The modern computer world is such that many users are very often unaware of the purpose of some objects present in operating systems. Recently, some users have begun to notice that the Ethash directory appears on their computers. What is this folder? Is this a system object or not, if its size at the very beginning is several gigabytes? Let's figure it out together.
Ethash: what is this folder?
Based on the generally accepted description of this object, it is designed to store data that the cryptocurrency miner uses in the form of the Ethereum platform. Miner is a means of making money. From a huge number of combinations, he must choose the only correct hash, after which a bonus of 25 bitcoins is awarded to the owner.
The Ethash folder in Windows, as a rule, is located in the user location (the main AppData directory, the Local directory). Usually it has several files whose names begin with “full-”. The size of each object is about 1.0-1.5 GB.
Is it a virus?
This is a brief summary of the Ethash directory. What this folder is is a little clear. Now the most important question to be answered is: “Is it a virus or not?” Many users are really inclined to think that this is a worm virus, analysts say the opposite. Both are right.
If a user has a miner installed on the computer, the Ethash folder of Windows systems is created automatically, and it is vital for the main application to work. But when a miner is installed on a user’s computer spontaneously, and the user doesn’t even know about it, of course, the miner itself and all its associated components can be classified as a kind of virus threat.
How does Ethash work?
If the miner entered the computer without the knowledge of the user, and the system has direct access to the Internet, its work begins. This immediately creates the Ethash folder (in Windows 7, for example). When selecting combinations, if you do not take appropriate measures, the folder will increase in size over time.
Actually, the Ethereum miner himself is a very "gluttonous" thing. First of all, there is an incredible load on the RAM and the computing capabilities of the central processor. This is understandable: for some certain time, he must calculate the necessary hash, which is akin to finding the desired value from the combinations of the random number generator.
Ethash Folder: Can I Delete This Object?
Now a few words about the removal. Let's look at the Ethash directory itself. What is this folder, understandable. With size and content, too, everything is clear. What do you think will be the result if you delete the directory manually?
It is naive to think that this will give at least some significant effect. Do you know why? Yes, only because the miner itself will not go anywhere on the computer, which means that in the future it will create the same directory again. Thus, the usual removal of the folder will not give anything.
In addition, it is often noted that after deleting the described directory, the miner can behave very interestingly by creating directories (for example, Adobe) marked with squares or some other symbols. And then they will have to look for a long and tedious way. Therefore, if you want to completely get rid of such a headache, you will first have to remove the primary object (miner), and only then deal with the removal of its accompanying directories or residual components. Among them should be present and folder Ethash. Of course, you can delete everything manually, but it’s better not to do this (it will be further understood why).
Miner uninstall process
Finally, consider the removal of the main application. It's not so simple. The fact is that it can not be detected (often it is not in the list of processes or running programs and services, it can be disguised as a svchost system process, etc.).
You can, of course, try to use the programs and components section, find the original application with the name of the miner there and delete it with the standard tool. You can go further by using uninstallers like iObit Uninstaller for removal. But such methods are applicable only if the main program is present in the list of installed applications. But, unfortunately, usually she is not there.
So what to do? As practice shows, today the optimal solution for cleaning the system from this scourge is to use the popular anti-virus utility Dr. Web CureIt !, which, unlike most other scanners, detects a threat and neutralizes it. And only after the main applet is neutralized, the Ethash directory in the above location can be deleted without any consequences for the system (in the sense that it will not be recreated).
Sometimes you can do without it. It is enough in the “Task Manager” for all closed applications to track all processes that are too busy system resources in idle (inactivity) mode, determine the location of the files responsible for the processes and delete them yourself. Again, after deleting the main initiating object, you can also safely get rid of the described directory. And do not forget to clean the registry!
Finally
This is the miner himself and his Ethash directory. What kind of folder it is, it seems already clear, as well as the fact that its simple deletion without neutralizing the main application will not work. Finally, it remains to add that you should be very careful with installing software taken from unreliable sources. In this case, special attention should be paid to proposals for installing additional panels or some other components. By and large, miners penetrate the system either in this way or on the wings of related viruses that disguise themselves as official programs and have the status of trusted ones, as a result of which the antiviruses installed at the entrance simply skip them.