ComboJack Cryptojacking Removal Guide

ComboJack Cryptojacking is a harmful malicious application that will cause you a lot of problems if it ever slithers onto your computer and you do not remove it soon. As research conducted by our malware researchers has shown, this threat has been developed and is now used as a tool to steal money from users who transfer money online. From a technical standpoint, ComboJack Cryptojacking is a typical Trojan infection. This must be the reason why so many users do not know anything about its presence and entrance. When they detect it, it is usually too late – ComboJack Cryptojacking has already stolen money from them. Actually, it is nothing surprising because Trojans enter systems unnoticed and work in the background. If it turns out that ComboJack Cryptojacking has illegally entered your computer too, you must erase this infection without further consideration. You will find out more about its removal if you continue reading this report.

ComboJack Cryptojacking is a threat that enters users’ computers illegally, does not have an interface, and acts in the background, so it is not a piece of cake to detect it. Of course, users can scan their computers with an antimalware scanner to find out about the presence of malware, but it does not mean that they cannot find out about the entrance of ComboJack Cryptojacking without the special tool. They simply need to look for malicious components in right places. Speaking specifically, you should check %TEMP%, %ALLUSERSPROFILE%\NVIDIA, and %ALLUSERSPROFILE%\Application Data. If you can find the executable file NVDisplay.Container.exe in at least one of these directories, there is no doubt that ComboJack Cryptojacking is active on your computer. It must be removed as soon as possible. You should get rid of it even if you do not send cryptocurrency to anyone because the presence of malware on the system might result in the entrance of additional infections. You will not be informed about their installation, believe us.

We would lie if we told you that ComboJack Cryptojacking is a unique infection because it has turned out that it is very similar to a threat detected some time ago – CryptoShuffler. To be more specific, ComboJack Cryptojacking also monitors users’ clipboards and then hijacks them when the right time comes. Cyber criminals behind this malicious application are well aware of the fact that the majority of users do not type the recipient’s wallet address manually when they send cryptocurrency. Instead, they copy and then paste the intended wallet address in the Recipient’s line. When the wallet address is copied, ComboJack Cryptojacking comes into play and replaces it with the one that belongs to the attacker. As a consequence, all money transactions reach cyber criminals instead of the user’s intended recipient. Always check the wallet address entered twice before you click the button to send money. Sadly, there is nothing you can do if you have already transferred your money to crooks. Be more careful the next time!

According to researchers, there is a huge possibility that ComboJack Cryptojacking is also mainly distributed via spam emails. You might get an email with an attachment that looks like an ordinary PDF document. Make sure you do not open it if you do not want to allow malware to enter your computer. Keep in mind that malicious applications might be disguised as DOC documents too. We are sure you will not go anywhere near spam emails and their attachments after reading this article, but we cannot guarantee that this will be enough to prevent all malicious applications from entering your system illegally. Therefore, we do not think that you should keep your PC unprotected. That is, we recommend that you also install a security application on your computer.

You must remove ComboJack Cryptojacking from your computer as soon as possible if you do not want it to steal more money from you. Your one and only task is to remove the malicious executable of this Trojan. You should find it located in %TEMP%, %ALLUSERSPROFILE%\NVIDIA, and/or %ALLUSERSPROFILE%\Application Data. In case you cannot locate the malicious file, or you simply do not have time to remove malware manually, feel free to acquire an antimalware scanner and use it to erase active malware.

Remove ComboJack Cryptojacking manually

1. Open Explorer (tap Win+E).
2. To access the %TEMP% directory, type it in the address bar and press Enter.
3. Delete NVDisplay.Container.exe.
4. Remove NVDisplay.Container.exe from %ALLUSERSPROFILE%\NVIDIA and %ALLUSERSPROFILE%\Application Data.
5. Empty Recycle Bin.