RiskTool.Win32.BitCoinMiner.joxi removal guide

The RiskTool.Win32.BitCoinMiner.joxi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What RiskTool.Win32.BitCoinMiner.joxi virus can do?

Reads data out of its own binary image
Network activity detected but not expressed in API logs

How to determine RiskTool.Win32.BitCoinMiner.joxi?


File Info:
crc32: 548E24AF
md5: b0c8a56c67c676fbb633f46ca29d81fa
name: B0C8A56C67C676FBB633F46CA29D81FA.mlw
sha1: 28c834b49b61e1b2ecd148c582893353c933ac85
sha256: 037bdae5bbf739c9a8eea284ef287f84206c40fcae11b07c4790e7292242ded6
sha512: b8b5fec9ee00042e9c2738c7ee698566605fd347062598142d934353500121cc8012fa219ae1fc5b63e36bb16424e9ea0891ce29db0a910e31344e9440101b0b
ssdeep: 49152:ZDI4QUagDg7gQQKCaxr5j5mRMx4IsQoNLKVXBTTKxxs+:ZcPdQFUj5H/Tb+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2018 Native Systema
InternalName: MServicesX
FileVersion: 1.0.0
CompanyName: Native Systema
ProductName: Main Services Install
ProductVersion: 1.0.0
FileDescription: Main Services Install Installer
OriginalFileName: MServicesX.exe
Translation: 0x0409 0x04b0

RiskTool.Win32.BitCoinMiner.joxi also known as:

Lionic	Trojan.Win32.Generic.4!c
Cylance	Unsafe
APEX	Malicious
Avast	FileRepMetagen [Malware]
Kaspersky	not-a-virus:RiskTool.Win32.BitCoinMiner.joxi
Sophos	Generic PUA CI (PUA)
Comodo	ApplicUnwnt@#f2aarvgdgrwl
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.vh
SentinelOne	Static AI – Suspicious PE
Microsoft	PUA:Win32/Presenoker
McAfee	Artemis!B0C8A56C67C6
MAX	malware (ai score=96)
Ikarus	Trojan.Agent
Fortinet	W32/PossibleThreat
AVG	FileRepMetagen [Malware]
Paloalto	generic.ml

How to remove RiskTool.Win32.BitCoinMiner.joxi?

RiskTool.Win32.BitCoinMiner.joxi removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X