Trojan.Win32.Miner.uopw (file analysis)

The Trojan.Win32.Miner.uopw is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Miner.uopw virus can do?

Executable code extraction
Creates RWX memory
Anomalous binary characteristics

Related domains:

bin.memoryson.bid

alt.zincbutter.download

How to determine Trojan.Win32.Miner.uopw?


File Info:
crc32: EEEF9FF2
md5: 235f3c82edc9e903d0b0cb149959e024
name: 235F3C82EDC9E903D0B0CB149959E024.mlw
sha1: c7acd8cd5f6d63231c09ed7b8b1b2b219e6d6ae2
sha256: 032f8ea15ed8e6698603d36ee59da6a920212941aee5b2975703c4a111b44670
sha512: dfc9618180bee7279ee7c3c755b20f92bee23d0755715bb4cdb405942c31d278859fc79b20faf71fc6ecd93d81ad354dff2ca4d442fcc2ed5e08a9c85801b7aa
ssdeep: 24576:MsKk5UR6pNeMBJSTIr7KebFbfJy6rBHAUl2xtO:MTkeR6ZDSTcuQhctF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9Aonwepiiso saindehal deebahu 
InternalName: ONFI.EXE
FileVersion: 3.0.3.9
CompanyName: xa9Aonwepiiso saindehal deebahu 
ProductName: ONFI
ProductVersion: 3.0.3.9
OriginalFilename: onfi.exe
Translation: 0x0409 0x04e4

Trojan.Win32.Miner.uopw also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0053ba2f1 )
Lionic	Trojan.Win32.Miner.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Vittalia.17914
Cynet	Malicious (score: 100)
ALYac	Gen:Heur.Mint.Zamg.1
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	Trojan:Win32/Miner.e692165e
K7GW	Trojan ( 0053ba2f1 )
Cybereason	malicious.2edc9e
Cyren	W32/Kryptik.CVO.gen!Eldorado
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/Kryptik.GIVU
APEX	Malicious
Avast	FileRepMalware
Kaspersky	Trojan.Win32.Miner.uopw
BitDefender	Gen:Heur.Mint.Zamg.1
NANO-Antivirus	Trojan.Win32.Kryptik.fhbjfh
MicroWorld-eScan	Gen:Heur.Mint.Zamg.1
Tencent	Win32.Trojan.Miner.Hoyp
Ad-Aware	Gen:Heur.Mint.Zamg.1
Sophos	Mal/Generic-R + Mal/EncPk-AOA
Comodo	Application.Win32.Dlhelper.GE@8159h4
BitDefenderTheta	Gen:NN.ZexaF.34294.EM0@a48VRNmi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Downloader.vz
FireEye	Generic.mg.235f3c82edc9e903
Emsisoft	Gen:Heur.Mint.Zamg.1 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Downloader.Generic.xhn
Avira	HEUR/AGEN.1101341
Antiy-AVL	Trojan/Generic.ASMalwS.27E50AD
Microsoft	Program:Win32/Unwaders.C!rfn
GData	Gen:Heur.Mint.Zamg.1
Acronis	suspicious
McAfee	Packed-FKC!235F3C82EDC9
MAX	malware (ai score=99)
VBA32	BScope.Adware.DownloadHelper
Malwarebytes	MachineLearning/Anomalous.97%
Panda	Trj/GdSda.A
Rising	Trojan.Kryptik!1.B33C (CLASSIC)
Ikarus	PUA.Dlhelper
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.GJJV!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Trojan.Win32.Miner.uopw?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Win32.Miner.uopw (file analysis)