Trojan

Trojan.Win32.Miner.acntb removal tips

Malware Removal

The Trojan.Win32.Miner.acntb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

What Trojan.Win32.Miner.acntb virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX

How to determine Trojan.Win32.Miner.acntb?


File Info:

crc32: 30711881
md5: 3733a37231e453f9e52660d14aa7f93b
name: NsService.exe
sha1: 9f3f99156f0e1e8b74fd8d5c4e42e3a4025aca94
sha256: e6cdf5e8d82374f373706fe5f8312a8da041d4f995ff88aa602b87df226f2f4d
sha512: df24c7b2872d25dc76c2f09bfc925c0549e8d22f7b5948f5c436079e0bc43d31db0072999613de386fb9653ebc3a9535208786ca9602bf2be5de6b083e5c8396
ssdeep: 6144:1sHqXrSQ2V3BivY+413IsU6GjsLxp/uwONct43jk8U:1scr03W5g3w61lpGHNu4Y8U
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2019 NicoSoft.IO
InternalName: NsService.exe
FileVersion: 1.0.1
CompanyName: NicoSoft
ProductName: NicoSoft Cloud
ProductVersion: 1.0.1
FileDescription: NicoSoft Cloud Service
OriginalFilename: NsService.exe
Translation: 0x0409 0x04b0

Trojan.Win32.Miner.acntb also known as:

MicroWorld-eScanTrojan.GenericKD.32718032
CAT-QuickHealTrojan.Miner
McAfeeRDN/Generic Downloader.x
CylanceUnsafe
K7AntiVirusTrojan-Downloader ( 0055b7e71 )
K7GWTrojan-Downloader ( 0055b7e71 )
CrowdStrikewin/malicious_confidence_90% (W)
SymantecTrojan.Gen.MBT
ESET-NOD32Win64/TrojanDownloader.Agent.EH
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan.Win32.Miner.acntb
BitDefenderTrojan.GenericKD.32718032
NANO-AntivirusTrojan.Win64.Miner.ghtqdx
Endgamemalicious (moderate confidence)
F-SecureTrojan.TR/Dldr.Agent.amrbo
DrWebTrojan.Siggen8.55945
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R03BC0PKH19
McAfee-GW-EditionBehavesLike.Win64.Downloader.dc
FortinetW32/Miner.ACNTB!tr
FireEyeGeneric.mg.3733a37231e453f9
SophosMal/Generic-S
IkarusTrojan-Downloader.Win64.Agent
CyrenW64/Trojan.NELF-0678
AviraTR/Dldr.Agent.amrbo
MAXmalware (ai score=82)
ArcabitTrojan.Generic.D1F33CD0
ZoneAlarmTrojan.Win32.Miner.acntb
MicrosoftTrojan:Win32/CoinMiner.C!cl
AhnLab-V3Malware/Win64.Generic.C3574876
ALYacTrojan.GenericKD.32718032
Ad-AwareTrojan.GenericKD.32718032
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R03BC0PKH19
SentinelOneDFI – Suspicious PE
GDataTrojan.GenericKD.32718032
AVGWin64:Trojan-gen
Cybereasonmalicious.56f0e1
AvastWin64:Trojan-gen
Qihoo-360Win32/Trojan.0f8

How to remove Trojan.Win32.Miner.acntb?

Trojan.Win32.Miner.acntb removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment