Should I remove “RiskTool.MSIL.BitCoinMiner”?

The RiskTool.MSIL.BitCoinMiner is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What RiskTool.MSIL.BitCoinMiner virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine RiskTool.MSIL.BitCoinMiner?


File Info:
name: 087FC2AC71DABADAA5A8.mlw
path: /opt/CAPEv2/storage/binaries/2b1c2e92b6b8509fb3a078b4689ecb68ccdd48950658e8b17e3523a9e9b89dc4
crc32: 4E280471
md5: 087fc2ac71dabadaa5a81ebbe8bae41b
sha1: 29fda6832fa273c8ed9a7ac172e3156514a4b8c5
sha256: 2b1c2e92b6b8509fb3a078b4689ecb68ccdd48950658e8b17e3523a9e9b89dc4
sha512: eea505eccde88ded35c5f57897006e319e2a72b710b221f55c960c35fee6927d0a62074359b163c36ce8653139d45be7720a834fdcb1f68f4b09490642b86594
ssdeep: 192:apaVvuuUxKSMpENvAJp15jM9Nzfv0++eMmaHHlCduVWYrvBlteWjInR5P:akVvuuXSMpENvAJp15jM9OFCduVWYrtU
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T19622F82A6BD4E77ECCAA76BA7C7E06080B30F2419C07833954902C7F9CAFB641660731
sha3_384: ed4ca4ec174dcbeeca74b6b2e1686f11aadd5be67b0b1639dc84eb368123e5525702dfb75a8cf2513e8f90149b7147c7
ep_bytes: ff250020001000000000000000000000
timestamp: 2022-04-06 10:54:32

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: AwesomeMiner.ScriptInterface
FileVersion: 9.3.4.0
InternalName: AwesomeMiner.ScriptInterface.dll
LegalCopyright: Copyright © 2014-2022 IntelliBreeze Software AB
LegalTrademarks: 
OriginalFilename: AwesomeMiner.ScriptInterface.dll
ProductName: AwesomeMiner.ScriptInterface
ProductVersion: 9.3.4.0
Assembly Version: 9.3.4.0

RiskTool.MSIL.BitCoinMiner also known as:

Bkav	W32.Common.9C09633E
Skyhigh	Artemis
Cylance	unsafe
Zillya	Tool.BitCoinMiner.Win32.42682
Kaspersky	not-a-virus:HEUR:RiskTool.MSIL.BitCoinMiner.gen
Avast	Win32:TrojanX-gen [Trj]
Jiangmin	RiskTool.MSIL.cscg
ZoneAlarm	not-a-virus:HEUR:RiskTool.MSIL.BitCoinMiner.gen
McAfee	Artemis!087FC2AC71DA
VBA32	Trojan.MSIL.gen.m
MaxSecure	Trojan.Malware.73599898.susgen
AVG	Win32:TrojanX-gen [Trj]

How to remove RiskTool.MSIL.BitCoinMiner?

RiskTool.MSIL.BitCoinMiner removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X