Malware

Should I remove “Generic.Application.CoinMiner.1.F1D9661B”?

Malware Removal

The Generic.Application.CoinMiner.1.F1D9661B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Application.CoinMiner.1.F1D9661B virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • Unconventionial binary language: Portuguese (Brazil)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

How to determine Generic.Application.CoinMiner.1.F1D9661B?


File Info:

crc32: 57D2179E
md5: f08baddb11ffe68d3b58d2c4990937eb
name: upload_file
sha1: 6ca526c4e9a885f212d60502a462dc0b20d02d0a
sha256: ffe21b8c71a2b0552f1235a06036a7574a9592b51fd8421ef77f9dafd0f929d2
sha512: 1c6e0d8aa926ef29d753b3c10cef64bd8595f8014df3863e88c05676e245e65f47c1dc7bfcabfd53fbfdcc110e8418c72659ead9a807f0a62da2e52b18418804
ssdeep: 24576:Aavgp4XjJq1Ore0BSgPiPfJe3LgpjrtA0HI6mDTpUnc0nOjY:Fc4zqOrLAPRuLgpt/ItCt
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

LegalCopyright: (C)Qihu 360 Software Co., Ltd. All rights reserved.
InternalName: boottimetoast
FileVersion: 8,6,0,1000
ProductName: Boot Time Toast Notification
ProductVersion: 8,6,0,1000
FileDescription: Windows 8 Toast Notification
OriginalFilename: boottimetoast.exe
Translation: 0x0416 0x04b0

Generic.Application.CoinMiner.1.F1D9661B also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
DrWebTool.BtcMine.2258
MicroWorld-eScanGeneric.Application.CoinMiner.1.F1D9661B
FireEyeGeneric.mg.f08baddb11ffe68d
CAT-QuickHealTrojan.GenericPMF.S10700594
McAfeeGenericRXAA-AA!F08BADDB11FF
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusRiskware ( 0056346e1 )
BitDefenderGeneric.Application.CoinMiner.1.F1D9661B
K7GWRiskware ( 0056346e1 )
Cybereasonmalicious.b11ffe
InvinceaXMRig Miner (PUA)
CyrenW32/CoinMiner.BY.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Coinminer.Generic-7151250-0
KasperskyTrojan.Win32.Miner.asxng
NANO-AntivirusRiskware.Win32.BtcMine.gutbsp
RisingTrojan.Miner!8.EA1 (TFE:5:1SNaNiR6GKB)
Ad-AwareGeneric.Application.CoinMiner.1.F1D9661B
SophosXMRig Miner (PUA)
ComodoTrojWare.Win32.CoinMiner.HR@8pgq0i
F-SecureHeuristic.HEUR/AGEN.1133596
ZillyaTrojan.Miner.Win32.9427
McAfee-GW-EditionBehavesLike.Win32.Spyware.tc
EmsisoftGeneric.Application.CoinMiner.1.F1D9661B (B)
SentinelOneDFI – Suspicious PE
JiangminTrojan.Miner.mpr
AviraHEUR/AGEN.1133596
Antiy-AVLRiskWare[RiskTool]/Win32.BitCoinMiner
MicrosoftTrojan:Win64/CoinMiner
ArcabitGeneric.Application.CoinMiner.1.F1D9661B
ZoneAlarmTrojan.Win32.Miner.asxng
GDataWin32.Application.Coinminer.BU
CynetMalicious (score: 90)
AhnLab-V3Trojan/Win32.Miner.R349954
Acronissuspicious
VBA32BScope.Trojan.Miner
MAXmalware (ai score=86)
MalwarebytesRiskWare.BitCoinMiner
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/CoinMiner.ES potentially unwanted
TencentMalware.Win32.Gencirc.10cdfcf3
YandexRiskware.Agent!
IkarusTrojan.Win32.CoinMiner
FortinetW32/CoinMiner.ES!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Generic.Application.CoinMiner.1.F1D9661B?

Generic.Application.CoinMiner.1.F1D9661B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment