CSRSS.EXE – Trojan CoinMiner

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

CSRSS.EXE – Trojan CoinMiner removal

FileMD5Virus Alias
CSRSS.EXE dcb5f700e58341df92c8e52eb798af4c Trojan CoinMiner
CSRSS.EXE dcb5f700e58341df92c8e52eb798af4c Trojan Bitcoin
CSRSS.EXE dcb5f700e58341df92c8e52eb798af4c Trojan SuspiciousFile
CSRSS.EXE dcb5f700e58341df92c8e52eb798af4c Trojan Artemis
CSRSS.EXE dcb5f700e58341df92c8e52eb798af4c Trojan Generic
CSRSS.EXE dcb5f700e58341df92c8e52eb798af4c Trojan Graftor

CSRSS.EXE size: 973326 bytes
CSRSS.EXE hash: DCB5F700E58341DF92C8E52EB798AF4C

Created files:

%Program Files%\%appdata%\Java\Update\Download\Cache\csrss.exe
%Program Files%\%appdata%\Java\Update\Download\Cache\diablo121016.cl
%Program Files%\%appdata%\Java\Update\Download\Cache\diablo130302.cl
%Program Files%\%appdata%\Java\Update\Download\Cache\diakgcn121016.cl
%Program Files%\%appdata%\Java\Update\Download\Cache\jsheded.exe
%Program Files%\%appdata%\Java\Update\Download\Cache\libcurl-4.dll
%Program Files%\%appdata%\Java\Update\Download\Cache\libeay32.dll
%Program Files%\%appdata%\Java\Update\Download\Cache\libidn-11.dll
%Program Files%\%appdata%\Java\Update\Download\Cache\libpdcurses.dll
%Program Files%\%appdata%\Java\Update\Download\Cache\librtmp.dll
%Program Files%\%appdata%\Java\Update\Download\Cache\libssh2.dll
%Program Files%\%appdata%\Java\Update\Download\Cache\libusb-1.0.dll
%Program Files%\%appdata%\Java\Update\Download\Cache\OpenCL.dll
%Program Files%\%appdata%\Java\Update\Download\Cache\phatk121016.cl
%Program Files%\%appdata%\Java\Update\Download\Cache\poclbm121016.cl
%Program Files%\%appdata%\Java\Update\Download\Cache\poclbm130302.cl
%Program Files%\%appdata%\Java\Update\Download\Cache\pthreadGC2.dll
%Program Files%\%appdata%\Java\Update\Download\Cache\scrypt130511.cl
%Program Files%\%appdata%\Java\Update\Download\Cache\scrypt130511Pitcairnglg2tc6016w256l4.bin
%Program Files%\%appdata%\Java\Update\Download\Cache\ssleay32.dll
%Program Files%\%appdata%\Java\Update\Download\Cache\zlib1.dll

Detected by UnHackMe:

CSRSS.EXE
Default location: %PROGRAM FILES%\%APPDATA%\JAVA\UPDATE\DOWNLOAD\CACHE\CSRSS.EXE

Dropper information:
MD5: 5e863f46df6c51512e491c6a67a994b9
File size: 1794244 bytes

Leave a Reply