TrojanSpy:MSIL/CoinSteal.R removal guide

Malware Removal

The TrojanSpy:MSIL/CoinSteal.R is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Review

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What TrojanSpy:MSIL/CoinSteal.R virus can do?

  • Network activity detected but not expressed in API logs

How to determine TrojanSpy:MSIL/CoinSteal.R?


File Info:

crc32: 0614A252
md5: d942460dec7d7dd057699fc9903f068e
name: nofile.exe
sha1: 08ba58f2244208d37b594afb392106a14e02681a
sha256: bc0b41f1b86da0e9f422b38b376aed071d336a6497496c25c0d1f4f282f42694
sha512: 35ad2fd3481fcaf336053b17275895e357246a0a60f4a700744f793ae83defea82c4e08e72ebb243ad9389d6041a52ebe613ce34263833501e1747c7bf71d8aa
ssdeep: 768:IDs+g2yYPiAB9m7bFQJiHMhdd+GOObj/Bnmoq5W5aP:vMdpdbjpTf5m
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2018
Assembly Version: 1.0.0.0
InternalName: NoFile.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: NoFile
ProductVersion: 1.0.0.0
FileDescription: NoFile
OriginalFilename: NoFile.exe

TrojanSpy:MSIL/CoinSteal.R also known as:

MicroWorld-eScanGen:Heur.Ransom.Imps.3
FireEyeGeneric.mg.d942460dec7d7dd0
CAT-QuickHealTrojan.MSIL
McAfeePWS-FCKH!D942460DEC7D
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusPassword-Stealer ( 00524b481 )
BitDefenderGen:Heur.Ransom.Imps.3
K7GWPassword-Stealer ( 00524b481 )
Cybereasonmalicious.dec7d7
TrendMicroTROJ_GEN.R015C0DDM20
BitDefenderThetaGen:NN.ZemsilF.34108.bm0@aqw2CKl
ESET-NOD32a variant of MSIL/PSW.CoinStealer.BO
APEXMalicious
AvastWin32:PWSX-gen [Trj]
ClamAVWin.Trojan.Razy-6794929-0
GDataGen:Heur.Ransom.Imps.3
KasperskyTrojan-Banker.MSIL.Evital.gen
AlibabaTrojanSpy:MSIL/CoinSteal.fc88cb90
ViRobotTrojan.Win32.Z.Ransom.29184
RisingStealer.CoinStealer!8.77F (CLOUD)
Endgamemalicious (high confidence)
SophosMal/Generic-S
ComodoTrojWare.MSIL.CoinStealer.BO@7q3a0f
F-SecureTrojan.TR/PSW.CoinStealer.yfprv
DrWebTrojan.PWS.Stealer.24208
ZillyaTrojan.CoinStealer.Win32.1206
Invinceaheuristic
McAfee-GW-EditionPWS-FCKH!D942460DEC7D
EmsisoftGen:Heur.Ransom.Imps.3 (B)
IkarusTrojan-Spy.ArcaneStealer
MaxSecureTrojan.Malware.12042595.susgen
AviraTR/PSW.CoinStealer.yfprv
MAXmalware (ai score=80)
Antiy-AVLTrojan[Banker]/MSIL.Evital
MicrosoftTrojanSpy:MSIL/CoinSteal.R
ArcabitTrojan.Ransom.Imps.3
ZoneAlarmTrojan-Banker.MSIL.Evital.gen
VBA32Trojan.MSIL.gen.11
ALYacGen:Heur.Ransom.Imps.3
Ad-AwareGen:Heur.Ransom.Imps.3
MalwarebytesTrojan.BitCoinMiner
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R015C0DDM20
TencentMsil.Trojan-banker.Evital.Wrgc
YandexTrojan.PWS.CoinStealer!
SentinelOneDFI – Malicious PE
FortinetW32/Evital.BO!tr
WebrootW32.Malware.Gen
AVGWin32:PWSX-gen [Trj]
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360Generic/Trojan.d69

How to remove TrojanSpy:MSIL/CoinSteal.R?

TrojanSpy:MSIL/CoinSteal.R removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment