ROBOTDEMO.exe (miner) who faced and how to delete?

Question

Malware

The program loads the computer, when removed it returns back

How to remove?

Answer 1

General recommendations
1. disinfect your computer with free drweb cleaner/kaspersky removal tool/...
2. close the existing methods of virus penetration (at least updating the OS, before using files from unreliable sources where there may be viruses, check them for viruses and suspicious files with your eyes and etc.), password-protect/change passwords starting from the OS and ending with wifi (an attacker, knowing the wifi password, can change your server/router, it is possible to steal OS passwords, change files, etc. - access to the local network, especially without normal security settings are almost always a hole)
if the antivirus does not find anything, then everything will be much more complicated, since manually to clean the computer from the virus you need to at least understand how they are created and how they work.
Usually, the virus is delivered to the machine in nested containers, the first level penetrates through the protections on the machine and most often self-destructs after infection so that the entry point cannot be analyzed, the second level installs the virus and monitors its destruction, and already at the third level the virus itself, remove it meaningless without removing the second layer and closing the penetration hole.
Look at what is written in autorun, look for exe files in c:\users\...\appdata, especially if the names there match the names of services in 99% of cases, everything in autorun can be safely deleted or at least disabled there. autorun is not only start-startup, but also registry settings or in the task manager ...
use the sysinternails autoruns utility (download from the Microsoft website) to see everything that autoruns, at least see what does not have a digital signature (yes, sometimes legitimate products do not have it, but for example, realtek driver files can be stupidly remembered)

Answer 2

This miner uses transmission to work. You need to kill the process, delete the task in the scheduler and the service. And also delete the folder with transmission.

Answer 3

Hello!!! There is also this folder, but the computer process in the taskbar does not mine 2-5%