Trojan

How to remove “Trojan.Win32.Miner”?

Malware Removal

The Trojan.Win32.Miner is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Miner virus can do?

  • Anomalous binary characteristics

How to determine Trojan.Win32.Miner?


File Info:

crc32: D91CAB28
md5: 37bd2acae3abad014bb450cc2e34fe34
name: uimgrbroker.exe
sha1: 00fafa90bda066139c60920b3913bc3f19a00df3
sha256: 9a1962e7a4d216c247b6e58a45dfa405127b93d1f489afab6bdeaa9fecce9aab
sha512: 05ec1728bf34ff413724f5f65e0d768a327ecfc3bf1f2a8ea885ad3d1df5f06635f3dc5f0aa082e58b66b17fe450d1946d96ffbf62e9ff91e752327299b1b8bd
ssdeep: 196608:uCptntVvXeaCQvzlesm+ZJuBpZJJm3Ed:uyvOvQvzlC+ZJuBpZJJGE
type: PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: UIMgrBroker.exe
FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 10.0.17134.1
FileDescription: Microsoft UIManager Broker
OriginalFilename: UIMgrBroker.exe
Translation: 0x0409 0x04b0

Trojan.Win32.Miner also known as:

FireEyeGeneric.mg.37bd2acae3abad01
Qihoo-360Win32/Trojan.f11
MalwarebytesRiskWare.BitCoinMiner
AegisLabTrojan.Win32.Miner.4!c
K7GWAdware ( 0055631f1 )
K7AntiVirusAdware ( 0055631f1 )
TrendMicroTROJ_GEN.R002C0PC120
CyrenW64/Trojan.SBOF-2451
SymantecTrojan.Gen.MBT
TrendMicro-HouseCallTROJ_GEN.R002C0PC120
ClamAVWin.Coinminer.Generic-7151250-0
GDataWin64.Trojan.Agent.5VP7KV
KasperskyHEUR:Trojan.Win32.Miner.gen
AlibabaTrojan:Win32/Miners.c990e56b
NANO-AntivirusTrojan.Win64.Miner.hddlde
APEXMalicious
RisingTrojan.Miner!8.EA1 (CLOUD)
SophosGeneric PUA AA (PUA)
ComodoMalware@#3t7lk2v3g5rap
F-SecureHeuristic.HEUR/AGEN.1045823
DrWebTool.BtcMine.2110
ZillyaTrojan.Miner.Win32.9647
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win64.CoinMiner.vh
Trapminemalicious.moderate.ml.score
JiangminTrojan.Miner.kvn
AviraHEUR/AGEN.1045823
Endgamemalicious (high confidence)
ZoneAlarmHEUR:Trojan.Win32.Miner.gen
MicrosoftPUA:Win32/CoinMiner
AhnLab-V3Trojan/Win64.CoinMiner.R299388
Acronissuspicious
McAfeeW64/CoinMiner
VBA32Trojan.Miner
CylanceUnsafe
PandaTrj/CI.A
ESET-NOD32a variant of Win64/CoinMiner.PO potentially unwanted
IkarusPUA.CoinMiner
FortinetW64/CryptoMiner.L!tr
AVGWin32:HarHarMiner-A [Trj]
Cybereasonmalicious.0bda06
AvastWin32:HarHarMiner-A [Trj]

How to remove Trojan.Win32.Miner?

Trojan.Win32.Miner removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment