Trojan

How to remove “Trojan:VBS/CoinMiner.SO”?

Malware Removal

The Trojan:VBS/CoinMiner.SO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:VBS/CoinMiner.SO virus can do?

  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs

How to determine Trojan:VBS/CoinMiner.SO?


File Info:

crc32: 3A0EE413
md5: 91ed3735544cb03122ed71836a016ed2
name: system32.vbs
sha1: 3ca016895bdaf3db9f8b09cffb55a1243ae06d03
sha256: a293a0454b01a9c31ff429b73ab499a07aaa089568004c7438e872e8b78e7ee4
sha512: 521936f88248ccb9786e622a60deecbff0698fa2aed127b994e9ce4c3b49ffe0320ddd67e37aa40798e5367da817a74fa6f2363cff10d37cb93ce89e0f572e5b
ssdeep: 3:j+qAHmFEm81GX8cDARMRAPpw52KD9so3KRfyM1K7eDM4Gf5/LBKXb+i9cv:j+q9NiPUwItuH1jHmLv
type: ASCII text, with CRLF line terminators

Version Info:

0: [No Data]

Trojan:VBS/CoinMiner.SO also known as:

MicroWorld-eScanTrojan.VBS.Agent.AUA
FireEyeTrojan.VBS.Agent.AUA
CAT-QuickHealHTML.Downloader.31008
KasperskyTrojan.Script.Suspic.gen
BitDefenderTrojan.VBS.Agent.AUA
RisingTrojan.Suspic!8.D90 (TOPIS:E0:KVsXkvSKDiR)
Ad-AwareTrojan.VBS.Agent.AUA
EmsisoftTrojan.VBS.Agent.AUA (B)
GDataTrojan.VBS.Agent.AUA
MicrosoftTrojan:VBS/CoinMiner.SO
ArcabitTrojan.VBS.Agent.AUA
ZoneAlarmTrojan.Script.Suspic.gen
ALYacTrojan.VBS.Agent.AUA
MAXmalware (ai score=88)
TencentScript.Trojan.Suspic.Huft
IkarusTrojan.VBS.Agent
Qihoo-360virus.vbs.sysautorun.a

How to remove Trojan:VBS/CoinMiner.SO?

Trojan:VBS/CoinMiner.SO removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment