Bitcoin miner virus

[heatsinkbod]

Hi just a heads up as got bashed by this last few days on high CPU because of a bitminer exe...........

Basics are not so much of a virus but using Conhost.exe to launch bitcoin miners - the miners are not picked up by a few antivirus as they appear to be mostly legit apart from they are running on your server -:
Not sure what exe they use to launch on Linux but on Windows its conhost.exe - be careful as their is a legit Conhost that runs on windows.

Files I found that were part of the package -:
Conhost.exe pupbitcoinminer located in program files/Common files/system
libcurl-4.dll Trojan miner program files/Common files/system
Conhost.exe riskawarebitcoinminer located in Windows/system32/

Their was also a legit bitminer exe

[>>UB's<< LC10]

We have also had this over last last couple of days. Caused server lag and high pings untill I ended the process in the task manager.
Run malware bites and seems to have dealt with it for now.

What is causing this?
Seems odd that another MOHAA clan has got this at the same time