Malware

Win32:XMRigMiner-AE [Miner] removal

Malware Removal

The Win32:XMRigMiner-AE [Miner] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32:XMRigMiner-AE [Miner] virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is likely packed with VMProtect
  • Anomalous binary characteristics

How to determine Win32:XMRigMiner-AE [Miner]?


File Info:

crc32: 7E2EA00E
md5: cad9722967f2e394acfa3d15eb1cd9f8
name: CAD9722967F2E394ACFA3D15EB1CD9F8.mlw
sha1: 04b88b1a90981eee1aa2afa322a016bb7c251d1d
sha256: 1e447daec0dee1841a9ed3e15d38c94b791318b8c1d602596edf0677a631d8a6
sha512: d7438c0d8b2b591cdf68cba0fe872277a94df162bfd9f0bfd38e371ec379fa161c26fc3806fac0740ce9e5647136e464d1a56b7b1117d2fc4b1fe425de270adb
ssdeep: 49152:8VOa50IFjuB8pNc25wWi5Hjv28Z+OW/OWR8SJg:8Vr53FiB8zc25Hidjf+7dJ
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:

0: [No Data]

Win32:XMRigMiner-AE [Miner] also known as:

K7AntiVirusTrojan ( 005265ec1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Bulz.419015
ALYacGen:Variant.Bulz.419015
CylanceUnsafe
CrowdStrikewin/malicious_confidence_70% (D)
K7GWTrojan ( 005265ec1 )
Cybereasonmalicious.a90981
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win64/CoinMiner.JO potentially unwanted
APEXMalicious
AvastWin32:XMRigMiner-AE [Miner]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Bulz.419015
NANO-AntivirusTrojan.Win64.BitCoinMiner.ezaxhk
TencentWin32.Trojan.Generic.Tccf
Ad-AwareGen:Variant.Bulz.419015
SophosMal/Generic-S + XMRig Miner (PUA)
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win64.Generic.tc
FireEyeGeneric.mg.cad9722967f2e394
EmsisoftGen:Variant.Bulz.419015 (B)
SentinelOneStatic AI – Malicious PE
AviraPUA/CoinMiner.Gen
Antiy-AVLTrojan/Generic.ASMalwS.2505688
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Bulz.D664C7
GDataGen:Variant.Bulz.419015
AhnLab-V3Unwanted/Win64.XMR-Miner.R223760
Acronissuspicious
McAfeeArtemis!CAD9722967F2
MAXmalware (ai score=94)
MalwarebytesMalware.AI.1636369133
YandexTrojan.GenAsa!YF2PNYkeu6w
IkarusTrojan.Win64.Miner
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Generic!tr
AVGWin32:XMRigMiner-AE [Miner]
Paloaltogeneric.ml

How to remove Win32:XMRigMiner-AE [Miner]?

Win32:XMRigMiner-AE [Miner] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment