Malware

Generic.Application.CoinMiner.1.D3CA06ED removal

Malware Removal

The Generic.Application.CoinMiner.1.D3CA06ED is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Application.CoinMiner.1.D3CA06ED virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • Unconventionial binary language: Portuguese (Brazil)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generic.Application.CoinMiner.1.D3CA06ED?


File Info:

crc32: 260276EE
md5: 6508c954f17054f5c5ba59b139e43a41
name: upload_file
sha1: b44b8c929e7522190e385dcea418f5259769c260
sha256: 6c29d20ee926435cc0f8a6fecb607f238e8166aa7d107aaac55c94c321a20881
sha512: e4df44dd5e1798e077ecdad344ef646557f7fe6168242126a7598b14d237da33de2dc1e4c1f84d8f7aab56aeaf7a8fb6e67e567c33bd97b102e79c4efc3fe05f
ssdeep: 24576:1avgp4XjJq1Ore0BSgPiPfJe3LgpjrtA0HI6mDTpUnc0nOjY:wc4zqOrLAPRuLgpt/ItCt
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

LegalCopyright: (C)Qihu 360 Software Co., Ltd. All rights reserved.
InternalName: boottimetoast
FileVersion: 8,6,0,1000
ProductName: Boot Time Toast Notification
ProductVersion: 8,6,0,1000
FileDescription: Windows 8 Toast Notification
OriginalFilename: boottimetoast.exe
Translation: 0x0416 0x04b0

Generic.Application.CoinMiner.1.D3CA06ED also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Application.CoinMiner.1.D3CA06ED
FireEyeGeneric.mg.6508c954f17054f5
CAT-QuickHealTrojan.GenericPMF.S10700594
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusRiskware ( 0056346e1 )
BitDefenderGeneric.Application.CoinMiner.1.D3CA06ED
K7GWRiskware ( 0056346e1 )
CyrenW32/CoinMiner.BY.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Coinminer.Generic-7151250-0
KasperskyTrojan.Win32.Miner.asxng
NANO-AntivirusRiskware.Win32.BtcMine.gutbsp
TencentMalware.Win32.Gencirc.10cdfcf3
Ad-AwareGeneric.Application.CoinMiner.1.D3CA06ED
SophosXMRig Miner (PUA)
ComodoTrojWare.Win32.CoinMiner.HR@8pgq0i
F-SecureHeuristic.HEUR/AGEN.1133596
DrWebTool.BtcMine.2258
ZillyaTrojan.Miner.Win32.9427
InvinceaXMRig Miner (PUA)
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
EmsisoftGeneric.Application.CoinMiner.1.D3CA06ED (B)
IkarusTrojan.Win32.CoinMiner
JiangminTrojan.Miner.mpr
AviraHEUR/AGEN.1133596
Antiy-AVLRiskWare[RiskTool]/Win32.BitCoinMiner
MicrosoftTrojan:Win64/CoinMiner
ArcabitGeneric.Application.CoinMiner.1.D3CA06ED
AhnLab-V3Trojan/Win32.Miner.R349954
ZoneAlarmTrojan.Win32.Miner.asxng
GDataWin32.Application.Coinminer.BU
CynetMalicious (score: 90)
ESET-NOD32a variant of Win32/CoinMiner.ES potentially unwanted
Acronissuspicious
McAfeeGenericRXAA-AA!6508C954F170
MAXmalware (ai score=83)
VBA32BScope.Trojan.Miner
MalwarebytesRiskWare.BitCoinMiner
PandaTrj/Genetic.gen
RisingTrojan.Miner!8.EA1 (TFE:5:1SNaNiR6GKB)
YandexRiskware.Agent!
SentinelOneDFI – Suspicious PE
FortinetW32/CoinMiner.ES!tr
AVGWin32:Malware-gen
Cybereasonmalicious.4f1705
Paloaltogeneric.ml

How to remove Generic.Application.CoinMiner.1.D3CA06ED?

Generic.Application.CoinMiner.1.D3CA06ED removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment