Home » Removal » Trojan.Bitcoinminer Removal

Trojan.Bitcoinminer Removal

This article can help you to remove Trojan.Bitcoinminer Virus. The step by step removal works for every version of Microsoft Windows.

If you have discovered the Trojan.Bitcoinminer parasite on your computer, the news is bad. This intruder is a Trojan horse which uses your computer resources to generate revenue its owners. Basically, your computer performs services for a cyber-coin platform and gets rewarded with fractions of the coin. This process is known as mining. The Trojan runs the mining process in the background and leaves you to suffer the side effects. Unfortunately, there are some major issues caused by the parasite. The first one is the untypical unresponsiveness of your computer. The parasite consumes an enormous amount of computer resources. It uses both your CPU and GPU at their limits. It is also burdening your Internet Connection. Hence, you are stuck with an unstable machine with slow Internet Connection. The Trojan causes your computer freeze and crash often. Trojan.Bitcoinminer loads together with your OS, so, even though you actually rebooted your device, the Trojan is still running. This parasite roots deeply into your OS and is quite hard to be removed. Nevertheless, the removal is possible. We have prepared a manual removal guide below this article. Yet, we would like to warn you that the manual removal requires advanced computer skills. If you are not confident in yours, consider downloading a powerful anti-malware tool.

Remove Trojan.Bitcoinminer

How did I get infected with?

Trojan.Bitcoinminer is distributed via dozens of stealthy techniques and schemes. The parasite is usually camouflaged as a useful app and promoted on shady websites. It is also often attached as an extra app to the payload files of third-party programs. It is spread by torrents, spam emails, and fake updates. You can also catch the infection by visiting an infected website. As you can see, Trojan.Bitcoinminer is resourceful. Yet, it wouldn’t have infected your computer if you were vigilant. Needless to say, you should stay away from shady websites. The Internet is a dangerous place. If you don’t change your habits, another virus may infect your device. Avoid using torrents. Download your software from reputable sources only. When you start an installation process, play close attention to the fine print. If you are offered an Advanced setup option, by all means, select it. We also ought to mention the good old spam emails. Yes, you know how dangerous an attached file can be. Yet, did you know that a spam email may contain corrupted links too? Hyperlinks can also cause harm to your computer. A malicious link may download a virus or redirect you to an infected website. Either way, you will end up with an infection. When you receive a message from an unexpected sender, take your time to verify the sender. You can simply enter the questionable email address into some search engine. If it was used for shady business, someone might have complained online. If the questionable email is supposed to be sent from an organization, go to their website and compare the email addresses listed there with the one you have received a letter from. If the addresses don’t match, delete the pretender immediately.

Why is this dangerous?

The coin mining process is extremely intensive. It drains your computer resources and leaves you with sluggish and unresponsive PC. Yet, your discomfort is not the problem here. If you check your machine now, you will notice that it radiates heat. And heat is bad for your hardware. If your cooling system is not efficient enough, you will experience frequent system crashes. This leads to data loss, the Blue Screen of Death, and, in some rare cases, to irreversible hardware damage. There is one important thing to mention here. Trojan.Bitcoinminer is ceaselessly using your CPU under high temperatures. By doing so the Trojan shortens your CPU’s life significantly. The longer this madness continues, the more worn-out your CPU will get. Furthermore, let’s not forget that the dreaded heat was once electricity. To run its malicious processes, Trojan.Bitcoinminer consumes an enormous amount of electrical energy. Given enough time, this Trojan will double, even triple your electricity bill. This is not a joke. The coin mining process is profitable only if you don’t use your own resources. The crooks are using yours. They are making a mint at your expense! Don’t let this continue a minute longer. Take immediate action against the Trojan. Clean your computer for good!

Manual Trojan.Bitcoinminer Removal Instructions

The Trojan.Bitcoinminer infection is specifically designed to make money to its creators one way or another. The specialists from various antivirus companies like Bitdefender, Kaspersky, Norton, Avast, ESET, etc. advise that there is no harmless virus.

If you perform exactly the steps below you should be able to remove the Trojan.Bitcoinminer infection. Please, follow the procedures in the exact order. Please, consider to print this guide or have another computer at your disposal. You will NOT need any USB sticks or CDs.

STEP 1: Track down Trojan.Bitcoinminer related processes in the computer memory

STEP 2: Locate Trojan.Bitcoinminer startup location

STEP 3: Delete Trojan.Bitcoinminer traces from Chrome, Firefox and Internet Explorer

STEP 4: Undo the damage done by the virus

STEP 1: Track down Trojan.Bitcoinminer related processes in the computer memory

  • Open your Task Manager by pressing CTRL+SHIFT+ESC keys simultaneously
  • Carefully review all processes and stop the suspicious ones.


  • Write down the file location for later reference.

Step 2: Locate Trojan.Bitcoinminer startup location

Reveal Hidden Files

  • Open any folder
  • Click on “Organize” button
  • Choose “Folder and Search Options”
  • Select the “View” tab
  • Select “Show hidden files and folders” option
  • Uncheck “Hide protected operating system files”
  • Click “Apply” and “OK” button

Clean Trojan.Bitcoinminer virus from the windows registry

  • Once the operating system loads press simultaneously the Windows Logo Button and the R key.


  • A dialog box should open. Type “Regedit”


Depending on your OS (x86 or x64) navigate to:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] or
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] or

  • and delete the display Name: [RANDOM]

delete backgroundcontainer

  • Then open your explorer and navigate to: %appdata% folder and delete the malicious executable.

Clean your HOSTS file to avoid unwanted browser redirection

Navigate to %windir%/system32/Drivers/etc/host

If you are hacked, there will be foreign IPs addresses connected to you at the bottom. Take a look below:


Step 4: Undo the possible damage done by Trojan.Bitcoinminer

This particular Virus may alter your DNS settings.

Attention! this can break your internet connection. Before you change your DNS settings to use Google Public DNS for Trojan.Bitcoinminer, be sure to write down the current server addresses on a piece of paper.

To fix the damage done by the virus you need to do the following.

  • Click the Windows Start button to open the Start Menu, type control panel in the search box and select Control Panel in the results displayed above.
  • go to Network and Internet
  • then Network and Sharing Center
  • then Change Adapter Settings
  • Right-click on your active internet connection and click properties. Under the Networking tab, find Internet Protocol Version 4 (TCP/IPv4). Left click on it and then click on properties. Both options should be automatic! By default it should be set to “Obtain an IP address automatically” and the second one to “Obtain DNS server address automatically!” If they are not just change them, however if you are part of a domain network you should contact your Domain Administrator to set these settings, otherwise the internet connection will break!!!


  • Check your scheduled tasks to make sure the virus will not download itself again.

How to Permanently Remove Trojan.Bitcoinminer Virus (automatic) Removal Guide

Please, have in mind that once you are infected with a single virus, it compromises your whole system or network and let all doors wide open for many other infections. To make sure manual removal is successful, we recommend to use a free scanner of any professional antimalware program to identify possible virus leftovers or temporary files.

This article was published in Removal and was tagged . Bookmark the permalink for later reference by pressing CTRL+D on your keyboard.

Share the Knowledge by following us.

Support the fight against malware

Fix This Today!

Warning: Stopping the wrong file may damage your system. If you have any doubts this can happen just use SpyHunter® - a multiple time certified scanner and remover.
download spyhunter
  • SpyHunter Removal Tool is recommended to get rid of the virus, however if you want to remove the malware automatically, you have to register the professional malware removal tool.

© 2018 Updated. All Rights Reserved. About. Terms of Use. Disclaimer. Log in