Program:Win32/CoinMiner
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 80 % (High) |
| Infected Computers: | 1,617 |
| First Seen: | September 13, 2011 |
| Last Seen: | May 11, 2024 |
| OS(es) Affected: | Windows |
Your system has been detected with a threat identified as Program:Win32/CoinMiner, a type of malicious software that can compromise the security and performance of your computer. This detection indicates that your system may be infected with a Trojan-type threat that can have significant consequences if not addressed promptly.
Table of Contents
What Is Program:Win32/CoinMiner?
Program:Win32/CoinMiner is a type of malware that is designed to use your computer's resources to mine cryptocurrency without your knowledge or consent. This type of threat can be particularly problematic because it can consume significant system resources, leading to slower performance, increased power consumption, and potentially causing your computer to overheat. The primary goal of this malware is to generate revenue for its creators by leveraging your computer's processing power to solve complex mathematical problems required for cryptocurrency mining.
How Program:Win32/CoinMiner Operates
Program:Win32/CoinMiner operates by infiltrating your system, often through vulnerabilities in software or by disguising itself as legitimate programs. Once installed, it can start consuming system resources such as CPU and RAM to perform cryptocurrency mining tasks. This malware can also communicate with its command and control servers to report its activities and receive updates or new instructions. The operation of Program:Win32/CoinMiner can lead to noticeable performance issues, including slow system response times, increased fan activity, and higher electricity bills due to increased power consumption.
Symptoms of Infection
Symptoms of a Program:Win32/CoinMiner infection can vary but commonly include significant slowdowns in system performance, increased noise from the computer's fans due to overheating, and higher than usual electricity bills. You might also notice that your computer is running hotter than usual, or that it becomes unresponsive for periods of time. Additionally, you may observe unusual network activity or unexpected processes running in the background when you check your system's task manager.
- Slow system performance and responsiveness
- Increased fan noise and heat emission
- Higher electricity bills
- Unusual network activity
- Unknown processes running in the background
How to Remove Program:Win32/CoinMiner
- Boot your computer in Safe Mode with Networking to prevent the malware from loading and to give you a clean environment to work in.
- Use a reputable anti-malware tool, such as SpyHunter, to perform a full scan of your system. This can help identify and remove all components of the Program:Win32/CoinMiner malware.
- Uninstall any suspicious programs that you do not recognize or that were installed around the time your system started showing symptoms of infection.
- Reset your web browsers (Chrome, Firefox, Edge) to their default settings to remove any malicious extensions or settings that the malware might have altered.
- Reboot your computer and perform another full scan with your anti-malware tool to ensure that all remnants of the malware have been removed.
Conclusion
Removing Program:Win32/CoinMiner from your system requires careful steps to ensure that all components of the malware are eliminated. By following the removal steps outlined above and maintaining good computer hygiene practices, such as regularly updating your software and being cautious with emails and downloads, you can protect your system from similar threats in the future. It's also important to monitor your system's performance regularly and run periodic scans with anti-malware tools to catch any potential threats early.
Aliases
15 security vendors flagged this file as malicious.
| Antivirus Vendor | Detection |
|---|---|
| AVG | Hider.RFC |
| AhnLab-V3 | Unwanted/Win32.BitCoinMiner |
| TrendMicro | BAT_MINER.JNP |
| AntiVir | TR/Rogue.kdv.659220 |
| Kaspersky | Trojan.BAT.Miner.aa |
| McAfee | Artemis!61AB4E0819F5 |
| McAfee | Artemis!C8A7FD79AEBE |
| eSafe | Win32.SPRTool.CoinMi |
| McAfee | Generic PUP.z!hq |
| AntiVir | DR/Aragon.SS |
| Comodo | ApplicUnsaf.Win32.RiskTool.HideExec.R |
| McAfee | Generic.tra!g |
| AVG | Generic29.FGV |
| Ikarus | Virus.Win32.Crypted |
| AhnLab-V3 | Trojan/Win32.Jorik |
SpyHunter Detects & Remove Program:Win32/CoinMiner
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | Virtualization.exe | edda4a6147c12d1f8a8d52b6acb750d2 | 798 |
| 2. | msn.exe | 0600b00040151c6ebbdd404cff7548a5 | 28 |
| 3. | msusm.exe | 20d5c788a075113145261ee5dfab0fa0 | 13 |
| 4. | 5733.exe | 42a548d975df1f342114a59621d929dc | 8 |
| 5. | WINLOGONs.exe | 8f0c96820ddc6fa104acb3888ab64670 | 8 |
| 6. | winflxgrd.exe | e41d5e60c7b2b1d9e6deb8f245842183 | 7 |
| 7. | oa.exe | b4c750ca23bc480f545414737a0332e0 | 6 |
| 8. | egkepxcackaofrwsjvh.exe | 73fa1ea152fe2957c28a9fb816dd37e7 | 5 |
| 9. | gmin.exe | 01aa8f9282d12692a24ffd7d0dbb82cd | 5 |
| 10. | koayedenynfgiojdgxy.exe | c8a7fd79aebecd8fa38bb2992e05ea43 | 4 |
| 11. | SystemProcess.exe | d0a255b0589afa290b0f87a55124498e | 3 |
| 12. | cmin.exe | 2b632fc62ee59e436eb468d53c00bedd | 3 |
| 13. | qofyvhmxyppjengxufp.exe | 6c9c003493f680a481111c6af775e7cf | 3 |
| 14. | 89C1.exe | 3c80fe7d12ecd1bacf4a328afffbd9a2 | 2 |
| 15. | Coin.exe | bb2bcbee338b1857ae192222393ac716 | 2 |
| 16. | greldomfdafiglcpgju.exe | a37255e7669ebae1fa6d7f0937bd4089 | 2 |
| 17. | sdwalioxfifnprxkvxq.exe | affeda4ec44daa759c75069a2234545a | 2 |
| 18. | pemcppubcwktlkmgdkp.exe | a3ad99550fa5494e2f9c2afd9d28613b | 2 |
| 19. | conhost.exe | dad74a8a848513c7ce73e674ab38aaee | 2 |
| 20. | svchost.exe | f18f337f27c79e1f0cd4626d89dd3079 | 2 |
| 21. | 256181942012min.exe | ba61c9b0b2b0c33abead5add9e5d49d7 | 1 |
| 22. | 2155.exe | f3230b07913b74fe7c0d752684d64460 | 1 |
| 23. | 1GrMn4QNPvDJrPvVHu6MmyXJHZU8pr8Q41.exe | 1ae0e185cbdf7fb9288fd31ff21dd0cc | 1 |
| 24. | bbjjoditgcybpryccus.exe | d911d82dc184bbfc952b77cb4cb1b743 | 1 |
| 25. | hiazht.exe | 61ab4e0819f5e214be45de5e8f361170 | 1 |
| 26. | noultp.exe | c3cd2aef8d1ed3d182853b14ed94ee6a | 1 |
| 27. | DgvQZLPLMy.exe | fa4c8ba130dc6eba7bcbc424ba4d86f7 | 1 |
| 28. | 2194.exe | 826de0356595eb31e4da3df9f248ea97 | 1 |