Categories: Malware

Generic.Application.CoinMiner.1.0D596F13 removal

The Generic.Application.CoinMiner.1.0D596F13 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Application.CoinMiner.1.0D596F13 virus can do?

Possible date expiration check, exits too soon after checking local time
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs

How to determine Generic.Application.CoinMiner.1.0D596F13?


File Info:
crc32: 6F8152AFmd5: bf2882b4be96f6c67e2d21f737c86a35name: tmpc_y0h2t1sha1: 6502227f73c8e9f797f4b22476d0bc24eaaf571bsha256: 2962d1fd2d46bc17c7409f24c9dd32dcaf66b2ce0aec40d22830da47a2e843aesha512: ca36e1a2f2549634d8afae42cb5b075beb733a48e656502eb617276b4f9eaee8c720483ca7b8f9d5a186e5e689d258e7db29109de36d5d65b501e0396c2099b4ssdeep: 24576:Qavgp4XjJq1Ore0BSgPiPfJe3LgpjrtA0HI6mDTpUnc0nOjY:Vc4zqOrLAPRuLgpt/ItCttype: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
Version Info:
LegalCopyright: (C) 360.cn All Rights Reserved.InternalName: MessageNotifyFileVersion: 1, 0, 0, 1061CompanyName: 360.cnProductName: 360x5b89x5168x536bx58ebProductVersion: 1, 0, 0, 1061FileDescription: 360x5b89x5168x536bx58eb x6728x9a6cx9632x706bx5899x6a21x5757OriginalFilename: MessageNotify.exeTranslation: 0x0409 0x04b0

Generic.Application.CoinMiner.1.0D596F13 also known as:

DrWeb	Tool.BtcMine.2258
MicroWorld-eScan	Generic.Application.CoinMiner.1.0D596F13
FireEye	Generic.Application.CoinMiner.1.0D596F13
CAT-QuickHeal	Trojan.GenericPMF.S10700594
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
BitDefender	Generic.Application.CoinMiner.1.0D596F13
Cybereason	malicious.4be96f
BitDefenderTheta	Gen:NN.ZexaF.34100.fnKfauVo5rli
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Coinminer.Generic-7151250-0
GData	Win32.Application.Coinminer.BU
Kaspersky	Trojan.Win32.Miner.akcpv
NANO-Antivirus	Riskware.Win32.BtcMine.gutbsp
Tencent	Malware.Win32.Gencirc.10b8b4fa
Ad-Aware	Generic.Application.CoinMiner.1.0D596F13
Sophos	XMRig Miner (PUA)
Comodo	TrojWare.Win32.CoinMiner.HR@8pgq0i
F-Secure	Heuristic.HEUR/AGEN.1046019
Zillya	Trojan.Miner.Win32.9427
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Injector.tc
Trapmine	malicious.high.ml.score
Emsisoft	Generic.Application.CoinMiner.1.0D596F13 (B)
Ikarus	PUA.CoinMiner
Cyren	W32/Application.DNNM-3301
Jiangmin	RiskTool.BitMiner.bzvn
Avira	HEUR/AGEN.1046019
MAX	malware (ai score=86)
Antiy-AVL	RiskWare[RiskTool]/Win32.BitCoinMiner
Endgame	malicious (moderate confidence)
Arcabit	Generic.Application.CoinMiner.1.0D596F13
ZoneAlarm	Trojan.Win32.Miner.akcpv
Microsoft	Trojan:Win32/Wacatac.C!ml
AhnLab-V3	Trojan/Win32.CoinMiner.R326403
Acronis	suspicious
McAfee	GenericRXAA-AA!BF2882B4BE96
VBA32	BScope.Trojan.Miner
Malwarebytes	Trojan.BitCoinMiner
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/CoinMiner.ES potentially unwanted
Rising	PUF.CoinMiner!8.4639 (RDMK:cmRtazqAho8IWPaU+vy/cJIMUIes)
Yandex	Riskware.Agent!
SentinelOne	DFI – Suspicious PE
Fortinet	W32/CoinMiner.ES!tr
AVG	Win32:HarHarMiner-A [Trj]
Avast	Win32:HarHarMiner-A [Trj]
MaxSecure	Win.MxResIcn.Heur.Gen