Application.CoinMiner.50 removal guide

The Application.CoinMiner.50 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.CoinMiner.50 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Application.CoinMiner.50?


File Info:
name: 620684FBCC8F0F4E3D35.mlw
path: /opt/CAPEv2/storage/binaries/0621736ddcda3241d6733d2c48eb2022833fd2d6cf9d0c39e97d7dd85bbbc2f0
crc32: F3B8DF3D
md5: 620684fbcc8f0f4e3d358811054a5538
sha1: c9feb5f78ca4faa949ae9ae22184de6f5eab0437
sha256: 0621736ddcda3241d6733d2c48eb2022833fd2d6cf9d0c39e97d7dd85bbbc2f0
sha512: c74b7e4ab21433a321304cf4fabe3536926c19e3df148c00cc98be0229aaa09b361b6b0e1abffa80b770887dd806208ef2417bb898c2c2052ceb1e8d3d01ee7e
ssdeep: 24576:G4fKU6Kmdx7D/tjMYu3kVKToDlzvbpfgWqNj+OS+2v7lvOSMedt2:fKvKGx1GMdv9fWj+OT+7lvOSM
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T147358D5573A900ECE9E7C0388A679A53E3B2741513309FDB16E48A361F27AD12F3EB51
sha3_384: ea9d02ce855b2e57a3d38d24b724fe3e238d17346e318c79f90efb1885ee65e063c5e3a7eeb43992288f00a5bea11f05
ep_bytes: 4883ec28e8230700004883c428e972fe
timestamp: 2020-02-22 03:58:55

Version Info:
0: [No Data]

Application.CoinMiner.50 also known as:

ClamAV	Multios.Coinminer.Miner-6781728-2
FireEye	Gen:Variant.Application.CoinMiner.50
ALYac	Gen:Variant.Application.CoinMiner.50
Cylance	Unsafe
Zillya	Tool.Miner.Win64.11
Sangfor	Suspicious.Win32.Ursu.718846
K7AntiVirus	Trojan ( 005397351 )
Alibaba	RiskWare:Win64/Miners.c3cd4390
K7GW	Trojan ( 005397351 )
Cybereason	malicious.bcc8f0
Cyren	W64/Trojan.VAXF-0954
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/CoinMiner.RD potentially unwanted
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:HEUR:RiskTool.Win64.Miner.gen
BitDefender	Gen:Variant.Application.CoinMiner.50
NANO-Antivirus	Riskware.Win64.CoinMiner.hbuzoy
MicroWorld-eScan	Gen:Variant.Application.CoinMiner.50
Avast	Win64:Malware-gen
Ad-Aware	Gen:Variant.Application.CoinMiner.50
Emsisoft	Gen:Variant.Application.CoinMiner.50 (B)
Comodo	Malware@#hok7yecn1goe
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win64.PUP.th
Sophos	XMR-Stak Miner (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Application.CoinMiner.50
Jiangmin	RiskTool.Miner.gn
Avira	HEUR/AGEN.1204685
Antiy-AVL	RiskWare[RiskTool]/Win64.Miner
Gridinsoft	Ransom.Win64.Gen.sa
Arcabit	Trojan.Application.CoinMiner.50
AhnLab-V3	Win-Trojan/Miner3.Exp
McAfee	Artemis!620684FBCC8F
MAX	malware (ai score=71)
Malwarebytes	RiskWare.BitCoinMiner
TrendMicro-HouseCall	TROJ_GEN.R002H0CL421
Rising	HackTool.CoinMiner!1.BEAB (CLASSIC)
Yandex	Riskware.Agent!PBYgpYNxpJw
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Miner
AVG	Win64:Malware-gen
Panda	Trj/CI.A

How to remove Application.CoinMiner.50?

Application.CoinMiner.50 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X