Related
General Threat
DiskO.exe detected as PUP.MailRu
Review indicators and cleanup context for this General Threat report.
Overview
64.exe threat analysis
64.exe is identified as a file that can be identified in your Task Manager as energetic and keeping up every COMPUTER startup. There are lots of anti-virus utilities presently that do not determine this data as dangerous. Yet, it can not be dealt with as a completely benign procedure, therefore, we do think it is a potentially unwanted app that is worth being removed at once.
64.exe typically is the trace of certain adware or possibly unwanted application (PUA) to be energetic in your tool. While this kind of malware is active you will keep experiencing various PC-related problems, primarily defined in your computer working in a really slow fashion.
64.exe and associated unwanted programs could be in reality infused right into your gadget by means of some dubious web links on the Internet. After the PC owners wrongly decide to do so they will promptly welcome 64.exe and also other unwanted software program right into their computers.
64.exe procedure can be additionally integrated with other third-party apps, so you must delete this kind of hazard as fast as you can. You can attempt to remove 64.exe by hand from the tool, nonetheless, this may need more advanced computer evaluation that is not a very easy treatment in most circumstances. The finest option to erase 64.exe is to check your gadget with a reputable anti-virus tool.
Key indicators
File name
64.exe
Threat type
General Threat
Detection name
Trojan.Win64.CoinMiner
MD5
03D6C0A3610125B0964AD04B46C04E60
File size
7585792 bytes
Scan date
2020-01-14 13:23
Product name
Company name
Technical details
| Full path | C:\users\{USERNAME}\appdata\Local\Temp\64.exe |
|---|---|
| Registry path | |
| Product version | |
| File version | |
| Certificates | |
| Sections | .text:60000020:D22C47808F41C214F3A2F4857B850834:689152 .rdata:40000040:949F2633DFA964890F744BE0550025FC:203264 .data:C0000040:EB799336609D36706092AE6EF79815AB:24064 .pdata:40000040:3230A8BE94DB766F0360BE9D58C01B2D:27136 .rsrc:40000040:4BFB056C50A3FF87E65F0DF08433A150:6638080 .reloc:42000040:8A11D2CB46B101DE2B0FBEC089FFA515:3072 |
Removal workflow
Use the indicators above to confirm that the suspicious file matches this report, then clean the system and verify that the process does not return after reboot.
1
Scan
Run a trusted anti-malware scan and include startup entries, scheduled tasks, browser extensions, and recently downloaded files.
2
Remove
Quarantine detected items, remove associated unwanted applications, and reset affected browser settings when needed.
3
Verify
Restart the computer, check Task Manager and startup locations, then rescan to confirm the threat is gone.