Malware

About “Win32/CoinMiner.UZ” infection

Malware Removal

The Win32/CoinMiner.UZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/CoinMiner.UZ virus can do?

  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Generates some ICMP traffic

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.baidu.com
msmajor.duapp.com

How to determine Win32/CoinMiner.UZ?


File Info:

crc32: BE43AC76
md5: 3b96ec7345bedf980db6ccd4718259f5
name: 3B96EC7345BEDF980DB6CCD4718259F5.mlw
sha1: e689fcc6cc73257793973dd8f603e3f8b08f2fff
sha256: 2382e528d5757de1bffee575b3cb61879bccad2bfec4d0f560d81193751efef9
sha512: 2892dc1e7f9c68a0ef8250c1886f566c6009a5ccf2bcf74aeab72dd3a08dcdfd45000f0800abb8add87ff8eb464104f8604c586b5407f48677a867678657672b
ssdeep: 6144:9YdZE7q4hkMWddRuud08PLL851P/nw2NZhZowf3vcDi4VK5Xc:9YzWq4hIdze8Pn851nlNZhy4kDVos
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Win32/CoinMiner.UZ also known as:

K7AntiVirusTrojan ( 00518c781 )
ALYacTrojan.GenericKD.6090894
CylanceUnsafe
ZillyaTrojan.CoinMiner.Win32.14927
AlibabaTrojan:Win32/CoinMiner.d1c2f591
K7GWTrojan ( 00518c781 )
Cybereasonmalicious.345bed
SymantecTrojan.Gen.2
ESET-NOD32Win32/CoinMiner.UZ
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.Win32.Scar.pzni
BitDefenderTrojan.GenericKD.6090894
MicroWorld-eScanTrojan.GenericKD.6090894
TencentWin32.Trojan.Scar.Lmla
Ad-AwareTrojan.GenericKD.6090894
ComodoMalware@#vbu10qv53151
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Fareit.gc
FireEyeTrojan.GenericKD.6090894
EmsisoftTrojan.GenericKD.6090894 (B)
eGambitUnsafe.AI_Score_65%
Antiy-AVLTrojan/Generic.ASMalwS.9773D6
MicrosoftTrojan:Win32/Occamy.C
GDataTrojan.GenericKD.6090894
McAfeeArtemis!3B96EC7345BE
MAXmalware (ai score=87)
VBA32Trojan.Scar
IkarusTrojan.Win32.CoinMiner
MaxSecureTrojan.Autoit.AZA
FortinetW32/Scar.PZNI!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Win32/CoinMiner.UZ?

Win32/CoinMiner.UZ removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment