7V3vEEMPe8DaVTyqcSbDJ6WKGzcPHS Belastung: -17.9964 QRK Nettobetrag: -17.9964 QRK Transaktions-ID: 4364a8b239fa4e0aae34afc0727e8c450182996c6f736a9b646195935e945aa9 I could kick myself I just wanted to trade something around, now my trust and work is useless SCAM :/
|
|
|
|
Tenchi
|
|
December 07, 2013, 08:27:55 PM |
|
have used it to but no transactions so far. have you encrypted your wallet? because I have.
|
|
|
|
hobbster
Newbie
Offline
Activity: 28
Merit: 0
|
|
December 07, 2013, 08:36:56 PM |
|
No,
i just started with cryptocurrencys 6 days ago. I just mined with the cpu of my laptop
Anyone know how to remove this? Maybe macmac__?
|
|
|
|
rmhuntley
Sr. Member
Offline
Activity: 980
Merit: 255
HALA MADRID
|
|
December 07, 2013, 10:01:38 PM |
|
luckily, I had no quarks to hijack
|
|
|
|
hobbster
Newbie
Offline
Activity: 28
Merit: 0
|
|
December 07, 2013, 10:06:32 PM |
|
did you have other unencrypted wallets?
Was something stolen from them?
|
|
|
|
macmac__
Newbie
Offline
Activity: 56
Merit: 0
|
|
December 07, 2013, 10:13:49 PM |
|
Sorry for you loss I just finished analyzing the app' doings and atleast in my crapbox it did the following, 1) Grabbed the dummy wallets, (bitcoin, litecoin, quark) 2) Sent them to russia 3) Started mining with the cpu and sent the shares to a kimisufi server. It did not create any files or install watchers or keyloggers so you should (I take no responsibility thou) be safe when you delete the files and create a new wallet.
|
|
|
|
macmac__
Newbie
Offline
Activity: 56
Merit: 0
|
|
December 07, 2013, 10:29:05 PM |
|
Did more research and the server that it sents the the shares is this: ks211165.kimsufi.com:6010 and when you access you get redirected to http://www.coinmine.pl/yacp/So he is mining YaCoins... If he is the miner with highest hashrate in the pool he has a power of three 2600ks in his control. Here is a capture of the program doing it's dirty work, cought it red handed https://i.imgur.com/RKYQlrol.pngand here it's getting job from pool: https://i.imgur.com/Gpnadw0l.png
|
|
|
|
theprofileth
Full Member
Offline
Activity: 239
Merit: 100
Socialist Cryptocurrency Devote
|
|
December 07, 2013, 10:52:15 PM |
|
http://quarkcoin.tumblr.com/^^^^^^^^^^^^^^^^^ this motherfucker don't download, pay or use anything from them I just had 880 quark stolen from my wallet and all sent to QWu8maYVxDAmLG9VUyq7kdRQXLP8jksTNM which is the donation address for that person fucking bullshit
|
|
|
|
macmac__
Newbie
Offline
Activity: 56
Merit: 0
|
|
December 07, 2013, 11:08:20 PM Last edit: December 07, 2013, 11:20:19 PM by macmac__ |
|
You lost the most in this pulloff :/ So far he has gotten 1,6k quarks of this and who knows how many bitcoins, litecoins and whatever coins... Block explorer: http://176.221.46.81/address/QWu8maYVxDAmLG9VUyq7kdRQXLP8jksTNM[Yeah, this is a fair bit OT but... (Speaking words of wisdom, let it be / Let it be, let it be / Let it be, let it be / Whisper words of wisdom / Let it be)] E: His bitcoin donation address is empty so far, he hasn't moved anything there yet E2: Simple googling with that qrk address shows us that he has posted the same shit in some russian forums, good thing is that it didn't catch a flame and burn everyone with no encryption
|
|
|
|
hobbster
Newbie
Offline
Activity: 28
Merit: 0
|
|
December 07, 2013, 11:35:29 PM Last edit: December 07, 2013, 11:45:55 PM by hobbster |
|
macmac__ you are awesome!
Although i and others lost something, i am somewhat happy for your posts. Thank you for your Work!
And you are right, its lost. It will be the best to arrange with it and look forward. Luckily deleting is enough, and luckily i did not have any bitcoin or litecoin, what i had was my main Treasure, lol
Keep on being awesome macmac__!
BTW: virustotal says Backdoor.Win32.Hupigon (v)
|
|
|
|
theprofileth
Full Member
Offline
Activity: 239
Merit: 100
Socialist Cryptocurrency Devote
|
|
December 08, 2013, 12:19:55 AM |
|
Well from the logs in the pictures above I thought it had corrupted the files C:\Windows\SysWOW64\tzres.dll C:\Windows\System32\WSHTCPIP.DLL So I am hesitant to say just deleting is enough moral of the story is lock all your wallets, quarks were the only one that I have much in that wasn't locked and now well doesnt have anything
|
|
|
|
TBoneLouie
Newbie
Offline
Activity: 2
Merit: 0
|
|
December 08, 2013, 06:35:28 AM |
|
It's a shame about the ScarletRose scam. I know we were all looking for something that was (at least for now) too good to be true. I imagine smolen is probably snickering at us all right now A question about smelter, then, specifically worksize. When I am pool mining with scrypt, I notice that when I raise my worksize the pool server notes a higher share rate even though my hashrate is less than if I lower my worksize. Is the same true with solo mining for QRK or SRC with smelter? I notice a hashrate drop of 40% when I increase my WS from 128 -> 256, but will this translate to a 40% drop in block discovery rate or does the worksize compensate for that? I have managed to find 1 block of SRC with smelter, so I am definitely looking forward to future development of this project. Keep up the good work.
|
|
|
|
hobbster
Newbie
Offline
Activity: 28
Merit: 0
|
|
December 08, 2013, 07:29:50 AM |
|
Well from the logs in the pictures above I thought it had corrupted the files C:\Windows\SysWOW64\tzres.dll C:\Windows\System32\WSHTCPIP.DLL
Both files have a "last changed" Date in 2009 and 2010, so there could not have been a modification or am i wrong?
|
|
|
|
macmac__
Newbie
Offline
Activity: 56
Merit: 0
|
|
December 08, 2013, 11:06:50 AM Last edit: December 08, 2013, 11:17:57 AM by macmac__ |
|
Well from the logs in the pictures above I thought it had corrupted the files C:\Windows\SysWOW64\tzres.dll C:\Windows\System32\WSHTCPIP.DLL So I am hesitant to say just deleting is enough moral of the story is lock all your wallets, quarks were the only one that I have much in that wasn't locked and now well doesnt have anything Nope, it doesn't corrupt the files, it just opens them to access the dll's features. WSHTCPIP.dll is a WinSock Helper plugin, used in networking. Tzres.dll is used to manage timezones. Changing files last modified date back to what it was before is easy. Attribute changer 7E: Here are logs from CGminer doing the same things to the dlls https://i.imgur.com/CvoeqUIl.pnghttps://i.imgur.com/T4CGshEl.png
|
|
|
|
|