Windows 10: How can I delete this CoinMiner Malware that keeps reinstalling after removal?

Alex_Win11 · Oct 10, 2023

Windows Defender alerts malware CoinMiner.I on reboot stating it was been deleted. I am assuming it's reinstalling from another process and have been trying to track it down. This is the alert that I am getting.Detected: Behavior:Win32/CoinMiner.IStatus: RemovedA threat or app was removed from this device.Date: 10/10/2023 5:02 AMDetails: This program is dangerous and executes commands from an attacker.Affected items: behavior: process: C:\Windows\explorer.exe, pid:31584:120617923854497 process: pid:31584,ProcessStart:133414021413529505After doing some google searching. I've installed Sysmon,

:)

ThompsonJohn1 · Oct 10, 2023

How to delete Trojan:HTML/CoinMiner?

How do I fully delete Trojan:HTML/CoinMiner? The Microsoft Safety Scanner only "partially removed" it.

Brink · Oct 10, 2023

XBash malware combines ransomware, coinminer, botnet, & worm features

New malware strain has been discovered in the wild that combines features from four types of malware categories --ransomware, coinminers, botnets, and worms-- to create a dangerous cocktail that has been wreaking havoc among Linux and Windows servers.

Named XBash, this new malware strain is the work of a well-known criminal group previously identified under the codenames of Iron [1, 2] and Rocke, and which has been extremely active in the past two years.

Iron has been tied to ransomware distribution campaigns, but also to a massive crypto-mining operation. Cisco Talos has called this group "the champion of Monero miners," and has hinted the group may be based in China.

Until now, the Iron group has focused on one operation at a time, using specific malware for specific tasks. It deployed ransomware in 2017 and early 2018, and then switched to spreading a cryptocurrency miner (coinminer) in 2018.

But Palo Alto Networks researchers say the group has now rolled out the new XBash malware strain that is a combination of all their previous tactics, rolling a botnet-like structure together with coinminer and ransomware functionality, all into one...
Click to expand...

Read more:

New XBash malware combines ransomware, coinminer, botnet, and worm features in deadly combo | ZDNet

Xbash Combines Botnet, Ransomware, Coinmining in Worm that Targets Linux and Windows - Palo Alto Networks Blog

Brink · Oct 10, 2023

XBash malware combines ransomware, coinminer, botnet, & worm features

New malware strain has been discovered in the wild that combines features from four types of malware categories --ransomware, coinminers, botnets, and worms-- to create a dangerous cocktail that has been wreaking havoc among Linux and Windows servers.

Named XBash, this new malware strain is the work of a well-known criminal group previously identified under the codenames of Iron [1, 2] and Rocke, and which has been extremely active in the past two years.

Iron has been tied to ransomware distribution campaigns, but also to a massive crypto-mining operation. Cisco Talos has called this group "the champion of Monero miners," and has hinted the group may be based in China.

Until now, the Iron group has focused on one operation at a time, using specific malware for specific tasks. It deployed ransomware in 2017 and early 2018, and then switched to spreading a cryptocurrency miner (coinminer) in 2018.

But Palo Alto Networks researchers say the group has now rolled out the new XBash malware strain that is a combination of all their previous tactics, rolling a botnet-like structure together with coinminer and ransomware functionality, all into one...
Click to expand...

Read more:

New XBash malware combines ransomware, coinminer, botnet, and worm features in deadly combo | ZDNet

Xbash Combines Botnet, Ransomware, Coinmining in Worm that Targets Linux and Windows - Palo Alto Networks Blog

Windows 10: How can I delete this CoinMiner Malware that keeps reinstalling after removal?

How can I delete this CoinMiner Malware that keeps reinstalling after removal?

How can I delete this CoinMiner Malware that keeps reinstalling after removal?

How can I delete this CoinMiner Malware that keeps reinstalling after removal?

How can I delete this CoinMiner Malware that keeps reinstalling after removal? - Similar Threads - delete CoinMiner Malware

How can I remove malware completely?

How can I remove malware completely?

How can I delete this CoinMiner Malware that keeps reinstalling after removal?

How to remove this Coinminer virus??

How to remove this Coinminer virus??

Is this malware and if so how can i remove it

How to remove PUA:Win32/CoinMiner ?

How to delete Trojan:HTML/CoinMiner?

How do I find a task I believe is related to coinminer malware?