How to remove “VHO:Trojan.Win64.Miner”?

The VHO:Trojan.Win64.Miner is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What VHO:Trojan.Win64.Miner virus can do?

Anomalous binary characteristics

How to determine VHO:Trojan.Win64.Miner?


File Info:
crc32: E5999C84
md5: 55b33b97071750065bd6c4bca3ccc9e9
name: 55B33B97071750065BD6C4BCA3CCC9E9.mlw
sha1: ef0ec85371e969690bc04320cad0e7e1e389c263
sha256: d2b99ac349ca702d8f348a1cca0633bc905a0050b52713b0b71d99c618d524ec
sha512: db9957d432fd2c5ea82239c485b2313d81b5c307b596958b2fc7618b14490e4ba0664a7390a866fb90c8a41796f4d821cac20663b218bd5ee2943c3ad75f5045
ssdeep: 98304:3F2tR6rQ6GT7drWAdVqo7v3rfAFlVJeeffVSliOx:6rWAjqo7vLQlVJVnVSliO
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: 
FileVersion: 2.0.0
CompanyName: 
ProductName: Windows Configuration Manager
ProductVersion: 2.0.0
FileDescription: Windows Configuration Manager
OriginalFilename: xmrig.exe
Translation: 0x0000 0x04b0

VHO:Trojan.Win64.Miner also known as:

Elastic	malicious (high confidence)
Alibaba	Trojan:Win32/Coinminer.449
Cybereason	malicious.371e96
ESET-NOD32	a variant of Win64/CoinMiner.QG potentially unwanted
APEX	Malicious
Avast	Win64:MiscX-gen [PUP]
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan.Win64.Miner.gen
Sophos	XMRig Miner (PUA)
McAfee-GW-Edition	BehavesLike.Win64.CoinMiner.rh
FireEye	Generic.mg.55b33b9707175006
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1134782
Microsoft	Trojan:Win32/Wacatac.B!ml
Gridinsoft	Risk.CoinMiner.B.vl!yf
ZoneAlarm	not-a-virus:HEUR:RiskTool.Win32.BitMiner.gen
GData	Win64.Application.Coinminer.CP
AhnLab-V3	Win-Trojan/Miner3.Exp
Acronis	suspicious
McAfee	Artemis!55B33B970717
Malwarebytes	Trojan.BitCoinMiner.Generic
Rising	HackTool.CoinMiner!1.B971 (CLASSIC)
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	Riskware/CoinMiner
AVG	Win64:MiscX-gen [PUP]

How to remove VHO:Trojan.Win64.Miner?

VHO:Trojan.Win64.Miner removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X