Malware

Generic.Application.CoinMiner.1.C28E5EEE removal guide

Malware Removal

The Generic.Application.CoinMiner.1.C28E5EEE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Application.CoinMiner.1.C28E5EEE virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

How to determine Generic.Application.CoinMiner.1.C28E5EEE?


File Info:

crc32: 2F4FA52B
md5: 67e1ecb719e8abddbec20cbf20f21cba
name: 67E1ECB719E8ABDDBEC20CBF20F21CBA.mlw
sha1: 9523611d51ddbc01b37ea0935ab39a9ba697c8fb
sha256: d055b5c0e20d028fc566c9b06abb5896eff0788f68503836bcb193c0102cfc75
sha512: ecfccfc1dcef0e3976e9f4ad6ce70a6777f6a804497f7216e5ef632e09e9d66c2681d4b27b078c4a1e53b226054fd9351852d5fc15ee1343f2cea823283a6daa
ssdeep: 24576:fRBrzwX0YmJI8DRnCD4jtnT8Q1r0ly78ipwR7:pJzdnm4lT8Q1r0pieR7
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

LegalCopyright: xa9 Valve Corporation
ProductName: Steam
FileVersion: 2.10.91.91
FileDescription: Steam
Translation: 0x0816 0x04e4

Generic.Application.CoinMiner.1.C28E5EEE also known as:

MicroWorld-eScanGeneric.Application.CoinMiner.1.C28E5EEE
FireEyeGeneric.mg.67e1ecb719e8abdd
CAT-QuickHealTrojan.MinerPMF.S17010081
ALYacGeneric.Application.CoinMiner.1.C28E5EEE
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusRiskware ( 00574bb11 )
BitDefenderGeneric.Application.CoinMiner.1.C28E5EEE
K7GWRiskware ( 00574bb11 )
Cybereasonmalicious.719e8a
BitDefenderThetaGen:NN.ZexaCO.34700.enKfa4g63rci
CyrenW32/CoinMiner.YUOF-4693
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/CoinMiner.ES potentially unwanted
APEXMalicious
ClamAVWin.Coinminer.Generic-7151250-0
KasperskyTrojan.Win32.Miner.aszwe
NANO-AntivirusRiskware.Win32.BtcMine.gmfedn
AvastWin32:Malware-gen
TencentMalware.Win32.Gencirc.10ce19d0
Ad-AwareGeneric.Application.CoinMiner.1.C28E5EEE
SophosXMRig Miner (PUA)
ComodoApplication.Win32.CoinMiner.BS@8rlsid
F-SecureHeuristic.HEUR/AGEN.1124159
DrWebTool.BtcMine.2235
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
EmsisoftGeneric.Application.CoinMiner.1.C28E5EEE (B)
IkarusPUA.CoinMiner
JiangminRiskTool.BitMiner.calf
AviraHEUR/AGEN.1124159
Antiy-AVLTrojan/Win32.Miner
MicrosoftTrojan:Win64/CoinMiner
GridinsoftTrojan.Win32.CoinMiner.oa!s2
ArcabitGeneric.Application.CoinMiner.1.C28E5EEE
ZoneAlarmTrojan.Win32.Miner.aszwe
GDataWin32.Application.Coinminer.BU
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.CoinMiner.R356034
Acronissuspicious
McAfeeGenericRXAA-AA!67E1ECB719E8
MAXmalware (ai score=82)
VBA32BScope.Trojan.Miner
MalwarebytesTrojan.BitCoinMiner
RisingTrojan.Miner!8.EA1 (TFE:5:1SNaNiR6GKB)
YandexTrojan.Miner!yOBUgO0rI14
SentinelOneStatic AI – Suspicious PE
FortinetW32/CryptoMiner.L!tr
AVGWin32:Malware-gen
PandaTrj/Genetic.gen

How to remove Generic.Application.CoinMiner.1.C28E5EEE?

Generic.Application.CoinMiner.1.C28E5EEE removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment