Win64/CoinMiner.ET potentially unwanted (file analysis)

The Win64/CoinMiner.ET potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win64/CoinMiner.ET potentially unwanted virus can do?

How to determine Win64/CoinMiner.ET potentially unwanted?


File Info:
crc32: AC5B3C20
md5: 13cbc6075c914bb8d1f664f4699d1a57
name: Communs.exe
sha1: febb1398375d37e1bb8e0c9e3e97dbaadb914540
sha256: 2624450488d51e052511811a16ba22cfa82ef2cc12111a62d5fc56a60653efff
sha512: 7b8a85b34767af1375542a1445cc9c9a1e4fba8ff19b1302053423a45d1ff2a9e768df78199e7b4a87acbbd54418d899ea852dc3889bed32c621af6f8d245036
ssdeep: 24576:UWvCXxMPqR/T4mNf90HFRHag5OjyOxdeM:UWqQq9pilR6g5Ojr
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
0: [No Data]

Win64/CoinMiner.ET potentially unwanted also known as:

MicroWorld-eScan	Gen:Variant.Razy.594648
CAT-QuickHeal	Trojan.CoinMiner
Qihoo-360	Generic/HEUR/QVM202.0.3BE5.Malware.Gen
McAfee	RDN/Generic.dx
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
BitDefender	Gen:Variant.Razy.594648
K7GW	Adware ( 0053921d1 )
K7AntiVirus	Adware ( 0053921d1 )
Arcabit	Trojan.Razy.D912D8
TrendMicro	Coinminer_MALXMR.SMSTAK-WIN64
Cyren	W64/Application.OXDC-7630
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/CoinMiner.ET potentially unwanted
APEX	Malicious
Paloalto	generic.ml
ClamAV	Multios.Coinminer.Miner-6781728-2
Avast	FileRepMetagen [PUP]
Ad-Aware	Gen:Variant.Razy.594648
Emsisoft	Gen:Variant.Razy.594648 (B)
Comodo	Malware@#3sh63okz20oro
McAfee-GW-Edition	BehavesLike.Win64.Dropper.bh
Fortinet	Riskware/CoinMiner
FireEye	Gen:Variant.Razy.594648
Sophos	XMR-Stak Miner (PUA)
Webroot	W32.Adware.Gen
MAX	malware (ai score=82)
Endgame	malicious (high confidence)
Microsoft	PUA:Win64/CoinMiner
AhnLab-V3	Win-Trojan/Miner3.Exp
Acronis	suspicious
ALYac	Gen:Variant.Razy.594648
TrendMicro-HouseCall	Coinminer_MALXMR.SMSTAK-WIN64
Rising	PUA.CoinMiner!8.4639 (TFE:dGZlOgajoZwGjMvJMg)
Ikarus	PUA.CoinMiner
GData	Win32.Application.CoinMiner.BA
AVG	FileRepMetagen [PUP]
Cybereason	malicious.8375d3
Panda	Trj/CoinMiner.A
MaxSecure	Trojan.Malware.7175203.susgen

How to remove Win64/CoinMiner.ET potentially unwanted?

Win64/CoinMiner.ET potentially unwanted removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X