I opened an Electrum wallet. I just opened. How I can remove from my PC?

[EMERGENCYAE]

Hello everybody. I have big problem. I don't know nothing about Bitcoin etc. . I search information about BTC. Whatever, ı opened a Electrum Wallet. When I setup that Electrum, my antivirüs program send many notification. Whatever, I want to delete my Electrum wallet and that program. But ı dont know how ı will do it... Will I pay anything?  If you have information, please share it.

Note: I can't speak English well. I hope, I can say my problem. Sorry for my English.

[1714799423]

1714799423

[1714799423]

1714799423

[1714799423]

1714799423

[1714799423]

1714799423

[TryNinja]

Which notifications?
Where did you download it from?
Which antivirus are you using?

Could be a false positive which happens from time to time depending on the antivirus you use and which Electrum server you fell into. Or in the worst case, you could have downloaded a fake Electrum wallet.

[jackg]

Yeah check you don't loaded it from electrum.org.

If you want to get rid of it get your antivirus to do it as that's what it's there for.

It was likely a false positive if it says something like
Trojan gen windows (followed by a number).

Or if it was a community alert"not many people have this installed"

As well as a firewall issue as stated above.

How aggressive is your antivirus setup? Does it normally get rid of viruses automatically or have you whitelisted this one?
If you want rid of the file it depends on whether you installed it or just downloaded a standalone version.

[EMERGENCYAE]

Thanks for your answer.
I use Norton 360 for antivirüs program.
I downloaded from Electrum.org.
Notification about ''System infected:Coinminer activity''.

Can I delete Electrum Wallet? If I can, is it has price for deleting wallet?

[hosseinimr93]

Can I delete Electrum Wallet? If I can, is it has price for deleting wallet?

There is no difference between removing Electrum and removing other applications.

If you are using windows, go to "Control Panel" and then click on "Uninstall a Program"
Find "Electrum", select it and click on "uninstall"

If you have created a wallet and you would like to delete it, go to C:\Users\<Insert your username here>\AppData\Roaming\Electrum\wallets and delete created wallets.

[jackg]

Thanks for your answer.
I use Norton 360 for antivirüs program.
I downloaded from Electrum.org.
Notification about ''System infected:Coinminer activity''.

Can I delete Electrum Wallet? If I can, is it has price for deleting wallet?

Try running a scan with Norton and get them to remove it.

It might be a virus as i use Norton and didn't get the notification. Try not to restart your computer before completing a scan and seeing it's clean.

[EMERGENCYAE]

Okey. Thanks for your answers. I will do that your said. But, I just want to check. If I delete created wallets in my files and I deleted Electrum program, everything is finished for me about BTC Wallet etc. things.But, I want to ask final question. I wonder that, When I delete this program, Is my wallet deleted? I read one site on Internet, If we don't delete wallet ON SERVICES, we can pay a lot of money. For what? I don't know, it wasn't written in that paragraph. So, If ı delete Electrum Application, everything has finish for me. Isn't it? I just want to finish that problem and I don't want to pay a lot of money after years. Sorry for my a lot of questions. Please ıf you have knowledge share. Thanks again. I want to check understand right. I did panic because of this situtation and thats paragraph.

[jackg]

You're not paying anything. If you have funds in you're wallet, I'd suggest moving them out first. If you don't have any money in, how are they going to get you to pay for stuff?

[o_e_l_e_o]

If you downloaded from electrum.org, then you probably have nothing to worry about. Electrum often flags up as a false positive in various anti-virus programs.

For example:

Electrum binaries are often flagged by various anti-virus software. There is nothing we can do about it, so please stop reporting that to us. Anti-virus software uses heuristics in order to determine if a program is malware, and that often results in false positives.

The above text also appears at the bottom of the download page: https://electrum.org/#download

Other users have also had the exact same "Coinminer Activity" notification with Norton and Electrum. See this thread for example: Norton Security alert on Electrum node.ispol.sk

[NotATether]

Other users have also had the exact same "Coinminer Activity" notification with Norton and Electrum. See this thread for example: Norton Security alert on Electrum node.ispol.sk

The question is on what basis have antivirus vendors decided to classify Electrum as running a Coinminer script? Is it just waiting for activity on Electrum's port 50002, and assuming that all bitcoin wallets must be "miners"? Or is it just looking for connections to known SPV nodes? Either way, it's not only inconvenient for us, it's also ineffective for their clients because the AV can't read anything sent inside the port as it's encrypted with TLS. This sounds to me more like a bureaucratic decision, because Electrum does not match any of their own definitions of crypto mining:

Indications that a computer is mining include:

    High CPU and/or GPU usage
    Overheating
    Crashes or restarts
    Slow response times
    Unusual network activity (e.g. connections to mining-related websites or IP addresses). For example, you may notice unexpected PowerShell processes connecting to IP addresses associated with xmrpool[.]net, nanopool[.]org, moneropool[.]com, and similar addresses.

They erroneously think that bitcoin mining is still possible on commodity PCs (despite this assumption breaking ~9 years ago) and they go on a crusade to block any program that has something to do with bitcoin.

I mean, we're at two ends of the street: them looking for browse mining scripts whereas we're just using programs that can broadcast bitcoin transactions not to mention that Electrum is written in compiled Python whereas they are looking for some Javascript-based *web* miners

[Chikito]

When I delete this program, Is my wallet deleted?

No, your file still on C:\Users\AppData\Roaming\Electrum. But it's not a problem when you write 12 seed on paper, you still have your life.

I read one site on Internet, If we don't delete wallet ON SERVICES, we can pay a lot of money. For what?

Something like a hoax, this not happen when you keep your secret safe.

So, If ı delete Electrum Application, everything has finish for me. Isn't it?.

No.

I want to check understand right. I did panic because of this situtation and thats paragraph.

don't read too much fake news on the internet

[Lucius]

I use Norton 360 for antivirüs program.

I use the same AV, and it never detected Electrum BTC to me as something malicious, although it was quite aggressive towards Electrum LTC. I know that for some beginners such a warning seems dangerous, but if Electrum is downloaded from the official site and if the signature is verified then every AV can learn that such a program is no longer detected as a threat by excluding it from further scans.

~snip~

I remembered one project that goes exactly in the direction of alerting antivirus companies to all false detections when it comes to crypto wallets - here are opportunities for everyone to contribute to as few false positive detections as possible.

https://bitcointalk.org/index.php?topic=5266558.0

[Pmalek]

Electrum downloaded from https://electrum.org/#home is 100% not a malware! If you scroll all the way down on their downloads directory, (https://electrum.org/#download) you will notice that Electrum itself warns users that many AVs incorrectly flag the software as malware. You don't have to worry about that. It is not a malware. I use it, and 100s of forum members do as well.

But you have to be 100% certain that you downloaded it ONLY from that site and nowhere else. Did you by any chance verify the signatures of the software you downloaded? If you aren't expecting any payments to any of your addresses created in Electrum, you can delete the whole thing, and find another client if you are afraid of it being infected. If you are expecting payments, or have already received some, I hope you wrote down the seed (the 12 words) that were shown to you while you configured your wallet.

Electrum seeds aren't compatible with other wallets, except Bluewallet, but the condition for it to work is that the wallet has received transactions and isn't empty.   

[NotATether]

Electrum downloaded from https://electrum.org/#home is 100% not a malware! If you scroll all the way down on their downloads directory, (https://electrum.org/#download) you will notice that Electrum itself warns users that many AVs incorrectly flag the software as malware. You don't have to worry about that. It is not a malware. I use it, and 100s of forum members do as well.

The way antiviruses are written, it can't tell the difference between a legit program and a scam offshoot of it, since so little code is changed; it'll either flag both of them, or neither at all.

If you aren't expecting any payments to any of your addresses created in Electrum, you can delete the whole thing, and find another client if you are afraid of it being infected. If you are expecting payments, or have already received some, I hope you wrote down the seed (the 12 words) that were shown to you while you configured your wallet.

Again, consumer AVs have no way of knowing where the data files for every single malware in their database are located, so it doesn't try to look for and quarantine them. Only the executables and possibly the DLL files are quarantined. In other words, the wallet.dat is still present and can be opened by Electrum again.

[HCP]

The question is on what basis have antivirus vendors decided to classify Electrum as running a Coinminer script?

I'm fairly sure it gets flagged for attempting to connect to certain IPs/Domains that the antivirus vendor has flagged as being involved with "Coinminers" etc... This is why UserA of <AntivirusApp> might see the warning, and UserB does not. Essentially, UserA's copy of Electrum tries to connect to the Electrum server hosted at <FlaggedIP/Domain>, while UserB's copy of Electrum is connecting to different servers/nodes.

[The Cryptovator]

I think OP has some misunderstanding about the Electrum wallet. If you have downloaded from the original source as mentioned above by other users and verified Signature then you are safe. You shouldn't worry then since it's an open-source SPV (Simple Payment Verification) wallet. Same as you don't need to pay for install, use, and delete this software. Delete your wallet software and the file doesn't mean your wallet has gone if you have saved your wallet seed. Before delete the wallet, you should move your funds if there is any. Keep in mind, Electrum is totally free software and can use by anyone.