[Preview] Smelter - GPU miner for WhirlpoolX (Vanillacoin)

[rmhuntley]

hmm, it doesn't list anything when it does that for me. just says detecting gpu[]

[hobbster]

miner found by tucksmcgucks works and reports findings (yay !!!) but nothing appears in http://www.coinmine.pl/qrk??

Anyone got QRK from this?

[Pk9499]

Re: ScarletRose miner - it does show a hash rate of about ~700-800 and has activity but AMD Catalyst shows 0% GPU activity whilst it's running AND the hashrate on my Quark CPU miner seems to more than halve.

No other GPUs, on board or otherwise in this system.

Oh and qcore64.dll was still active in Task Manager after closing the ScarletRose miner.... no thanks.  I wish I could get Smelter working but I still have the "couldn't connect to server" issue.

[MBTY]

How long should I wait to mine quark in solo mode?

Code:

1:1262 A:0 R:0 HW:0 Speed: 1.47MH/s 5s: 1.46MH/s

Sb.bat is

Code:

smelter -o http://127.0.0.1:8772 -u username -p password -a QPuJArgxtDD997qUmkxLehRhxf7QST3SY8 -w 64 -g 2 -i 200

[rmhuntley]

Re: ScarletRose miner - it does show a hash rate of about ~700-800 and has activity but AMD Catalyst shows 0% GPU activity whilst it's running AND the hashrate on my Quark CPU miner seems to more than halve.

No other GPUs, on board or otherwise in this system.

Oh and qcore64.dll was still active in Task Manager after closing the ScarletRose miner.... no thanks.  I wish I could get Smelter working but I still have the "couldn't connect to server" issue.

yup, exact same here. it's gone

[macmac__]

Looks like someone beat the OP to the catch on a QRK GPU miner that connects to a pool!

Download link:  http://rghost.net/50746534

I just found this tonight, and it appears to be very recent. Not sure if I trust it yet, however....

as others have found out too:

SCAM ALERT

1. Libsnd is a email tool.
2. Qminer gets detected as a backdoor
3. You can give it any username/password combo you want, it doesn't care of authenticity
4. Fake stats
  1) No gpu usage at all, cards power consumption same as in idle
  2) qcore uses cpu to mine something, or just to cover it's steps, but the shown khash/s doesn't correlate in any way to either cpu, gpu or integrated gpu speed.
5. Libsnd starts to send data to a russian email server (smtp.yandex.ru)

So if you've run this, on a machine with a wallets, I suggest you to move coins away from your current wallets!
Your coinmine passwords are compromised too, so change them as soon as the site comes back.
Some have fallen to this, atleast the account shown in miner window, if it's legit, has gotten some balance to it :/
http://176.221.46.81/address/QWu8maYVxDAmLG9VUyq7kdRQXLP8jksTNM

[hobbster]

Hello,

i downloaded and used the scarletrose-thing around 11:00. I just synced my Quarkcoin Wallet and found a transaction to QXVK7V3vEEMPe8DaVTyqcSbDJ6WKGzcPHS
I just wanted to start with a crypto and now lost my whole balance

Status: 1177 Bestätigungen
Datum: 07.12.2013 11:58
An: QXVK7V3vEEMPe8DaVTyqcSbDJ6WKGzcPHS
Belastung: -17.9964 QRK
Nettobetrag: -17.9964 QRK
Transaktions-ID: 4364a8b239fa4e0aae34afc0727e8c450182996c6f736a9b646195935e945aa9

I could kick myself I just wanted to trade something around, now my trust and work is useless

SCAM :/

[Tenchi]

have used it to but no transactions so far. have you encrypted your wallet? because I have.

[hobbster]

No,

i just started with cryptocurrencys 6 days ago. I just mined with the cpu of my laptop

Anyone know how to remove this? Maybe macmac__?

[rmhuntley]

luckily, I had no quarks to hijack

[hobbster]

did you have other unencrypted wallets?

Was something stolen from them?

[macmac__]

Sorry for you loss  
I just finished analyzing the app' doings and atleast in my crapbox it did the following,
1) Grabbed the dummy wallets, (bitcoin, litecoin, quark)
2) Sent them to russia
3) Started mining with the cpu and sent the shares to a kimisufi server.

It did not create any files or install watchers or keyloggers so you should (I take no responsibility thou) be safe when you delete the files and create a new wallet.

[macmac__]

Did more research and the server that it sents the the shares is this: ks211165.kimsufi.com:6010
and when you access you get redirected to http://www.coinmine.pl/yacp/
So he is mining YaCoins...
If he is the miner with highest hashrate in the pool he has a power of three 2600ks in his control.

Here is a capture of the program doing it's dirty work, cought it red handed
https://i.imgur.com/RKYQlrol.png
and here it's getting job from pool:
https://i.imgur.com/Gpnadw0l.png

[theprofileth]

http://quarkcoin.tumblr.com/
^^^^^^^^^^^^^^^^^
this motherfucker don't download, pay or use anything from them I just had 880 quark stolen from my wallet 
and all sent to QWu8maYVxDAmLG9VUyq7kdRQXLP8jksTNM which is the donation address for that person  fucking bullshit

[macmac__]

You lost the most in this pulloff :/
So far he has gotten 1,6k quarks of this and who knows how many bitcoins, litecoins and whatever coins...
Block explorer:
http://176.221.46.81/address/QWu8maYVxDAmLG9VUyq7kdRQXLP8jksTNM

[Yeah, this is a fair bit OT but... (Speaking words of wisdom, let it be / Let it be, let it be / Let it be, let it be / Whisper words of wisdom / Let it be)]

E: His bitcoin donation address is empty so far, he hasn't moved anything there yet
E2: Simple googling with that qrk address shows us that he has posted the same shit in some russian forums, good thing is that it didn't catch a flame and burn everyone with no encryption

[hobbster]

macmac__ you are awesome!

Although i and others lost something, i am somewhat happy for your posts. Thank you for your Work!

And you are right, its lost. It will be the best to arrange with it and look forward. Luckily deleting is enough, and luckily i did not have any bitcoin or litecoin, what i had was my main Treasure, lol

Keep on being awesome macmac__!




BTW: virustotal says Backdoor.Win32.Hupigon (v)

[theprofileth]

Well from the logs in the pictures above I thought it had corrupted the files
C:\Windows\SysWOW64\tzres.dll
C:\Windows\System32\WSHTCPIP.DLL
So I am hesitant to say just deleting is enough  
moral of the story is lock all your wallets, quarks were the only one that I have much in that wasn't locked and now well doesnt have anything

[TBoneLouie]

It's a shame about the ScarletRose scam.  I know we were all looking for something that was (at least for now) too good to be true.  I imagine smolen is probably snickering at us all right now 

A question about smelter, then, specifically worksize.  When I am pool mining with scrypt, I notice that when I raise my worksize the pool server notes a higher share rate even though my hashrate is less than if I lower my worksize.  Is the same true with solo mining for QRK or SRC with smelter? I notice a hashrate drop of 40% when I increase my WS from 128 -> 256, but will this translate to a 40% drop in block discovery rate or does the worksize compensate for that?

I have managed to find 1 block of SRC with smelter, so I am definitely looking forward to future development of this project.  Keep up the good work.

[hobbster]

Well from the logs in the pictures above I thought it had corrupted the files
C:\Windows\SysWOW64\tzres.dll
C:\Windows\System32\WSHTCPIP.DLL

Both files have a "last changed" Date in 2009 and 2010, so there could not have been a modification or am i wrong?

[macmac__]

Well from the logs in the pictures above I thought it had corrupted the files
C:\Windows\SysWOW64\tzres.dll
C:\Windows\System32\WSHTCPIP.DLL
So I am hesitant to say just deleting is enough  
moral of the story is lock all your wallets, quarks were the only one that I have much in that wasn't locked and now well doesnt have anything

Nope, it doesn't corrupt the files,
it just opens them to access the dll's features.
WSHTCPIP.dll is a WinSock Helper plugin, used in networking.
Tzres.dll is used to manage timezones.

Changing files last modified date back to what it was before is easy.
Attribute changer 7

E: Here are logs from CGminer doing the same things to the dlls
https://i.imgur.com/CvoeqUIl.png
https://i.imgur.com/T4CGshEl.png