Andy itself calls an IP which then transfers the bitcoin miner to your system.Īndy clearly have no interest in fixing this issue and they're doing their best to censor it. By the looks of things, the installer isn't at fault. After seeing that comment, and probably after seeing this reddit thread they've removed me from the group.Ī friend opened Andy in process explorer to see the files it drops upon installation. MAJOR UPDATE: I asked the Andy staff why they're still serving the infected file. I used cryptocurrency when talking to people in the Andy support group and they got confused and thought I was talking out my arse. I use the term bitcoin in this thread and the video as it's almost become a generic trademark. The mining process runs even with Andy closed and it opens on startup.
Luckily I have a fair few sleeper accounts in that group and I'll report back with anything worth noting.Ĭlarification: In the video I fail to close Andy when checking my GPU stats but I can confirm that they are roughly the same as when Andy is open.
Update: Their Facebook support group has been changed to a closed group meaning you can't view their posts if you're not already a member. u/lawrenceabrams has done a lot more digging and research and has published an article which you can read here.
