What is "MSIL/CoinMiner.ALY"?

The MSIL/CoinMiner.ALY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/CoinMiner.ALY virus can do?

Creates RWX memory
Installs itself for autorun at Windows startup
Creates a hidden or system file
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/CoinMiner.ALY?


File Info:
crc32: 344DB58D
md5: b5b8f3417072180cc9951325940ce4dd
name: B5B8F3417072180CC9951325940CE4DD.mlw
sha1: b1103234a19a9ca5219cefcff271ba8fb1f3d86c
sha256: 1a5e7a0f0ad84ea1962ffda1aea8078f94ece779b7ac864a517678705ba0dee9
sha512: 3ffa6e767a1c3ebb7648c86fdc36a59deaebb735084f697b564a28beb3f8a44aa0118be3bb74282de377966f4bd62f497ae7e169dfba15ea8c4fbe8edf7bef23
ssdeep: 49152:TDJ4datoxZoEu9sfcpKLJRTnlX652x/s6eDsOeVF/Kw43thZ:
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: _.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: .
ProductVersion: 1.0.0.0
FileDescription: Processo de Host para Tarefas do Windows
OriginalFilename: _.exe

MSIL/CoinMiner.ALY also known as:

K7AntiVirus	Trojan ( 00529c111 )
DrWeb	Trojan.Starter.7560
Cynet	Malicious (score: 99)
Cylance	Unsafe
Zillya	Trojan.CoinMiner.Win32.7941
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 00529c111 )
Cybereason	malicious.4a19a9
ESET-NOD32	MSIL/CoinMiner.ALY
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.MSIL.Fsysna.gen
NANO-Antivirus	Trojan.Win32.Starter.eyresy
Sophos	Generic PUA LB (PUA)
BitDefenderTheta	Gen:NN.ZemsilF.34236.gp0@aKFQgOc
McAfee-GW-Edition	BehavesLike.Win32.PUP.wz
FireEye	Generic.mg.b5b8f3417072180c
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1123172
eGambit	Unsafe.AI_Score_100%
Microsoft	Backdoor:Win32/Bladabindi!ml
ZoneAlarm	HEUR:Trojan.MSIL.Fsysna.gen
McAfee	Artemis!B5B8F3417072
Ikarus	Trojan.SuspectCRC
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/CoinMiner.ALY!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove MSIL/CoinMiner.ALY?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “MSIL/CoinMiner.ALY”?