UDS:Trojan.Win32.Miner removal

The UDS:Trojan.Win32.Miner is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What UDS:Trojan.Win32.Miner virus can do?

Executable code extraction
Unconventionial language used in binary resources: Lithuanian (Classic)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine UDS:Trojan.Win32.Miner?


File Info:
crc32: 1EE456D8
md5: 3e2c09542e0f1d51896694ed1f43db8d
name: 3E2C09542E0F1D51896694ED1F43DB8D.mlw
sha1: acb42ba5c3fbd47ae4becbbc86955bb4260975da
sha256: 3f7456a476c096deb62e9b8243e2e1532150cfa1cdbb832f312262120b155add
sha512: 5452b686fc7632f2042dc325535de65c8c986f6056b58e515fae0bf5cf9f05b2eb09d31b0be787f399d793f8a46b0029db02f3b5c1053457707410db51d57cdf
ssdeep: 49152:J0dpFEjZFgwa0aTuyDAkD4qfFqlYCd6/0ihTFjKiq2:JoFKAhHcCqJ47hTBKiq2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: SpellCheck
FileVersion: 1.00.0001
CompanyName: Edcraft
ProductName: SpellCheck
ProductVersion: 1.00.0001
OriginalFilename: SpellCheck.exe

UDS:Trojan.Win32.Miner also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Cybereason	malicious.5c3fbd
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EPGC
APEX	Malicious
ClamAV	Win.Trojan.Johnnie-9855122-0
Kaspersky	UDS:Trojan.Win32.Miner
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZevbaF.34688.go3@a052wBaO
McAfee-GW-Edition	BehavesLike.Win32.Trojan.vc
FireEye	Generic.mg.3e2c09542e0f1d51
SentinelOne	Static AI – Malicious PE
Avira	TR/Dropper.VB.Gen
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	UDS:DangerousObject.Multi.Generic
McAfee	Artemis!3E2C09542E0F
VBA32	Trojan.VB.Halfman
Malwarebytes	Malware.AI.4153842726
Fortinet	W32/Injector.BSHM!tr

How to remove UDS:Trojan.Win32.Miner?

UDS:Trojan.Win32.Miner removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X