Win32/CoinMiner.BSY removal

The Win32/CoinMiner.BSY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/CoinMiner.BSY virus can do?

Executable code extraction
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/CoinMiner.BSY?


File Info:
crc32: 10E20B4B
md5: f1ecdacd97c6700d110e0d54dc251138
name: F1ECDACD97C6700D110E0D54DC251138.mlw
sha1: fd6409f3acf1d4f20906190764bf849f064f5ce5
sha256: 24a05a79268b7e9dec36a2408ae3f6e498fa879d0340e46969ae730ff4b3022f
sha512: f37e00a11367d56d3e216a2e2d871f3162d6351fb845d9e77b62b9b25d5c2523405310cda16eee4c3ae1d68c73aeb0ff51be88fece21ec1e8ac57e1bedc053fc
ssdeep: 768:dtdd42Xd9sqNIAxrzJQbhiPGT4wU0klyQs+4unN/nOLwe:r/40sqNIANOhiPu4V0kc+4uNIx
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
ProductVersion: 1.00
InternalName: Project1
FileVersion: 1.00
OriginalFilename: Project1.exe
ProductName: Project1

Win32/CoinMiner.BSY also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0053b22d1 )
Lionic	Trojan.Win32.Bisfi.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Zillya	Trojan.CoinMiner.Win32.18220
Alibaba	Trojan:Win32/CoinMiner.0351fb1c
K7GW	Trojan ( 0053b22d1 )
Cybereason	malicious.3acf1d
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/CoinMiner.BSY
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Malware.Genkryptik-7587409-0
Kaspersky	Trojan.Win32.Agent.qwhnox
NANO-Antivirus	Trojan.Win32.CoinMiner.fjsrii
Tencent	Win32.Trojan.Agent.Edxk
Sophos	Mal/Generic-S
BitDefenderTheta	AI:Packer.BEE5D04E20
VIPRE	Trojan.Win32.VBInject.gen (v)
McAfee-GW-Edition	Packed-FIY!F1ECDACD97C6
FireEye	Generic.mg.f1ecdacd97c6700d
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Alien.ci
Avira	HEUR/AGEN.1116383
eGambit	Unsafe.AI_Score_97%
Antiy-AVL	Trojan/Generic.ASMalwS.28C1B28
Microsoft	Trojan:Win32/CoinMiner.C!rfn
McAfee	Packed-FIY!F1ECDACD97C6
MAX	malware (ai score=99)
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/GdSda.A
Yandex	Trojan.Agent!7SRKqtn/9MA
Ikarus	Trojan.Win32.CoinMiner
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Packed.FIY!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml

How to remove Win32/CoinMiner.BSY?

Win32/CoinMiner.BSY removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X