Windows 10: How to get rid of "Win32/CoinMiner.I" malware

Cory Brzozowski · Feb 20, 2024

I've seen some posts with a similar problem, but the solutions seem to be specific to each person so here is my Windows Defender alertetected: Behavior:Win32/CoinMiner.IAffected Items: behavior: process: C:\Windows\System32\conhost.exe, pid:2776:120617923854497 process: pid:2776,ProcessStart:133528883840749447It says it's removed, but always pops up when i restart my PC. I don't know what to do with the information or what the next steps should be.

:)

shani nasirssempala · Feb 20, 2024

PUA:Win32/CoinMiner

PUA: Win32 / CoinMineromo resolvedor PUA: Win32 / CoinMiner no Windows Defender

Obrigado

Fernando Ramalho
Click to expand...

PUA:Win32/CoinMiner i have this virus in my computer for over 2 weeks and its growing on and on and i cant delete it

FernandoRamalho1 · Feb 20, 2024

PUA:Win32/CoinMiner

PUA: Win32 / CoinMineromo resolvedor PUA: Win32 / CoinMiner no Windows Defender

Obrigado

Fernando Ramalho

Brink · Feb 20, 2024

XBash malware combines ransomware, coinminer, botnet, & worm features

New malware strain has been discovered in the wild that combines features from four types of malware categories --ransomware, coinminers, botnets, and worms-- to create a dangerous cocktail that has been wreaking havoc among Linux and Windows servers.

Named XBash, this new malware strain is the work of a well-known criminal group previously identified under the codenames of Iron [1, 2] and Rocke, and which has been extremely active in the past two years.

Iron has been tied to ransomware distribution campaigns, but also to a massive crypto-mining operation. Cisco Talos has called this group "the champion of Monero miners," and has hinted the group may be based in China.

Until now, the Iron group has focused on one operation at a time, using specific malware for specific tasks. It deployed ransomware in 2017 and early 2018, and then switched to spreading a cryptocurrency miner (coinminer) in 2018.

But Palo Alto Networks researchers say the group has now rolled out the new XBash malware strain that is a combination of all their previous tactics, rolling a botnet-like structure together with coinminer and ransomware functionality, all into one...
Click to expand...

Read more:

New XBash malware combines ransomware, coinminer, botnet, and worm features in deadly combo | ZDNet

Xbash Combines Botnet, Ransomware, Coinmining in Worm that Targets Linux and Windows - Palo Alto Networks Blog

Windows 10: How to get rid of "Win32/CoinMiner.I" malware

How to get rid of "Win32/CoinMiner.I" malware

How to get rid of "Win32/CoinMiner.I" malware

How to get rid of "Win32/CoinMiner.I" malware

How to get rid of "Win32/CoinMiner.I" malware - Similar Threads - rid Win32 CoinMiner

HOW TO GET RID OF BLOATWARE/MALWARE

How to get rid of "Win32/CoinMiner.I" malware

How to get rid of a polymorphic malware?

Get rid of COINMINER?

Get rid of COINMINER?

Get rid of COINMINER?

Win32/Coinminer

PUA:Win32/CoinMiner and XMRig cannot get rid of

how do I get rid of Win32/SpeedingUpMyPC