How to remove “Trojan.Miner.EH (B)”?

The Trojan.Miner.EH (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Miner.EH (B) virus can do?

Dynamic (imported) function loading detected
Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Miner.EH (B)?


File Info:
name: 3D9EBC63F73EB8748F59.mlw
path: /opt/CAPEv2/storage/binaries/effab7c96d02c5f3349f5bc60314058b52da41f2d1bc3274e02370c96705be1d
crc32: 27ECEF03
md5: 3d9ebc63f73eb8748f598f57b4e20cd7
sha1: c6f754017abdfa19e592c99c657bd6179d151476
sha256: effab7c96d02c5f3349f5bc60314058b52da41f2d1bc3274e02370c96705be1d
sha512: aea21ba1741e4fe0bf36ca6f3f8e1284f8cbad95f989177dd1d9115d6b7e51be6d338f066caf36aa5a0d433dbe923f280a212074794e5aff2dc5a3170935880c
ssdeep: 98304:vgwR8Rx0+W2H395Rm0ZBwgGuHL+4LdESwzKQk08cv2MpZ1KvwscB2zdLnZVQckfa:vgn70+dfpUg9LTCtHLsvvdb3Qckys0
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CB3633E216D1B8F4E0913C327229F6FD36D73E268F1035B39E07DA9958759C1A6B0A07
sha3_384: bfdec8ab60bcbda970d020f1940f53fb645dad65b0d964c1a3bea756ab387d749763ac4b36a285a9adb84a93f8b6e64a
ep_bytes: 558bec6aff6870c4410068c095410064
timestamp: 2012-12-31 00:38:51

Version Info:
CompanyName: Oleg N. Scherbakov
FileDescription: 7z Setup SFX (x86)
FileVersion: 1.6.0.2712
InternalName: 7ZSfxMod
LegalCopyright: Copyright © 2005-2012 Oleg N. Scherbakov
OriginalFilename: 7ZSfxMod_x86.exe
PrivateBuild: December 30, 2012
ProductName: 7-Zip SFX
ProductVersion: 1.6.0.2712
Translation: 0x0000 0x04b0

Trojan.Miner.EH (B) also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Trojan.Miner.EH
FireEye	Generic.mg.3d9ebc63f73eb874
ALYac	Trojan.Miner.EH
BitDefender	Trojan.Miner.EH
Avast	Win32:Malware-gen
Ad-Aware	Trojan.Miner.EH
Emsisoft	Trojan.Miner.EH (B)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=81)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Trojan.Miner.EH
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C4198781
APEX	Malicious
Ikarus	Trojan.Sesfix
Fortinet	W32/Sesfix.13B0!tr
AVG	Win32:Malware-gen

How to remove Trojan.Miner.EH (B)?

Trojan.Miner.EH (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X