Solved! Use CSRSS (64 BIT).EXE (Trojan CoinMiner) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

CSRSS (64 BIT).EXE – Trojan CoinMiner removal

File MD5 Virus Alias
CSRSS (64 BIT).EXE 7f2588848040af6f4d8c43f6b6fb34c8 Trojan CoinMiner
CSRSS (64 BIT).EXE 7f2588848040af6f4d8c43f6b6fb34c8 Trojan Bitcoin

CSRSS (64 BIT).EXE size: 837253 bytes
CSRSS (64 BIT).EXE hash: 7F2588848040AF6F4D8C43F6B6FB34C8

Created files:

C:\Caches\csrss (64 bit).exe
C:\Caches\MShelp.exe
%Temp%\RarSFX0\csrss (64 bit).exe
%Temp%\RarSFX0\MShelp.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SystemEngine: C:\Caches\MShelp.exe

Detected by UnHackMe:

CSRSS (64 BIT).EXE
Default location: C:\CACHES\CSRSS (64 BIT).EXE

Dropper information:
MD5: 8827a41a69ce5169e75d45292db6d5b9
File size: 475726 bytes

Leave a Reply