What is “RiskTool.Win32.BitMiner”?

The RiskTool.Win32.BitMiner is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What RiskTool.Win32.BitMiner virus can do?

Anomalous binary characteristics

How to determine RiskTool.Win32.BitMiner?


File Info:
crc32: 6F1CEA03
md5: 74fd756f362065d3207a082d2597ff7d
name: xne64-261.exe
sha1: 08b884c6b23935c840e7a5168032d4738dc0708a
sha256: 54ea918c9d08c71d6d1ebdee3da9bcd476ea48992156a0ff6912f7a1e3091bd9
sha512: 3b907bc72a6d0fcaef605c9da2ed7ebc75636204af0fdeff0aa54b3019bcd677806458a5a93492fb67462608c44973c3e142d6ce0dabf7c1b4ba71a62943a59b
ssdeep: 98304:rWq0JM0zZxbWg1KH4qCpxCPllqGSkMfIJTtxaFFP56b4qpCX53Eysyi8xAKlkW1:6DbWg1g++ytSskW1vuBWo6wlNq+xg
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2016-2018 xmrig.com
FileVersion: 2.6.1
CompanyName: www.xmrig.com
ProductName: XMRig
ProductVersion: 2.6.1
FileDescription: XMRig CUDA miner
OriginalFilename: xmrig-nvidia.exe
Translation: 0x0000 0x04b0

RiskTool.Win32.BitMiner also known as:

MicroWorld-eScan	Gen:Variant.Application.Miner.2
CAT-QuickHeal	Win32.Riskware
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
Cybereason	malicious.f36206
Invincea	heuristic
APEX	Malicious
Paloalto	generic.ml
ClamAV	Multios.Trojan.CryptocoinMiner-6448864-1
Kaspersky	not-a-virus:HEUR:RiskTool.Win32.BitMiner.gen
NANO-Antivirus	Trojan.Win64.CoinMiner.fcsiyw
Ad-Aware	Gen:Variant.Application.Miner.2
Sophos	XMRig Miner (PUA)
TrendMicro	TROJ_GEN.R002C0DAN20
McAfee-GW-Edition	BehavesLike.Win64.CoinMiner.rh
Emsisoft	Gen:Variant.Application.Miner.2 (B)
Jiangmin	RiskTool.BitMiner.akcm
Avira	HEUR/AGEN.1004159
Antiy-AVL	GrayWare/Win32.CoinMiner.fd
Endgame	malicious (high confidence)
ZoneAlarm	not-a-virus:HEUR:RiskTool.Win32.BitMiner.gen
AhnLab-V3	Unwanted/Win64.XMR-Miner.R223760
Acronis	suspicious
McAfee	W64/CoinMiner
TrendMicro-HouseCall	TROJ_GEN.R002C0DAN20
Yandex	Riskware.Agent!
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	Riskware/BitMiner
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/Virus.RiskTool.435

How to remove RiskTool.Win32.BitMiner?

RiskTool.Win32.BitMiner removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X