{"id":569,"date":"2014-05-26T08:37:53","date_gmt":"2014-05-26T08:37:53","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=569"},"modified":"2018-05-29T12:02:53","modified_gmt":"2018-05-29T12:02:53","slug":"wisemanager-cfjdkpfhru-exe-bitcoin-removal","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/wisemanager-cfjdkpfhru-exe-bitcoin-removal\/","title":{"rendered":"WiseManager’s CfjdkPfhrU.exe is a Bitcoin Miner – Removal Instructions"},"content":{"rendered":"

I found yet another Bitcoin<\/strong> miner this morning. You might have spotted it because of a new file called WiseManager.exe<\/strong> running at startup or the high CPU usage by CfjdkPfhrU.exe<\/strong>\u00a0as shown in the screenshot of the Task Manager below:<\/p>\n

\"CfjdkPfhrU.exe<\/a><\/p>\n

The Wise Manager<\/strong> files are located in\u00a0C:\\Users\\%USER%\\AppData\\Roaming\\WiseManager\\ and\u00a0C:\\Users\\%USER%\\AppData\\Roaming\\WiseManager\\CGMInerDLLs.<\/p>\n

\"wisemanager<\/a><\/p>\n

Currently no anti-virus detects the two main files,\u00a0WiseManager.exe<\/strong> and\u00a0CfjdkPfhrU.exe<\/strong> when I uploaded them to VirusTotal, but I assume the scanners will start picking them up sooner than later. WiseManager.exe<\/strong> is digitally signed by Moresta Holdings Limited<\/strong>.\u00a0CfjdkPfhrU.exe<\/strong> is unsigned.<\/p>\n

By the way,\u00a0CfjdkPfhrU.exe<\/strong> sounds like it been given a random file name. Does your computer show another file hogging the CPU?<\/p>\n

Removing WiseManger.exe<\/strong> and\u00a0CfjdkPfhrU.exe<\/strong> is easy with FreeFixer<\/a>. Just check WiseManager.exe<\/strong> and\u00a0CfjdkPfhrU.exe<\/strong> for removal and click the Fix button and the problem is solved.<\/p>\n

\"wisemanager.exe<\/a> \"wisemanager.exe<\/a><\/p>\n

Now you can remove the\u00a0C:\\Users\\%USER%\\AppData\\Roaming\\WiseManager\\ folder manually in Explorer.<\/p>\n

I found the Wise Manager<\/strong> Bitcoin miner while testing a free download. WiseManager was bundled inside the download. How did you get Wise Manager<\/strong> and\u00a0CfjdkPfhrU.exe\u00a0<\/strong>on your computer?<\/p>\n","protected":false},"excerpt":{"rendered":"

I found yet another Bitcoin miner this morning. You might have spotted it because of a new file called WiseManager.exe running at startup or the high CPU usage by CfjdkPfhrU.exe\u00a0as shown in the screenshot of the Task Manager below: The Wise Manager files are located in\u00a0C:\\Users\\%USER%\\AppData\\Roaming\\WiseManager\\ and\u00a0C:\\Users\\%USER%\\AppData\\Roaming\\WiseManager\\CGMInerDLLs. Currently no anti-virus detects the two main files,\u00a0WiseManager.exe … Continue reading WiseManager’s CfjdkPfhrU.exe is a Bitcoin Miner – Removal Instructions<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[16,1],"tags":[80,102],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/569"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=569"}],"version-history":[{"count":6,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/569\/revisions"}],"predecessor-version":[{"id":579,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/569\/revisions\/579"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=569"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=569"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=569"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}