UDS:Trojan-PSW.Win32.Coins removal tips

The UDS:Trojan-PSW.Win32.Coins is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What UDS:Trojan-PSW.Win32.Coins virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Sniffs keystrokes
Executed a process and injected code into it, probably while unpacking
Network activity detected but not expressed in API logs
Attempts to access Bitcoin/ALTCoin wallets
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine UDS:Trojan-PSW.Win32.Coins?


File Info:
crc32: 6362ED50
md5: 42ea14c03fa3db312c03b4db8694ec9e
name: 42EA14C03FA3DB312C03B4DB8694EC9E.mlw
sha1: 8bcdb6e168bd4dfcda015b9ccbde9e7decd9b2cf
sha256: 8e122a7da836e05e954001c5f6e2209aa5e0835ea7af0e08e324e538a075f364
sha512: 6265e1329bbf4dde17b8b6b33764b2f493e3e16cb20b7d49aa2e7478f0cfb71b0b8a38c1ebc00b45ce3c3e4b22da283dbb06018c33a54594276b3311ff5eeb9d
ssdeep: 24576:S6I+D9umZGEinooZlWVWzn2HXRG6K/bfuzHxtmMaOiV4orIMrdJWmpBiF:lI+RumZinoWZitKTfuJaS8ZqF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

UDS:Trojan-PSW.Win32.Coins also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (D)
BitDefender	Gen:Variant.Nemesis.1464
Cybereason	malicious.168bd4
Cyren	W32/Injector.AHD.gen!Eldorado
APEX	Malicious
Kaspersky	UDS:Trojan-PSW.Win32.Coins.gen
MicroWorld-eScan	Gen:Variant.Nemesis.1464
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Vopak.tc
FireEye	Generic.mg.42ea14c03fa3db31
Emsisoft	Gen:Variant.Nemesis.1464 (B)
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.Nemesis.1464
AhnLab-V3	Malware/Gen.Reputation.C4312856
MAX	malware (ai score=85)
Rising	Trojan.Injector!8.C4 (TFE:dGZlOgYp8PI3Hr78zg)
Ikarus	Trojan.NSIS.Agent
Fortinet	W32/KRYPTIK.AHD!tr
Paloalto	generic.ml

How to remove UDS:Trojan-PSW.Win32.Coins?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

UDS:Trojan-PSW.Win32.Coins removal tips