Website ghsminer.com is a bitcoin mining download site with malware. It is also linked to website mining.ml, another website that is reported a scam by some users. Ghsminer.com’s IP address 126.96.36.199 is associated with nutrilonexport.com . Now Nutrilonexport.com is listed as a known malware and spam site and also links back to both mining.ml and ghsminer.com. Possibly three websites run by same person/group. Badbitcoin.org reports that GHSminer.com has the same miner download malware (keyloggers) as Privateminer.com. See http://www.badbitcoin.org/ Avoid downloading mining applications from all four sites! ghsminer.com minin.ml nutrilonexport.com privateminer.com If you have downloaded from any of the four sites, please change all your passwords immediately using a different device (not the device you used downloading the mining application). Then find and delete the downloaded file/empty Trash. You may have to use System Restore and restore back to a previous backup depending on severity. It is recommended that you run several deep antivirus scans to verify if system is cleaned.