Wednesday, February 21, 2018

Remove NsCpuCNMiner.exe or NsCpuCNMiner64.exe manually

Remove NsCpuCNMiner.exe manually.

These are the steps I followed when one of my colleague's system was infected with this Malware.

What it is ?
It is a process which runs in the background and mines for crypto-currency using your system as the resource.




Symptoms:
Disk utilization & CPU usage will be max. So your system will be slow.
Application will take longer time to open.
In some cases you get some popups in your web-browser.






Steps to Remove:

Step 1 - Stop the process
Goto Task Manager->Services -> select NsCpuCNMiner or NsCpuCNMiner64 -> right click - end process

Step 2 - Remove related extensions from browser
Goto chrome browser extensions and check if any miners are present and remove them.

Step 3 - Disable From startup
Goto Win+R run -> msconfig.exe -> startup -> Disable the NsCpuCNMiner or NsCpuCNMiner64
For win 10
Goto task manager -> startup services -> Disable the NsCpuCNMiner or NsCpuCNMiner64 or Folder (Yes it is the malware and not the WindowsExplorer process)

Step 4 - Delete the source file
Goto Win+R run -> type %AppData% -> Navigate to "Roaming" -> "Images" and delete all the contents of the folder. (This contains the exe :see image)

Step 5 - Delete from registry
Goto Win+R run -> type regedit -> Once the registry editor is opened -> type Cntrl + F
-> search for "NsCpuCNMiner" and delete every occurrence of this.

If you face any issues while removing the malware, do comment below - I shall respond.

Tuesday, February 6, 2018

TFS workspace problem

TF400018: The local version table for the local workspace MY-PC;My User could not be opened. The workspace version table contains an unknown schema version.

Click the box labelled "Workspace".
    Click on "Workspaces".
    Delete the corrupt workspace profile, accepting the warning.
    Re-connect to TFS and open "Source Control Explorer"
    Create a new workspace
    One by one, map your projects to the same folder as before
    You will be presented with a list of conflicts, where you have matching writable files in the folder already.
    Choose "Keep local copy" for each file you had checked out before, and "Take Server Version" for any files changed by other members of the team that you didn't have the latest version for. This might take a while depending on the length of the list, but it is worth comparing versions for any file you are unsure of.

    Most of the cs proj files will show contain the files you have added,
    but it wont show up in the solution explorer.
   
    Click on ShowHiddenFiles, select the files that do not have
    a + sign (add) or a red tick mark (CheckOut) and exclude them from project
    and right click and include them in the project.
   
    This should solve the problem