[ROD-BENDERS]

Guys if you downloaded this off the forum today, download malwarebytes and scan your system on full settings.

There are considerable virus payloads in the fairlight acid davinci 1.0.28 install bitcoin miner - passwords stealer crap.

Scan your system with malwarebytes.

Br

Rb

[ikrom]

Here's folks..

I thought about that because files seems to me not truly good...
DELETE ALL !@#$ , because it is nNOT truly 1.0.28, but only SCAM!!!
So here's what you should delete:
C:\ProgramData\Caphyon\Advanced Installer

"C:\ProgramData\DaVinci_EGR_DPF_DTC.exe"

C:\Users\Admin\AppData\Roaming\BackGroup

C:\Program Files\Davinci

Then goto -> RUN > regedit
Search for folders as shown in pictures. Delete that folders also. (first+last pics)

BY THE WAY - TO STOP MINING service in your pc - you must open taskmanager and close explorer.exe WHICH will have a lot memory usage. Because malware is encrypted to look as explorer.exe (it's our folders/desktop view and start menu system) .
THEN - also in taskmanager you will see a non-visible cmd.exe (3rd pic). It is comand-line which's using by malware to restart mining. Hangup that task too.
THEN
Goto to "This computer" right click -> manage -> Shedule tasks -> find there Davinchi updater and remove it (second pic)

It's all what I found for now....
Any news - I will update

Welcome.

PS sorry, pics in Russian language, but all should be clear.

[forkade]

if you downloaded this off the forum today, download malwarebytes and scan your system on full settings.

There are considerable virus payloads in the davinci 1.0.28 install bitcoin miner - passwords stealer crap.

Scan your system with malwarebytes.