HKTL_COINMINE

  • 1
  • Question
  • Updated 10 months ago
  • In Progress
For the last 4 days, TrendMicro keeps popping up to tell me it removed 2 of these: HKTL_COINMINE. Virus and malware scans don't find anything, and TrendMicro says it is removed, but it keeps popping up while I'm browsing the internet. Is there a permanent solution to the problem?
Photo of chadroman82

chadroman82

  • 70 Points
  • mildly annoyed

Posted 10 months ago

  • 1
Photo of TM_Shella

TM_Shella, Employee

  • 2,070 Points 2k badge 2x thumb

Hi chadroman82,

Welcome to the community!

On what browser do you get the notification from Trend Micro? Also, does it appear when you visit a particular website?

For now, you may reset your browser by following the steps shown on the link below. Please note that doing this step will delete all saved Bookmarks and Favorites so please export your files first before resetting. 

Resetting your web browser for performance and website redirection issues

Have a great day!

TrendMicro Home Users Community
Photo of iudex gundyr

iudex gundyr

  • 372 Points 250 badge 2x thumb
In addition to TM_Shella's info. Here's some more about HKTL_COINMINE
https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/hktl_coinmine

It's a detection for javascripts embedded into websites to run a coinminer for Monero cryptocurrency miner. These coinminer would then use your Computer Resource ~ CPU usage to mine cryptocurrency to benefit the website owners. Some websites are pretty open of using this (instead of the usual ads) to keep their website running i.e. Piratebay.org, etc.

So in simpler terms you may have visited a website which launches javascript for coinminer. You'd just have to avoid visiting this website to prevent getting detection. Aside from Trend Micro detection, you can block javascript coinminers using Ad-Blockers.

HTH