Malware

Win32:BitMiner-I [Trj] removal guide

Malware Removal

The Win32:BitMiner-I [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32:BitMiner-I [Trj] virus can do?

  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Win32:BitMiner-I [Trj]?


File Info:

name: 079B0A41D3C1A11D3AB8.mlw
path: /opt/CAPEv2/storage/binaries/d3416cefcf92fd6b0f9b955adcff2e10ec5f295c37776c09dcf586fb0ba93769
crc32: 460A72E3
md5: 079b0a41d3c1a11d3ab80c6ffefc31eb
sha1: ed1588a41d964b09876fd66c417c52cc1e35e6de
sha256: d3416cefcf92fd6b0f9b955adcff2e10ec5f295c37776c09dcf586fb0ba93769
sha512: fdd96b06c4ec040b0c2ab2fed93f0a61425493c2d7eeea245769d1c3d7d44d1a9b35cccb15854ad51baa0bf9cabc9b1836ce5b549fe34288f0a9f3141621727d
ssdeep: 12288:o+Fc5A7UHOBroYuPlAU5dC5NlHlB4BK6OIXhFvGC44A9crn+NGhwI/A8/9Xm:o+Fc5IUuBro5lAUKZmIMRICp+NhIRtm
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T13B35E003E5534AF1E062077441AF65062BFF992107B859FFBAC53B0AFB621F06636752
sha3_384: 619fd5a1d8b5395295a559f0a630802b08d15984e752c2e6f9485d68ef1d03904fcaac6363d9a1b39e6daa56880fa813
ep_bytes: 558bec837d0c017505e833060000ff75
timestamp: 2018-02-23 19:40:23

Version Info:

0: [No Data]

Win32:BitMiner-I [Trj] also known as:

BkavW32.AIDetectMalware
AVGWin32:BitMiner-I [Trj]
tehtrisGeneric.Malware
DrWebTrojan.BtcMine.2753
MicroWorld-eScanGen:Heur.Mint.Zard.37
FireEyeGeneric.mg.079b0a41d3c1a11d
CAT-QuickHealPUA.AdposhelPMF.S19852065
SkyhighBehavesLike.Win32.Generic.th
McAfeeGenericRXER-SO!079B0A41D3C1
MalwarebytesAdPoshel.Adware.Advertising.DDS
ZillyaAdware.AdposhelGen.Win32.10
SangforTrojan.Win32.Save.a
AlibabaMalware:Win32/km_2416d.None
CrowdStrikewin/grayware_confidence_100% (W)
BitDefenderThetaGen:NN.ZedlaF.36802.ar4@aegS0vc
VirITAdware.Win32.Genus.AWE
SymantecMiner.Bitcoinminer
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Adware.Adposhel.BH
CynetMalicious (score: 100)
APEXMalicious
AvastWin32:BitMiner-I [Trj]
ClamAVWin.Trojan.Bitminer-9953520-0
Kasperskynot-a-virus:HEUR:RiskTool.Win32.BitMiner.gen
BitDefenderGen:Heur.Mint.Zard.37
NANO-AntivirusRiskware.Win32.BitMiner.eznpmj
SUPERAntiSpywareAdware.Adposhel/Variant
RisingAdware.Adposhel!1.AF84 (CLASSIC)
EmsisoftGen:Heur.Mint.Zard.37 (B)
F-SecurePotentialRisk.PUA/BitcoinMiner.Gen7
VIPREGen:Heur.Mint.Zard.37
Trapminemalicious.high.ml.score
SophosCryptocoin miner (PUA)
SentinelOneStatic AI – Malicious PE
JiangminRiskTool.BitMiner.ajsg
GoogleDetected
AviraPUA/BitcoinMiner.Gen7
MAXmalware (ai score=89)
Antiy-AVLGrayWare[AdWare]/Win32.Adposhel.bh
Kingsoftmalware.kb.a.1000
MicrosoftTrojan:Win32/CoinMiner.CZ
XcitiumApplication.Win32.Coinminer.GZ@7n2jyb
ArcabitTrojan.Mint.Zard.37
ZoneAlarmnot-a-virus:HEUR:RiskTool.Win32.BitMiner.gen
GDataGen:Heur.Mint.Zard.37
VaristW32/S-2de4d02b!Eldorado
AhnLab-V3Trojan/Win32.Miner.R224901
VBA32BScope.Malware-Cryptor.Kidep
Cylanceunsafe
PandaTrj/Genetic.gen
TencentTrojan.Win32.Coinminer.yg
YandexTrojan.GenAsa!dzErmHXsYcY
IkarusPUA.CoinMiner
MaxSecurenot-a-virus:RiskTool.BitMiner.gen
FortinetRiskware/BitMiner
DeepInstinctMALICIOUS

How to remove Win32:BitMiner-I [Trj]?

Win32:BitMiner-I [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment