Application.CoinMiner.24 removal

The Application.CoinMiner.24 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.CoinMiner.24 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Application.CoinMiner.24?


File Info:
name: 76F0686C646AF67360AF.mlw
path: /opt/CAPEv2/storage/binaries/b9573f63ddda26eb0527999bb2c68d40b7fe09f2bb60df6549a9e5a459a0ac83
crc32: AF532E4A
md5: 76f0686c646af67360afe82609f04d0a
sha1: fa3a0c6ebcf7d658b35c2ea18b8ba1e615865097
sha256: b9573f63ddda26eb0527999bb2c68d40b7fe09f2bb60df6549a9e5a459a0ac83
sha512: d40bf61ec63a0029272a3ac84f8a60ec43ceab8ebb16202e46ccc20032d13651024ec694136e1b5fa776a74e391784407564431da5adda09d0a751b9a8efd24b
ssdeep: 49152:BezaTF8FcNkNdfE0pZ9ozt4wINF/DE7OzCn:BemTLkNdfE0pZrc
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T15195D06DB6B644E5C6EF8038C81E8A07F7F578D90364D18B53E127AA1F13286D926F34
sha3_384: 027fb0238216a7c350e2c498a9a88e98cf2d157409d2f683a79e85ae6e3792ebaebcb36741c70a9e30b108608bcfd00a
ep_bytes: 4883ec28e8270700004883c428e972fe
timestamp: 2019-08-29 00:43:41

Version Info:
0: [No Data]

Application.CoinMiner.24 also known as:

Lionic	Trojan.Win32.Banload.tqMl
Elastic	malicious (high confidence)
DrWeb	Trojan.BtcMine.3361
MicroWorld-eScan	Gen:Variant.Application.CoinMiner.24
FireEye	Generic.mg.76f0686c646af673
CAT-QuickHeal	Trojan.Coinminer.S21406855
ALYac	Gen:Variant.Application.CoinMiner.24
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0057f1d71 )
Alibaba	Trojan:Win32/Coinminer.448
K7GW	Trojan ( 0057f1d71 )
Cybereason	malicious.c646af
Cyren	W64/CoinMiner.AX.gen!Eldorado
Symantec	Packed.Generic.551
ESET-NOD32	Win64/CoinMiner.SY
TrendMicro-HouseCall	Coinminer.Win64.MALXMR.SMJT
Paloalto	generic.ml
ClamAV	Win.Coinminer.Generic-7151250-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Application.CoinMiner.24
NANO-Antivirus	Trojan.Win32.Miner.jeccbt
SUPERAntiSpyware	Hack.Tool/Gen-BitCoinMiner
Avast	Win64:CoinminerX-gen [Trj]
Tencent	Trojan.Win64.CoinMiner.b
Ad-Aware	Gen:Variant.Application.CoinMiner.24
Emsisoft	Gen:Variant.Application.CoinMiner.24 (B)
Zillya	Downloader.Banload.Win32.89529
TrendMicro	Coinminer.Win64.MALXMR.SMJT
McAfee-GW-Edition	BehavesLike.Win64.Dropper.th
Sophos	Mal/Generic-R + Troj/Miner-ABK
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Application.CoinMiner.24
Jiangmin	Trojan.Mansabo.bxr
Avira	TR/CoinMiner.Gen8
MAX	malware (ai score=79)
Antiy-AVL	Trojan/Generic.ASMalwS.2C4CE10
Gridinsoft	Ransom.Win64.Gen.sa
Microsoft	Trojan:Win64/CoinMiner
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win64.CoinMiner.R290025
Acronis	suspicious
McAfee	Dropper-FXA!76F0686C646A
TACHYON	Trojan/W64.Agent.1995531
VBA32	Trojan.Win64.CoinMiner
Malwarebytes	Trojan.BitCoinMiner
APEX	Malicious
Rising	Trojan.CoinMiner!1.C2B5 (CLASSIC)
Yandex	Trojan.Agent!2G5/P4OEjro
Ikarus	Trojan.Win64.CoinMiner
eGambit	Unsafe.AI_Score_99%
Fortinet	W64/CoinMiner.PB!tr
AVG	Win64:CoinminerX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (D)
MaxSecure	Trojan.Malware.300983.susgen

How to remove Application.CoinMiner.24?

Application.CoinMiner.24 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X