Home Malware Programs Malware RiskTool.Win32.BitCoinMiner

RiskTool.Win32.BitCoinMiner

Posted: January 27, 2012

Threat Metric

Threat Level: 8/10
Infected PCs: 40
First Seen: January 27, 2012
Last Seen: May 27, 2021
OS(es) Affected: Windows

RiskTool.Win32.BitCoinMiner is a dangerous utility or potentially unwanted application that may use your computer's resources to create bitcoin blocks and transmit them to a remote server. RiskTool.Win32.BitCoinMiner spreads through social networks, drive-by download, removable drives and instant messengers. RiskTool.Win32.BitCoinMiner can also come bundled with other malicious programs. The bit coin mining module can be also downloaded by the NgrBot. This bot defines GeoIp details, downloads other modules from the web and kills all previous bitcoin mining processes. It also has spyware modules. Symptoms of RiskTool.Win32.BitCoinMiner cover high CPU usage and suspicious network activity. RiskTool.Win32.BitCoinMiner uses the computer's CPU resources very intensively by executing highly complex calculations that is a very time consuming process. RiskTool.Win32.BitCoinMiner makes a compromised PC run very slowly, so cybercriminals made Bitcoins by leveraging the CPU cycles of the affected computer. The NgrBot tries to load nvcuda.dll if present to mine Bitcoins using GPU. Suspicious network activity involves active connections to specific servers and the fact that there are more packets transmitted than received. RiskTool.Win32.BitCoinMiner mines for bitcoins at one minute intervals by performing the certain command. RiskTool.Win32.BitCoinMiner is added to the startup program list. RiskTool.Win32.BitCoinMiner also modifies Windows regsitry, so that it can run every time you start Windows. RiskTool.Win32.BitCoinMiner can affect USB pen drives and other removable media. You should use a reputable and effective anti-malware tool to completely remove RiskTool.Win32.BitCoinMiner from the corrupted machine.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



xD.exe File name: xD.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
hehe.exe File name: hehe.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Loading...