RiskTool.Win32.BitCoinMiner.iiix information

The RiskTool.Win32.BitCoinMiner.iiix is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What RiskTool.Win32.BitCoinMiner.iiix virus can do?

Creates RWX memory
Dynamic (imported) function loading detected
Reads data out of its own binary image
Authenticode signature is invalid

How to determine RiskTool.Win32.BitCoinMiner.iiix?


File Info:
name: 2121333856416DFA1C21.mlw
path: /opt/CAPEv2/storage/binaries/f6f3da68070c5fce59410a6772ff3165a306289c4453133ecf434326c11758a2
crc32: 8AB76CBA
md5: 2121333856416dfa1c21c93f8b5f208c
sha1: af949ed77cac00286be4eca2a039b24c3a0dcad1
sha256: f6f3da68070c5fce59410a6772ff3165a306289c4453133ecf434326c11758a2
sha512: 342cc204ca7e4237ba43cfb1d9cb5e4d4b4429d8cad9a365f70d56f4b579c7b0ffba76ea2eb6f8133a58c35a6b55dbb7feaa48f53299a296f32728acca817559
ssdeep: 196608:A3UTkdAP/irbrVaWL+ZnmlOsKPP6bZMYI/ayAvbuL:A9CPSbrV0wbiSaYg6zg
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1458633163FA27002F3A85DFE39752D4740A1E11B2DCE8F4E1716B4B0A8E27DC5D786A6
sha3_384: 09c412bde5349b1d47384147434010a4e04e2973c9a6f04c8f64624da12efdd5ba52df1f0fec176931b9d66fc2da60c7
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:46

Version Info:
CompanyName: Dogecoin
CompanyWebsite: http://dogecoin.com
FileDescription: 
FileVersion: 1.5.1.0
LegalCopyright: 
ProductName: Dogecoin
ProductVersion: 1.5.1.0
Translation: 0x0000 0x0000

RiskTool.Win32.BitCoinMiner.iiix also known as:

McAfee	Artemis!212133385641
Cylance	Unsafe
Sangfor	CoinMiner.Win32.Agent.iiix
K7AntiVirus	Unwanted-Program ( 004d38111 )
Alibaba	RiskWare:Win32/Miners.7a93b38d
K7GW	Unwanted-Program ( 004d38111 )
Symantec	PUA.Gen.2
ESET-NOD32	a variant of Win32/CoinMiner.BJ potentially unwanted
Kaspersky	not-a-virus:RiskTool.Win32.BitCoinMiner.iiix
Sophos	Generic Reputation PUA (PUA)
Zillya	Tool.BitCoinMiner.Win32.2218
McAfee-GW-Edition	BehavesLike.Win32.BadFile.wc
Jiangmin	RiskTool.BitCoinMiner.yaf
ViRobot	Adware.Coinminer.8088502
TrendMicro-HouseCall	TROJ_GEN.R002H07K521
Fortinet	Riskware/BitCoinMiner

How to remove RiskTool.Win32.BitCoinMiner.iiix?

RiskTool.Win32.BitCoinMiner.iiix removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X