Linux/CoinMiner.MZ removal instruction

The Linux/CoinMiner.MZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Linux/CoinMiner.MZ virus can do?

• Injection (inter-process)
• Injection with CreateRemoteThread in a remote process
• Uses Windows utilities for basic functionality
• Attempts to repeatedly call a single API many times in order to delay analysis time
• A potential decoy document was displayed to the user
• Network activity detected but not expressed in API logs

Related domains:

How to determine Linux/CoinMiner.MZ?

File Info:
crc32: 0BB2281A
md5: 694ba3463c4857a116bb769887c19263
name: tmp7xm8qw8x
sha1: de0496acf9bdc9b9537ebc2ad4ad02cae5ddc7b8
sha256: fe278cc97c0971c3facf0b13bdc58df1e20ff6a5c3cdaee00c525b03990a994b
sha512: b71bcb7da49a294320c8b185bcf47af92c8f9bfc30a3ed6caa763cb0d25c38d3b626e4742e8965c814c429a3eda47c660fe1cbffa3b34459650906f6d0dc64e5
ssdeep: 192:fs6PgM8PvaA0Rj4lea3PkhzH46xEAew72K1ew72rAxew72v3dSfw72v3dSyjRrRZ:fs6PgM8PvaA0Rj4noHFCKSY/YBw
type: Bourne-Again shell script, ASCII text executable

Version Info:
0: [No Data]

Linux/CoinMiner.MZ also known as:

How to remove Linux/CoinMiner.MZ?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.