Win64/CoinMiner.ABD (file analysis)

The Win64/CoinMiner.ABD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win64/CoinMiner.ABD virus can do?

How to determine Win64/CoinMiner.ABD?


File Info:
crc32: 6329AC71
md5: 0c226575c8e99fcdcfc10547c02a51d9
name: 0C226575C8E99FCDCFC10547C02A51D9.mlw
sha1: 6424fbe65ca780c26d8c5866fc093937004ed4e9
sha256: 34dbf0ee4852bb55a696b914f93a1a67c953afdddc374ecf253afeae04a6a067
sha512: dfa1f1ff34a2da9014e81104bfdd6dafbdac5e070507ece12ba2c84113a9d89be0630f2360c95393424ed98ea34aad0382fdaa44be1927aef894ebd2b836d752
ssdeep: 49152:JhGeYbOi311LqLoduPtdDLSR3BGS4v8/q0JFwhjUuu3HT2LFSo:2hP70Pfn8z6LFS
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: xa9Intel All Rights Reserved
InternalName: controlhost.exe
FileVersion: 2.2.0.125
CompanyName: Intel
LegalTrademarks: Intel Inc.
ProductName: Control Host
ProgramID: com.mxmrig.controlhost
ProductVersion: 2.2.0.125
FileDescription: Control Host
OriginalFilename: controlhost.exe
Translation: 0x0409 0x04e4

Win64/CoinMiner.ABD also known as:

K7AntiVirus	Trojan ( 005657501 )
Lionic	Trojan.Win32.Generic.4!c
Cynet	Malicious (score: 99)
ALYac	Trojan.GenericKD.43009868
Cylance	Unsafe
Zillya	Trojan.CoinMiner.Win64.2289
Alibaba	Trojan:Win64/CoinMiner.8a697b65
K7GW	Trojan ( 005657501 )
Cybereason	malicious.5c8e99
Symantec	Trojan.Gen.MBT
ESET-NOD32	Win64/CoinMiner.ABD
Avast	Win64:Trojan-gen
BitDefender	Trojan.GenericKD.43009868
MicroWorld-eScan	Trojan.GenericKD.43009868
Ad-Aware	Trojan.GenericKD.43009868
Comodo	Malware@#2kfgef668hbmr
F-Secure	Trojan.TR/Xorasi.Gen
VIPRE	Trojan.Win32.Generic!BT
FireEye	Trojan.GenericKD.43009868
Emsisoft	Trojan.GenericKD.43009868 (B)
Avira	TR/Xorasi.Gen
Microsoft	VirTool:MSIL/SharpStay
Arcabit	Trojan.Generic.D290474C
GData	Trojan.GenericKD.43009868
McAfee	Artemis!0C226575C8E9
MAX	malware (ai score=84)
Ikarus	Trojan.Win64.CoinMiner
MaxSecure	Trojan.Malware.98662795.susgen
Fortinet	W64/CoinMiner.ABD!tr
AVG	Win64:Trojan-gen
Paloalto	generic.ml

How to remove Win64/CoinMiner.ABD?

Win64/CoinMiner.ABD removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X