Malware

AIT.Heur.Miner.6.3D720C79.Gen removal tips

Malware Removal

The AIT.Heur.Miner.6.3D720C79.Gen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What AIT.Heur.Miner.6.3D720C79.Gen virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine AIT.Heur.Miner.6.3D720C79.Gen?


File Info:

name: 105A3A8FFE227BF3CE04.mlw
path: /opt/CAPEv2/storage/binaries/f08da430b3fe40f2bc8e4513327f7e2b0a5b81e3f2a6afee80984a03d1f57652
crc32: 7619D8AF
md5: 105a3a8ffe227bf3ce049c34358d5f31
sha1: 203d5be85cf4d81a34c4f065060b9641ed6bdfa0
sha256: f08da430b3fe40f2bc8e4513327f7e2b0a5b81e3f2a6afee80984a03d1f57652
sha512: 37e679138fc5f4e756c35e3ac9b101773110d9d96b1c1ab5f285f2511e8f48093f05f157009f98d74052df02667c02702007682284d7b3dcabb36bbdba83b569
ssdeep: 98304:e2cPK8x0L1AzXxtn3q3KLikH5LFDsvrqf1wTpxfYR4sXJJvWVwe7JwhJAa:xCK9Il+KLii5ZNtGxf2LWeetQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DD66231273D2C076FFABE1B39F6AB604567D7D244127952F03881D79B8B02B1623E663
sha3_384: 0786cb5a9f1a2ddbb30358adb8a7fe1a32a4702e9606df286d7a1324dd3340d220910494b86824efbf9ed988065e7a5b
ep_bytes: e8c8d00000e97ffeffffcccccccccccc
timestamp: 2020-10-28 12:37:26

Version Info:

Translation: 0x0809 0x04b0

AIT.Heur.Miner.6.3D720C79.Gen also known as:

BkavW32.AIDetect.malware2
LionicHacktool.Win32.Gamehack.3!e
Elasticmalicious (high confidence)
MicroWorld-eScanAIT.Heur.Miner.6.3D720C79.Gen
FireEyeGeneric.mg.105a3a8ffe227bf3
ALYacAIT.Heur.Miner.6.3D720C79.Gen
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
K7AntiVirusTrojan ( 005508ae1 )
AlibabaTrojan:Win32/Miner.fab379c7
K7GWTrojan ( 005508ae1 )
Cybereasonmalicious.ffe227
CyrenW32/Trojan.WJQZ-0537
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/Packed.AutoIt.RX
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan.Win32.Miner.bde
BitDefenderAIT.Heur.Miner.6.3D720C79.Gen
NANO-AntivirusTrojan.Win32.Miner.igtsdf
AvastBV:CoinHelper-D [Miner]
TencentWin32.Trojan.Miner.Duwg
SophosMal/Generic-S
ComodoMalware@#66siqqm2j91c
TrendMicroCoinminer.AutoIt.MALXMR.SMJCDP
McAfee-GW-EditionBehavesLike.Win32.Generic.vc
EmsisoftAIT.Heur.Miner.6.3D720C79.Gen (B)
AviraHEUR/AGEN.1100152
MicrosoftTrojan:Win32/Masson.A!ac
GDataAIT.Heur.Miner.6.3D720C79.Gen (2x)
CynetMalicious (score: 100)
AhnLab-V3CoinMiner/AU3.Generic.S1299
McAfeeArtemis!105A3A8FFE22
MAXmalware (ai score=82)
VBA32Trojan.Miner
TrendMicro-HouseCallCoinminer.AutoIt.MALXMR.SMJCDP
IkarusTrojan.Win64.Autoit
eGambitUnsafe.AI_Score_99%
FortinetAutoIt/Miner.BDE!tr
AVGBV:CoinHelper-D [Miner]
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecureTrojan.Malware.300983.susgen

How to remove AIT.Heur.Miner.6.3D720C79.Gen?

AIT.Heur.Miner.6.3D720C79.Gen removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment