Program:Win64/CoinMiner
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Threat Level: | 80 % (High) |
| Infected Computers: | 382 |
| First Seen: | September 3, 2012 |
| Last Seen: | April 17, 2025 |
| OS(es) Affected: | Windows |
Your system has been detected to be infected with the Program:Win64/CoinMiner threat. This detection indicates that your computer is likely compromised by a type of malicious software designed to exploit system resources for unauthorized purposes. It's essential to understand the nature of this threat and take immediate action to remove it to prevent further damage.
Table of Contents
What Is Program:Win64/CoinMiner?
Program:Win64/CoinMiner is a type of Trojan-type threat that is designed to use your computer's resources without your knowledge or consent. The primary purpose of this malware is to hijack system resources, such as CPU and GPU power, to mine cryptocurrency. This can lead to significant performance issues, increased electricity bills, and potential damage to your hardware. The name suggests it targets 64-bit Windows systems, but the impact can be broader, affecting overall system security and user experience.
How Program:Win64/CoinMiner Operates
This malware operates by infiltrating your system, often through exploits in software, phishing attacks, or by being bundled with other malicious programs. Once installed, it can start consuming system resources to perform complex mathematical calculations required for cryptocurrency mining. It may also communicate with command and control servers to receive updates or send back mined cryptocurrency. The operation of Program:Win64/CoinMiner can be stealthy, making it difficult for users to detect without proper security software.
Symptoms of Infection
Symptoms of a Program:Win64/CoinMiner infection can include significant slowdowns in system performance, increased fan noise due to high CPU or GPU usage, and higher than usual electricity bills. You might also notice that your computer overheats more frequently or that certain programs do not function as expected due to resource competition. Sometimes, the malware might also trigger security warnings from your antivirus software, although it can be designed to evade detection.
- Unexplained increase in system resource usage
- Slow performance and lag
- Increased power consumption
- Potential system crashes or freezes
- Security software alerts
How to Remove Program:Win64/CoinMiner
- Boot your computer in Safe Mode with Networking to limit the malware's ability to interfere with the removal process.
- Perform a full scan of your system using a reputable antivirus tool, such as SpyHunter, to detect and remove all related files and components.
- Uninstall any recently installed or suspicious programs that could be related to the malware.
- Reset your web browsers (Chrome, Firefox, Edge) to their default settings to remove any malicious extensions or settings changes made by the malware.
- Reboot your computer and perform another full scan to ensure that all components of the malware have been removed.
Conclusion
Removing Program:Win64/CoinMiner from your system is crucial to restoring your computer's performance and preventing further unauthorized use of your resources. By following the steps outlined above and maintaining vigilant security practices, such as keeping your software up to date and using reputable antivirus software, you can protect your system from similar threats in the future. Remember, prevention and prompt action are key to minimizing the impact of malware infections.
Aliases
15 security vendors flagged this file as malicious.
| Antivirus Vendor | Detection |
|---|---|
| Sophos | Bitcoin Miner |
| AntiVir | SPR/BitCoinMiner.A |
| Panda | Bck/mIRCBased.AW |
| Ikarus | Backdoor.IRC.mIRC-based |
| Comodo | Application.Win32.mIRC.~I |
| Kaspersky | not-a-virus:Client-IRC.Win32.mIRC.60 |
| eSafe | IRC.Win32.Trojan |
| Avast | Win32:Mirc-AB [PUP] |
| F-Prot | W32/Renamed_mIRC.A.gen!Eldorado |
| AVG | Generic5.DZG |
| Fortinet | Adware/Gaba |
| Ikarus | not-a-virus:AdWare.Win32.Gaba |
| AhnLab-V3 | Adware/Win32.Gaba |
| Antiy-AVL | AdWare/Win32.Gaba.gen |
| AntiVir | Adware/GabPath.Q.12 |
SpyHunter Detects & Remove Program:Win64/CoinMiner
File System Details
| # | File Name | MD5 |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|---|
| 1. | nbt.exe | 1e07a21cfc607ab3d95151bc75049293 | 35 |
| 2. | mirc.exe | fb05b68f8250b7ccbe32033318787329 | 28 |
| 3. | googleupdate.exe | 590169ee40abd265c0f664692a3f42ed | 13 |
| 4. | jCPU.exe | b0609d618dea367b51934a0fd0a0d9f4 | 2 |
| 5. | elbbccga.dll | f6cd1e423d901bc19f552721d7b7caae | 1 |
