Categories: Malware

Win64/CoinMiner.YP removal

The Win64/CoinMiner.YP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win64/CoinMiner.YP virus can do?

Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win64/CoinMiner.YP?


File Info:
crc32: 831F3732md5: 41a0035a448c864ec74f22a379954358name: 41A0035A448C864EC74F22A379954358.mlwsha1: 22edc565da8219633c28698f448ca69e4f8b5492sha256: 9a21e232b27c16a10fa3585e0475fa36d48f1f1e39e1db1f0a757bf78b9b0e05sha512: 281f53e2dfed40881a7b64158cf9374a0762f1e6ee61de8f8233259c1bfcc3edc5cd457c95cb78f5258df947516db3ba2fc73ece7f00e59875c61bdb21df2e7bssdeep: 12288:pANwRo+mv8QD4+0V16Dx7VqutegGhD8fR3Mcz5adFNjB:pAT8QE+k8xJlsqfedFxBtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Earth Side                                                                                          FileDescription: Game Product 6.5.0 Installation                             FileVersion: 6.5.0               Comments: CompanyName: Earth Side                                                  Translation: 0x0409 0x04e4

Win64/CoinMiner.YP also known as:

K7AntiVirus	Riskware ( 0053b5231 )
Lionic	Riskware.HTML.Miner.1!c
DrWeb	Trojan.BtcMine.2708
MicroWorld-eScan	Trojan.GenericKD.30617114
CAT-QuickHeal	HTML.Coinminer.38725
ALYac	Trojan.GenericKD.30617114
Cylance	Unsafe
Sangfor	Trojan.Win32.Miner.DM
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:Win64/Miners.2d058141
K7GW	Riskware ( 0053b5231 )
Cybereason	malicious.a448c8
Symantec	Miner.XMRig!gen1
ESET-NOD32	Win64/CoinMiner.YP
APEX	Malicious
Avast	BV:BitCoinMiner-BS [PUP]
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Trojan.GenericKD.30617114
NANO-Antivirus	Trojan.Win64.BtcMine.ezosht
Tencent	Win32.Trojan.Generic.Pbyu
Sophos	Generic Reputation PUA (PUA)
Comodo	Malware@#2q18q66ozo81w
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0DJJ21
McAfee-GW-Edition	RDN/Generic PUP.x
FireEye	Trojan.GenericKD.30617114
Emsisoft	Trojan.GenericKD.30617114 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Miner.ctf
Webroot	W32.Trojan.GenKD
Avira	HEUR/AGEN.1136970
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/CoinMiner.C!rfn
SUPERAntiSpyware	Hack.Tool/Gen-BitCoinMiner
GData	Trojan.GenericKD.30617114
AhnLab-V3	Trojan/Win32.Miner.R338473
McAfee	RDN/Generic PUP.x
MAX	malware (ai score=98)
VBA32	Trojan.Win64.Miner
Malwarebytes	Malware.AI.718441685
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DJJ21
Yandex	Riskware.Agent!d4b6XVt1b9o
MaxSecure	Trojan-Ransom.Win32.Crypmod.zfq
Fortinet	W64/Miner.DP!tr
AVG	BV:BitCoinMiner-BS [PUP]
Paloalto	generic.ml