Should I remove “Win64/CoinMiner.CV potentially unwanted”?

The Win64/CoinMiner.CV potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win64/CoinMiner.CV potentially unwanted virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win64/CoinMiner.CV potentially unwanted?


File Info:
name: B61AA5433A6EEBEC8B0E.mlw
path: /opt/CAPEv2/storage/binaries/39ca473fa34508458cc8a8583ad20aab7dd6976ad6cc47f7dda9841f534240a9
crc32: F4823E76
md5: b61aa5433a6eebec8b0ec43ec426a5fd
sha1: 9b923aff835f301bb3136091088cad5868c6909f
sha256: 39ca473fa34508458cc8a8583ad20aab7dd6976ad6cc47f7dda9841f534240a9
sha512: fa74239c5b53510ad635f62bcfe566fc227f7511ce12612c2890206edf7cc471e277caba4c9d37d8e3ec0cb4d448efe02d8bcc371d8a5435001311c400a21557
ssdeep: 49152:tT/KPvXJsqGawbweh6O2V4z/qpvwyt4Irj/i6+85Ijyn3zCqb/:6mawXDB6HOyz
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T192D5180A2EB85B85D12BC1BE84C65A95FEB270903B347EDF1550439D0F27EE8E47DA21
sha3_384: 56bc3d005cd7f931bc66cc1b1c7f4f80d8ad2b9212f7a7b160d18e20246e31f2a34bebb65b0f0321843ae695f70986aa
ep_bytes: 4883ec28e8230900004883c428e932fe
timestamp: 2016-06-10 08:24:50

Version Info:
0: [No Data]

Win64/CoinMiner.CV potentially unwanted also known as:

MicroWorld-eScan	Gen:Variant.Application.Miner.37
FireEye	Gen:Variant.Application.Miner.37
McAfee	Artemis!B61AA5433A6E
K7AntiVirus	Adware ( 0052a5081 )
Cybereason	malicious.33a6ee
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/CoinMiner.CV potentially unwanted
BitDefender	Gen:Variant.Application.Miner.37
Ad-Aware	Gen:Variant.Application.Miner.37
Emsisoft	Gen:Variant.Application.Miner.37 (B)
McAfee-GW-Edition	BehavesLike.Win64.PUP.vh
Sophos	Ethminer Ethereum Miner (PUA)
MAX	malware (ai score=72)
Gridinsoft	Ransom.Win64.Gen.sa
GData	Gen:Variant.Application.Miner.37
AhnLab-V3	Trojan/Win64.BitCoinMiner.R200089
ALYac	Gen:Variant.Application.Miner.37
SentinelOne	Static AI – Suspicious PE
Fortinet	Adware/Miner

How to remove Win64/CoinMiner.CV potentially unwanted?

Win64/CoinMiner.CV potentially unwanted removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X