Malware

Generic.Application.CoinMiner.1.06A9D8CE removal tips

Malware Removal

The Generic.Application.CoinMiner.1.06A9D8CE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Application.CoinMiner.1.06A9D8CE virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

How to determine Generic.Application.CoinMiner.1.06A9D8CE?


File Info:

crc32: 0AA2E627
md5: fbaf4c7fba7326199db4687d857a4492
name: FBAF4C7FBA7326199DB4687D857A4492.mlw
sha1: 8afd9c6c6655974233b41a9e71d391d8b74a0213
sha256: c45fe366cd006e448160701850034f99013e086af640848547c81fcf5885bfc1
sha512: 7dd039cde9b720bcb742b14bb69489b6e0880866c7930d286f4c4396bf01036393bc571290d96a043a2926ea2bd930dffe92f0149f52a7e3678aa2b57a52e672
ssdeep: 24576:JRBrzwX0YmJI8DRnCD4jtnT8Q1r0ly78ipwR7:7Jzdnm4lT8Q1r0pieR7
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

LegalCopyright: xa9 Valve Corporation
ProductName: Steam
FileVersion: 2.10.91.91
FileDescription: Steam
Translation: 0x0816 0x04e4

Generic.Application.CoinMiner.1.06A9D8CE also known as:

Elasticmalicious (high confidence)
DrWebTool.BtcMine.2235
MicroWorld-eScanGeneric.Application.CoinMiner.1.06A9D8CE
FireEyeGeneric.mg.fbaf4c7fba732619
CAT-QuickHealTrojan.MinerPMF.S17010081
ALYacGeneric.Application.CoinMiner.1.06A9D8CE
CylanceUnsafe
SangforMalware
K7AntiVirusRiskware ( 00574bb11 )
BitDefenderGeneric.Application.CoinMiner.1.06A9D8CE
K7GWRiskware ( 00574bb11 )
BitDefenderThetaGen:NN.ZexaCO.34700.enKfaC4bJZfi
CyrenW32/CoinMiner.YUOF-4693
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/CoinMiner.ES potentially unwanted
AvastWin32:Malware-gen
ClamAVWin.Coinminer.Generic-7151250-0
KasperskyTrojan.Win32.Miner.aszwe
NANO-AntivirusRiskware.Win32.BtcMine.gmfedn
RisingTrojan.Miner!8.EA1 (TFE:5:1SNaNiR6GKB)
Ad-AwareGeneric.Application.CoinMiner.1.06A9D8CE
SophosXMRig Miner (PUA)
ComodoApplication.Win32.CoinMiner.BS@8rlsid
F-SecureHeuristic.HEUR/AGEN.1124159
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
EmsisoftGeneric.Application.CoinMiner.1.06A9D8CE (B)
IkarusPUA.CoinMiner
JiangminRiskTool.BitMiner.calf
AviraHEUR/AGEN.1124159
Antiy-AVLTrojan/Win32.Miner
MicrosoftTrojan:Win64/CoinMiner
GridinsoftTrojan.Win32.CoinMiner.oa!s2
ArcabitGeneric.Application.CoinMiner.1.06A9D8CE
ZoneAlarmTrojan.Win32.Miner.aszwe
GDataWin32.Application.Coinminer.BU
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.CoinMiner.R356034
Acronissuspicious
McAfeeGenericRXAA-AA!FBAF4C7FBA73
MAXmalware (ai score=80)
VBA32BScope.Trojan.Miner
MalwarebytesTrojan.BitCoinMiner
PandaTrj/Genetic.gen
APEXMalicious
TencentMalware.Win32.Gencirc.10ce19d0
YandexTrojan.Miner!yOBUgO0rI14
SentinelOneStatic AI – Suspicious PE
FortinetW32/CryptoMiner.L!tr
AVGWin32:Malware-gen
Cybereasonmalicious.fba732
Paloaltogeneric.ml

How to remove Generic.Application.CoinMiner.1.06A9D8CE?

Generic.Application.CoinMiner.1.06A9D8CE removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment