Categories: Trojan

Trojan:Win32/CoinMiner.UI information

The Trojan:Win32/CoinMiner.UI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/CoinMiner.UI virus can do?

Reads data out of its own binary image
Drops a binary and executes it
Unconventionial language used in binary resources: Chinese (Simplified)
The executable is compressed using UPX
Installs itself for autorun at Windows startup
Creates a hidden or system file
Attempts to disable UAC

Related domains:

z.whorecord.xyz

a.tomx.xyz

mine.ppxxmr.com

How to determine Trojan:Win32/CoinMiner.UI?


File Info:
crc32: B0C0BE42md5: c0ad70f9c2b3620dd629c84220f06181name: C0AD70F9C2B3620DD629C84220F06181.mlwsha1: 74459e1ef6e7b892ac1a68a222e36263ebcd01dbsha256: 4b9afe0a9750dec2d7dc5191281107337cfd58514cc45c794f00827db79df003sha512: aa01d45f51000177d2bf6034c2ebaacc4309a858f2148845acb67fe4ba582c7adc48aac4cc89437cecb5b4d794304c30d3cdfdfe163743ce5c4cb6e38cad7f91ssdeep: 196608:Ta9+6Y7SOEibgRvGBfWRO+kGBfWJGBfWJGBfWE+3LbsA7PVKdD4j:TFgRUWRlWeWeWE+jhKctype: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
Version Info:
0: [No Data]

Trojan:Win32/CoinMiner.UI also known as:

Bkav	W32.FamVT.BitMinerTTc.Worm
K7AntiVirus	Trojan ( 00545a6b1 )
DrWeb	Trojan.BtcMine.1759
MicroWorld-eScan	Gen:Variant.Symmi.87521
ALYac	Gen:Variant.Symmi.87521
Cylance	Unsafe
Zillya	Adware.StartSurf.Win32.45583
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	virus:Win32/InfectPE.ali2000007
K7GW	Trojan ( 0013bf781 )
Cybereason	malicious.9c2b36
TrendMicro	PE_XIAOBAMINER.SM
Cyren	W32/CoinMiner.L.gen!Eldorado
ESET-NOD32	Win32/Agent.OCI
APEX	Malicious
TotalDefense	Win32/Oflwr.A!crypt
Avast	Win32:CryptoMiner-L [Trj]
ClamAV	Win.Malware.Score-6940809-0
GData	Gen:Variant.Symmi.87521
Kaspersky	not-a-virus:RiskTool.HTML.Miner.b
BitDefender	Gen:Variant.Symmi.87521
NANO-Antivirus	Riskware.Win32.BitMiner.ewvndj
Tencent	RiskTool.Win32.Miner.c
Ad-Aware	Gen:Variant.Symmi.87521
Sophos	Troj/Agent-BCPA
Comodo	Application.Win32.BlackMoon.A@7iadub
F-Secure	Trojan.TR/BitCoinMiner.Gen8
BitDefenderTheta	Gen:NN.ZexaF.34110.@tZ@aymQPRnb
VIPRE	Trojan.Win32.Generic!BT
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.rh
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.c0ad70f9c2b3620d
Emsisoft	Gen:Variant.Symmi.87521 (B)
SentinelOne	DFI – Malicious PE
F-Prot	W32/CoinMiner.L.gen!Eldorado
Endgame	malicious (high confidence)
Avira	TR/BitCoinMiner.Gen8
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	RiskWare[RiskTool]/Win32.BitMiner
Microsoft	Trojan:Win32/CoinMiner.UI
Jiangmin	Trojan.Generic.bwuwf
Arcabit	Trojan.Symmi.D155E1
AegisLab	Trojan.Win32.Scar.mip4
ZoneAlarm	not-a-virus:RiskTool.HTML.Miner.b
AhnLab-V3	Trojan/Win32.BitCoinMiner.R224731
Acronis	suspicious
McAfee	GenericRXFJ-AZ!C0AD70F9C2B3
MAX	malware (ai score=80)
VBA32	BScope.Backdoor.IRC.Bot
Malwarebytes	Trojan.BitCoinMiner
TrendMicro-HouseCall	PE_XIAOBAMINER.SM
Rising	Trojan.Kryptik!1.B3E8 (CLOUD)
Yandex	Trojan.Agent!pZkzNAnZDAM
Ikarus	Worm.Win32.Agent
MaxSecure	not.a.virus.RiskTool.HTML.Miner.b
Fortinet	W32/BtcMine.1759!tr
AVG	Win32:CryptoMiner-L [Trj]
Qihoo-360	Win32/Virus.CoinMiner.C