Win32/CoinMiner.AVG removal tips

The Win32/CoinMiner.AVG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/CoinMiner.AVG virus can do?

Reads data out of its own binary image
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/CoinMiner.AVG?


File Info:
crc32: 90B5F5B5
md5: c93090dd8c406c7fca3a527f5f701c75
name: C93090DD8C406C7FCA3A527F5F701C75.mlw
sha1: 6ca0f6350e00b7bb4e3862b4c34592a62ca3f54f
sha256: e680fe59fcb7633f8fc4bb244c0f9274d07b39c2b82090c89f23de890d763f89
sha512: b519e85bf9387ed854b62bd43122a24ece395e45104ccde47bfd41fa63e8c30b2b03c515775fcf0305aed541dbe2defa6112cedb5e43d04a131f8dde8f2de417
ssdeep: 393216:4NyVIzb8LTDv/Dzf81HgrefgyzdQMVJ52fyz8djwFc:lVgbQDnHf81ArwJ4w6
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
FileVersion: 3, 3, 8, 1
FileDescription: 
Translation: 0x0809 0x04b0

Win32/CoinMiner.AVG also known as:

K7AntiVirus	Trojan ( 004b90381 )
Elastic	malicious (high confidence)
DrWeb	BackDoor.IRC.Bot.3512
MicroWorld-eScan	Trojan.GenericKD.36159032
ALYac	Trojan.GenericKD.36159032
Cylance	Unsafe
Zillya	Trojan.Miner.Win32.8821
Alibaba	Trojan:Win32/CoinMiner.ali1004001
K7GW	Trojan ( 004b90381 )
Cybereason	malicious.d8c406
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/CoinMiner.AVG
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Miner.tity
BitDefender	Trojan.GenericKD.36159032
NANO-Antivirus	Trojan.Win32.Miner.exeylc
Tencent	Win32.Trojan.Miner.Sxxo
Ad-Aware	Trojan.GenericKD.36159032
Sophos	Mal/Generic-S
Comodo	Malware@#23zs7et1lgmm4
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0WGB21
McAfee-GW-Edition	BehavesLike.Win32.Yahlover.tc
FireEye	Generic.mg.c93090dd8c406c7f
Emsisoft	Trojan.GenericKD.36159032 (B)
Jiangmin	Trojan.Miner.fhq
Avira	TR/Dropper.Gen
eGambit	Unsafe.AI_Score_98%
Microsoft	Trojan:Win32/Tiggre!rfn
GData	Trojan.GenericKD.36159032
AhnLab-V3	Trojan/Win32.Miner.C2364287
McAfee	Artemis!C93090DD8C40
VBA32	Backdoor.IRC.Bot
TrendMicro-HouseCall	TROJ_GEN.R002C0WGB21
Ikarus	Trojan.Win32.CoinMiner
Fortinet	W32/CoinMiner.AVG!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Win32/CoinMiner.AVG?

Win32/CoinMiner.AVG removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X