Trojan

Trojan:Win32/CoinMiner!bit information

Malware Removal

The Trojan:Win32/CoinMiner!bit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/CoinMiner!bit virus can do?

  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Expresses interest in specific running processes
  • Reads data out of its own binary image
  • Installs OpenCL library, probably to mine Bitcoins
  • Drops a binary and executes it
  • Executed a process and injected code into it, probably while unpacking
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • A possible cryptomining command was executed
  • A cryptomining command containing a stratum protocol address was executed

Related domains:

litecoinpool.org

How to determine Trojan:Win32/CoinMiner!bit?


File Info:

crc32: C8395CF7
md5: f9262c8c93ed2f859d786de279b756f4
name: sessionmanager.exe
sha1: a6bc41c83fd97c22ad73196a23880ce29bb9ceec
sha256: b4ce3c40f1a2ec00eac07b78624615433e84b879a9e84219a2fa15d7d0d27039
sha512: fdeda26ca96c7e8340ca6091e6c27f91b78eb9f57813be63d15ac809ab275324b5d8c9ea2aa5336ad9a9e7dd5f00df93549ad1ff82b29939c477f55e0c26d8d4
ssdeep: 98304:LmSk9JzbY4D/CPpoAXIHFqSuGMVeZlrWohOGR9oPiRvJeVPtr6BJWRk0IkE8eZ8:LmS0Jw4D6P7XIl4eZlidGXoUvJO6BJW
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/CoinMiner!bit also known as:

MicroWorld-eScanGen:Variant.Razy.226925
FireEyeGeneric.mg.f9262c8c93ed2f85
CAT-QuickHealPUA.MauvaiseRI.S5254173
McAfeeGenericRXAA-AA!F9262C8C93ED
CylanceUnsafe
ZillyaTrojan.Black.Win32.19299
K7AntiVirusTrojan ( 0055e3fc1 )
BitDefenderGen:Variant.Razy.226925
K7GWTrojan ( 0055e3fc1 )
CrowdStrikewin/malicious_confidence_60% (D)
Invinceaheuristic
F-ProtW32/Trojan3.MHM
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:BitCoinMiner-JU [Trj]
GDataGen:Variant.Razy.226925
Kasperskynot-a-virus:RiskTool.Win32.BitCoinMiner.nff
AlibabaTrojan:Win32/CoinMiner.ali1002002
NANO-AntivirusRiskware.Win32.BitCoinMiner.daifmg
RisingTrojan.CoinMiner!8.30A (CLOUD)
Endgamemalicious (high confidence)
EmsisoftGen:Variant.Razy.226925 (B)
F-SecurePotentialRisk.PUA/CoinMiner.Gen
DrWebTrojan.BtcMine.3170
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.th
Trapminesuspicious.low.ml.score
SophosBitcoin Miner (PUA)
CyrenW32/Trojan.ZQOT-5672
JiangminRiskTool.BitCoinMiner.em
MaxSecureTrojan.Malware.1284855.susgen
AviraPUA/CoinMiner.Gen
WebrootW32.Trojan.Gen
Antiy-AVLRiskWare[RiskTool]/Win32.BitCoinMiner
ArcabitTrojan.Razy.D3766D
ZoneAlarmnot-a-virus:RiskTool.Win32.BitCoinMiner.nff
MicrosoftTrojan:Win32/CoinMiner!bit
AhnLab-V3Unwanted/Win32.CoinMiner.R261543
Acronissuspicious
VBA32Malware-Cryptor.Inject.gen
ALYacGen:Variant.Razy.226925
MAXmalware (ai score=82)
Ad-AwareGen:Variant.Razy.226925
MalwarebytesRiskWare.BitCoinMiner
PandaTrj/Genetic.gen
ESET-NOD32Win32/CoinMiner.VZ
YandexRiskware.Agent!
SentinelOneDFI – Suspicious PE
eGambitTrojan.Generic
FortinetRiskware/CoinMiner
BitDefenderThetaGen:NN.ZexaF.34106.@FW@aWK@nQfO
AVGWin32:BitCoinMiner-JU [Trj]
Cybereasonmalicious.c93ed2
Qihoo-360Win32/Virus.RiskTool.68e

How to remove Trojan:Win32/CoinMiner!bit?

Trojan:Win32/CoinMiner!bit removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment