RiskTool.Win32.BitCoinMiner.cbf removal tips

The RiskTool.Win32.BitCoinMiner.cbf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What RiskTool.Win32.BitCoinMiner.cbf virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid

How to determine RiskTool.Win32.BitCoinMiner.cbf?


File Info:
name: 42944630FD932D20F3DD.mlw
path: /opt/CAPEv2/storage/binaries/aac3bf1064e929a446ac97e29643b9bbab6f8f52af355a7100c03d4ea06a622e
crc32: D8B2F3C1
md5: 42944630fd932d20f3ddca8211cf0f11
sha1: 4e5347b513b8316a8ca76f807634c34fb05f20f3
sha256: aac3bf1064e929a446ac97e29643b9bbab6f8f52af355a7100c03d4ea06a622e
sha512: 5bc429615de38f3eb2c71be11208fc95a6e9883474133b749c1f9c10d593283908e2a0d3e7a63556df90e38cb399d5860cc3840885d3d61cb71cf8d6584ed70f
ssdeep: 3072:VXp0mxNAlrqu3m5Z7ZHBBhevyX/cS3gMtfYNcXg:V50mYxquW5ZdREg/cS3gagNcXg
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T17C2429E179F89C8AEA54527E89E7D722623DBAD04623CB532334B4765F42EC239D4343
sha3_384: bdb82e8ed982a8bf4d16b6bcf53a4a29b82748f282d75c47aa409b435fe4b638c83f0d0fc0b4b16a7e7a71abee52cc2e
ep_bytes: 60be152044008dbeebeffbffc7878c7b
timestamp: 2012-07-19 10:04:38

Version Info:
0: [No Data]

RiskTool.Win32.BitCoinMiner.cbf also known as:

Lionic	Riskware.Win32.BitCoinMiner.1!c
DrWeb	Tool.BtcMine.63
Cylance	Unsafe
Zillya	Backdoor.PePatch.Win32.101072
Sangfor	Trojan.Win32.BitCoinMiner.JV
Alibaba	RiskWare:Win32/Miners.c2dad087
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/CoinMiner.BY potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R002C0PLB21
Kaspersky	not-a-virus:RiskTool.Win32.BitCoinMiner.cbf
NANO-Antivirus	Trojan.Win32.Graftor.wrsgv
Avast	FileRepMetagen [PUP]
Tencent	Win32.Trojan.Generic.zfo
Sophos	Bitcoin Miner (PUA)
Comodo	Malware@#7io1pffnvpbt
VIPRE	RiskTool.Win32.BitCoinMiner (not malicious)
TrendMicro	TROJ_GEN.R002C0PLB21
McAfee-GW-Edition	PUP-XFZ-FT
Ikarus	possible-Threat.BitCoin
Jiangmin	RiskTool.BitCoinMiner.mt
Avira	TR/Kazy.84996.1
Antiy-AVL	Trojan/Generic.ASMalwS.20041B
Kingsoft	Win32.Troj.Generic.a.(kcloud)
Gridinsoft	Ransom.Win32.Gen.sa
ViRobot	Adware.Coinminer.212260
Microsoft	PUA:Win32/Presenoker
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win32.BitMiner.C163155
McAfee	Artemis!42944630FD93
MAX	malware (ai score=100)
VBA32	BScope.Trojan.BtcMine
APEX	Malicious
Yandex	RiskTool.BitCoinMiner!Mo/dsVLIphM
eGambit	Unsafe.AI_Score_99%
Fortinet	Riskware/CoinMiner
AVG	FileRepMetagen [PUP]
Panda	Trj/CI.A
MaxSecure	Trojan.Malware.300983.susgen

How to remove RiskTool.Win32.BitCoinMiner.cbf?

RiskTool.Win32.BitCoinMiner.cbf removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X