COINMINER Malware

Also Known As: COINMINER virus
Type: Adware
Distribution: Moderate
Damage level: Medium

COINMINER removal instructions

What is COINMINER?

As most of us are aware, 2017 was a very successful year for cryptocurrency miners. The price of popular cryptocurrencies jumped dramatically (for example, in early 2017, Bitcoin was equivalent to ~$1000, while at the end of the year it reached nearly $20,000). Therefore, mining cryptocurrency became even more popular. Cyber criminals also started to partake in this enterprise: to generate revenue, they proliferated malware that stealthily mined cryptocurrency.

COINMINER adware

To proliferate COINMINER malware, cyber criminals typically employ fake Flash Player updaters. This method is called "bundling" (potentially unwanted programs are also proliferated in this way). Immediately after infiltration, bogus software (so-called COINMINER) starts mining Bitcoins in the background. In other words, cyber criminals stealthily misuse system resources (specifically, the GPU) to generate revenue without users' consent. This significantly reduces overall system performance. Another way to stealthily mine cryptocurrency is to use JavaScript code called Coinhive. Unlike COINMINER, however, Coinhive mines Monero cryptocurrency, rather than Bitcoins. Monero is optimized for CPU mining and JavaScript is capable of making better use of the computer CPU, rather than GPU. Cyber criminals inject Coinhive script into various websites. In some cases, these sites are legitimate - they are either hijacked by cyber criminals or the hosts are dubious enough to take advantage of unsuspecting users. Visiting these sites always leads to a reduction in system performance, since most of the resources are used to mine cryptocurrency. If you feel that the system suddenly 'lags' without any particular reason, there may be a COINMINER infection or you are visiting dubious websites. In any case, immediately remove all dubious applications/browser plug-ins and ensure that visited sites are legitimate.

As mentioned above, COINMINER is distributed using fake update tools. Therefore, there is a high probability that it will be delivered with various potentially unwanted programs (PUPs). Most of these programs deliver various intrusive ads (coupons, banners, pop-ups, etc.) that conceal underlying content, thereby diminishing the browsing experience. Furthermore, some ads will redirect to malicious websites or even run malicious code that stealthily downloads and installs malware/PUPs. Therefore, clicking them risks further computer infections. Another downside is information tracking. Research shows that PUPs gather various information that typically includes personal data that is sold to third parties. There is a high probability that information tracking will lead to serious privacy issues or even identity theft. Potentially unwanted programs must be eliminated immediately.

Many PUPs offer various useful features, however, since their only purpose is to generate revenue for the developers, these claims are merely attempts to give the impression of legitimacy. Only a small percentage of PUPs provide the features promised - most are useless for regular users. Rather than (or together with) enabling functionality, PUPs pose a direct threat to your privacy and Internet browsing safety.

How did COINMINER install on my computer?

COINMINER and PUPs are typically distributed using the "bundling" method - stealth installation of third party software together with regular (typically free) software. Developers hide "bundled" apps within "Custom/Advanced" settings of the download or installation processes. Many users rush and skip these sections, thus exposing their systems to risk of various infections and compromising their privacy.

How to avoid installation of potentially unwanted applications?

The main reasons for computer infections are poor knowledge and careless behavior. The key to safety is caution. Therefore, carefully analyze each window of the download/installation dialogs and opt-out of all additionally-included programs. We also strongly recommend that you download your software from official sources only and, preferably, using a direct download links (most third party downloaders/installers are monetized using the "bundling" method). Intrusive ads often look legitimate, however, they redirect to dubious websites (gambling, pornography, etc.) If you experience these redirects, uninstall all suspicious programs/browser add-ons.

Fake Flash Player update promoting COINMINER:

COINMINER promoter

Another variant of a fake flash player update pop-up distributing Coinminer malware:

fake flash player update pop-up promoting coinminer malware sample 2

Instant automatic removal of COINMINER virus: Manual threat removal might be a lengthy and complicated process that requires advanced computer skills. Reimage Repair is a professional automatic malware removal tool that is recommended to get rid of COINMINER virus. Download it by clicking the button below:
▼ DOWNLOAD Reimage Repair By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. Free scanner checks if your computer is infected. To remove malware, you have to purchase the full version of Reimage Repair.

Quick menu:

Removal of potentially unwanted programs:

Windows 7 users:

Accessing Programs and Features (uninstall) in Windows 7

Click Start (Windows Logo at the bottom left corner of your desktop), choose Control Panel. Locate Programs and click Uninstall a program.

Windows XP users:

Accessing Add or Remove Programs in Windows XP

Click Start, choose Settings and click Control Panel. Locate and click Add or Remove Programs.

Windows 10 and Windows 8 users:

Accessing Programs and Features (uninstall) in Windows 8

Right-click in the lower left corner of the screen, in the Quick Access Menu select Control Panel. In the opened window choose Programs and Features.

Mac OSX users:

Uninstall app in OSX (Mac)

Click Finder, in the opened screen select Applications. Drag the app from the Applications folder to the Trash (located in your Dock), then right click the Trash icon and select Empty Trash.

COINMINER adware uninstall via Control Panel

In the uninstall programs window, look for any potentially unwanted programs, select these entries and click "Uninstall" or "Remove".

After uninstalling the potentially unwanted programs, scan your computer for any remaining unwanted components or possible malware infections. To scan your computer, use recommended malware removal software.

Remove PUPs from Internet browsers:

Video showing how to remove potentially unwanted browser add-ons:

Internet Explorer logoRemove malicious add-ons from Internet Explorer:

Removing COINMINER ads from Internet Explorer step 1

Click the "gear" icon Internet Explorer options icon (at the top right corner of Internet Explorer), select "Manage Add-ons". Look for any recently-installed suspicious browser extensions, select these entries and click "Remove".

Removing COINMINER ads from Internet Explorer step 2

Optional method:

If you continue to have problems with removal of the coinminer virus, reset your Internet Explorer settings to default.

Windows XP users: Click Start, click Run, in the opened window type inetcpl.cpl In the opened window click the Advanced tab, then click Reset.

Resetting Internet Explorer settings to default on Windows XP

Windows Vista and Windows 7 users: Click the Windows logo, in the start search box type inetcpl.cpl and click enter. In the opened window click the Advanced tab, then click Reset.

Resetting Internet Explorer settings to default on Windows 7

Windows 8 users: Open Internet Explorer and click the gear icon. Select Internet Options.

Reseting Internet Explorer settings to default in Windows 8 - accessing

In the opened window, select the Advanced tab.

Resetting Internet Explorer settings to default on Windows 8 - Internet options advanced tab

Click the Reset button.

Resetting Internet Explorer settings to default on Windows 8 - click the Reset button in the Internet options advanced tab

Confirm that you wish to reset Internet Explorer settings to default by clicking the Reset button.

Resetting Internet Explorer settings to default on Windows 8 - confirm settings reset to default by clicking the reset button

Google Chrome logoRemove malicious extensions from Google Chrome:

Removing COINMINER  ads from Google Chrome step 1

Click the Chrome menu icon Google Chrome menu icon (at the top right corner of Google Chrome), select "More tools" and click "Extensions". Locate all recently-installed suspicious browser add-ons, select these entries and click the trash can icon.

Removing COINMINER ads from Google Chrome step 2

Optional method:

If you continue to have problems with removal of the coinminer virus, reset your Google Chrome browser settings. Click the Chrome menu icon Google Chrome menu icon (at the top right corner of Google Chrome) and select Settings. Scroll down to the bottom of the screen. Click the Advanced… link.

Google Chrome settings reset step 1

After scrolling to the bottom of the screen, click the Reset (Restore settings to their original defaults) button.

Google Chrome settings reset step 2

In the opened window, confirm that you wish to reset Google Chrome settings to default by clicking the Reset button.

Google Chrome settings reset step 3

Mozilla Firefox logoRemove malicious plug-ins from Mozilla Firefox:

Removing COINMINER ads from Mozilla Firefox step 1

Click the Firefox menu firefox menu icon (at the top right corner of the main window), select "Add-ons". Click "Extensions", in the opened window, remove all recently-installed suspicious browser plug-ins.

Removing COINMINER ads from Mozilla Firefox step 2

Optional method:

Computer users who have problems with coinminer virus removal can reset their Mozilla Firefox settings.

Open Mozilla Firefox, at the top right corner of the main window, click the Firefox menu, firefox menu icon in the opened menu, click Help.

Accessing settings (Reset Firefox to default settings step 1)

Select Troubleshooting Information.

Accessing Troubleshooting Information (Reset Firefox to default settings step 2)

In the opened window, click the Refresh Firefox button.

Clicking on Refresh Firefox button (Reset Firefox to default settings step 3)

In the opened window, confirm that you wish to reset Mozilla Firefox settings to default by clicking the Refresh Firefox button.

Confirm your want to reset Firefox settings to default (Reset Firefox to default settings step 4)

safari browser logoRemove malicious extensions from Safari:

removing adware from safari step 1 - accessing preferences

Make sure your Safari browser is active, click Safari menu, and select Preferences....

removing adware from safari step 2 - removing extensions

In the opened window click Extensions, locate any recently installed suspicious extension, select it and click Uninstall.

Optional method:

Make sure your Safari browser is active and click on Safari menu. From the drop down menu select Clear History and Website Data...

resetting safari step 1

In the opened window select all history and click the Clear History button.

resetting safari step 2

Microsoft Edge logoRemove malicious add-ons from Microsoft Edge:

Removing browser hijackers from Microsoft Edge step 1

Click the three horizontal dots icon edge more icon (at the top right corner of Microsoft Edge), select "Extensions". Look for any recently-installed suspicious extensions, right click your mouse on these entries and click "Uninstall".

Removing browser hijackers from Microsoft Edge step 2

Optional method:

Click the three horizontal dots icon edge more icon (at the top right corner of Microsoft Edge), and select Settings.

Resetting Microsoft Edge settings step 1

In the opened tab, click the "Choose what to clear" button.

Resetting Microsoft Edge settings step 2

Click Show more and select everything, and then click the "Clear" button.

Resetting Microsoft Edge settings step 3

  • If this didn't help, please follow these alternative instructions explaining how to reset Microsoft Edge browser.

Summary:

declining installation of adware while downloading free software sampleCommonly, adware or potentially unwanted applications infiltrate Internet browsers through free software downloads. Note that the safest source for downloading free software is via developers' websites only. To avoid installation of adware, be very attentive when downloading and installing free software. When installing previously-downloaded free programs, choose the custom or advanced installation options – this step will reveal any potentially unwanted applications listed for installation together with your chosen free program.

Removal assistance:
If you are experiencing problems while trying to remove coinminer virus from your computer, please ask for assistance in our malware support forum.

Post a comment:
If you have additional information on coinminer virus or it's removal please share your knowledge in the comments section below.