About "RiskWare.BitCoinStealer" infection

The RiskWare.BitCoinStealer is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What RiskWare.BitCoinStealer virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine RiskWare.BitCoinStealer?


File Info:
crc32: BC403E50
md5: 6bbb83f473541372b194e6939d885da1
name: 6BBB83F473541372B194E6939D885DA1.mlw
sha1: e6972008aadc15ebb9407277aaef1f8c029e6738
sha256: 237a1d0da8a43bf82e7de017b56a3e8be09ef7706bd685841cc42f9716616bc6
sha512: 0c6c9337ca449b394ad06dd5e15e61412158d9909d4d7c2b7aaca8cbb3010c1f8f8c1b23cf4f8ced7584ce4bdbf2cf13ee8373c74cbb77165b13d120a8eec17d
ssdeep: 12288:6//PRf0bBCEsJLENp6SctDyl1qL7y1SLNhlb/ctY8yPKurzkO4bLLN0K0hL:6//PRc9FMEj6tDE87bUxyiurJg
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: Bitcoin BruteForce v1.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Bitcoin BruteForce v1.0
ProductVersion: 1.0.0.0
FileDescription: Bitcoin BruteForce v1.0
OriginalFilename: Bitcoin BruteForce v1.exe

RiskWare.BitCoinStealer also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Trojan.Crypt.63
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	Trojan:Win32/Disfa.c38a3503
Cybereason	malicious.473541
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Disfa.gen
BitDefender	Gen:Variant.Trojan.Crypt.63
NANO-Antivirus	Trojan.Win32.Hesv.fhmpkv
MicroWorld-eScan	Gen:Variant.Trojan.Crypt.63
Ad-Aware	Gen:Variant.Trojan.Crypt.63
Comodo	Malware@#1eha2ymouvtv6
BitDefenderTheta	Gen:NN.ZexaF.34294.WmKfa8z47Xl
FireEye	Generic.mg.6bbb83f473541372
Emsisoft	Gen:Variant.Trojan.Crypt.63 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDropper.Phpw.hw
Avira	HEUR/AGEN.1120557
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.27A8511
Microsoft	Trojan:Win32/Occamy.C23
Arcabit	Trojan.Trojan.Crypt.63
GData	Gen:Variant.Trojan.Crypt.63
AhnLab-V3	Malware/Win32.Generic.C1829301
McAfee	Artemis!6BBB83F47354
Malwarebytes	RiskWare.BitCoinStealer
Panda	Trj/CI.A
Yandex	Trojan.GenAsa!tevPufJ/OwE
Ikarus	Trojan.MSIL.Crypt
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove RiskWare.BitCoinStealer?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “RiskWare.BitCoinStealer” infection