Categories: Malware

How to remove “BAT/CoinMiner.AQQ”?

The BAT/CoinMiner.AQQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BAT/CoinMiner.AQQ virus can do?

Detected script timer window indicative of sleep style evasion
Reads data out of its own binary image
A process created a hidden window
Installs OpenCL library, probably to mine Bitcoins
A scripting utility was executed
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

How to determine BAT/CoinMiner.AQQ?


File Info:
crc32: 9E4FBBAFmd5: c0af34af235b782fb192120adb57c329name: chromium.exesha1: 739b7b25d0aadb39b3bcf65bdb932914f9a4ff1esha256: 4e331c5b7eb64122a6778ec7203f48a5f2026cc4722180cd4b774b83106ef5fbsha512: 43dac01a59376d18f211b3ff779ac7e8e1ade3d954d3221ac870acdecbe2587dfe6130cd8bb5fc294c5a4fe7d0ebd8465a92d197c5f5cdd143d2fc48995ea90fssdeep: 393216:tVfRPmmUG9pbMr4xwHAIR2likv5yUBzwzn/Wjo3NkZ7:zRumU4pu4KgIRfo3zwz/Wi07type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

BAT/CoinMiner.AQQ also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Trojan.GenericKD.42818848
McAfee	Artemis!C0AF34AF235B
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.42818848
K7GW	Riskware ( 0040eff71 )
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	Other:Malware-gen [Trj]
GData	Trojan.GenericKD.42818848
Kaspersky	Trojan.VBS.Starter.iz
Alibaba	Trojan:VBS/Starter.23ba7f65
NANO-Antivirus	Trojan.Win32.Starter.hdpgwy
AegisLab	Trojan.Win32.Blocker.tqAl
Rising	PUF.CoinMiner!8.4639 (TFE:5:qE59eYqM98)
Ad-Aware	Trojan.GenericKD.42818848
Sophos	Generic PUA KL (PUA)
Comodo	Malware@#8j9n6uo4hkwv
F-Secure	Heuristic.HEUR/AGEN.1004703
DrWeb	VBS.Starter.180
TrendMicro	TROJ_GEN.R002C0PBT20
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.tc
FireEye	Generic.mg.c0af34af235b782f
Emsisoft	Trojan.GenericKD.42818848 (B)
Ikarus	Trojan.BAT.CoinMiner
Cyren	W64/Trojan.BODY-1013
MaxSecure	Trojan.Malware.73445238.susgen
Avira	HEUR/AGEN.1004703
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Win32.Wacatac
Endgame	malicious (moderate confidence)
Arcabit	Trojan.Generic.D2845E43
ZoneAlarm	Trojan.VBS.Starter.iz
Microsoft	Trojan:Win32/Occamy.C
AhnLab-V3	Unwanted/Win32.CoinMiner.C3456414
VBA32	Trojan.VBS.Starter
Malwarebytes	RiskWare.BitCoinMiner
Panda	Trj/CI.A
ESET-NOD32	BAT/CoinMiner.AQQ
TrendMicro-HouseCall	TROJ_GEN.R002C0PBT20
Tencent	Vbs.Trojan.Starter.Sxel
Yandex	Riskware.Agent!
Fortinet	VBS/Agent.CD39!tr
AVG	Other:Malware-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Generic/Trojan.51c