Trojan.Win64.CoinMiner.vho malicious file

The Trojan.Win64.CoinMiner.vho is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win64.CoinMiner.vho virus can do?

Anomalous binary characteristics

How to determine Trojan.Win64.CoinMiner.vho?


File Info:
crc32: D9EDE7C0
md5: bf3bd0303d34dcef5284db80720e7a01
name: BF3BD0303D34DCEF5284DB80720E7A01.mlw
sha1: d634957090d22334960b709dc1832ddc4da06095
sha256: 7a576eeb5c4f788cf7fa5d2ed30135f66aaf84919c770c95caba1209982a58b4
sha512: 8dc1764f94368cf9b26cec791f64014543fd620abff8b1e7169815760b48cef4bd2c8040439dfc0f57f2f4bda1de4d3f35235cbdb3a2fc11e97a468c47862e81
ssdeep: 48:6SGOEnPMsJXYeCxZkSFyp/2HOrSNmBoGRf4rfb7CyfB0qfVACSQK+bRgOec/4+:XbQcJHOrRoGF0HfeqfyC7tSc
type: PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows

Version Info:
0: [No Data]

Trojan.Win64.CoinMiner.vho also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Ulise.110517
Zillya	Trojan.CoinMiner.Win64.2430
CrowdStrike	win/malicious_confidence_60% (W)
Cybereason	malicious.03d34d
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	Win64:CoinminerX-gen [Trj]
Kaspersky	HEUR:Trojan.Win64.CoinMiner.vho
BitDefender	Gen:Variant.Ulise.110517
MicroWorld-eScan	Gen:Variant.Ulise.110517
Tencent	Malware.Win32.Gencirc.10ce63ba
Ad-Aware	Gen:Variant.Ulise.110517
McAfee-GW-Edition	Artemis
FireEye	Gen:Variant.Ulise.110517
Emsisoft	Gen:Variant.Ulise.110517 (B)
Jiangmin	Trojan.CoinMiner.afh
Avira	HEUR/AGEN.1137087
Antiy-AVL	Trojan/Generic.ASMalwS.3093F3A
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Ulise.110517
AhnLab-V3	Malware/Win64.Generic.C4147330
McAfee	Artemis!BF3BD0303D34
MAX	malware (ai score=82)
Fortinet	W64/Ulise.110519!tr
AVG	Win64:CoinminerX-gen [Trj]

How to remove Trojan.Win64.CoinMiner.vho?

Trojan.Win64.CoinMiner.vho removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X