Js/coinminer.f Malware Removal (Updated)

Parasite may reinstall itself multiple times if you don't delete its core files. We recommend downloading SpyHunter to scan for malicious programs installed with it. This may save you hours and cut down your time to about 15 minutes. 

Download SpyHunter Anti-Malware

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

This page aims to help you remove Js/coinminer.f malware – a type of rogue cryptominer. Our removal instructions work for every version of Windows.

Pretty much everyone with Internet access has read something about the so-called Trojans. This old malware type has turned into a symbol of all tricky means of achieving any goal. Trojans represent malicious pieces of software that are always ready to damage your computer in a variety of ways. The program we’ve decided to discuss below is exactly a Trojan representative. It is called Js/coinminer.f and we will aim to explain to you all the necessary info you should be aware of when it comes to this virus’ nature and its features.

Trojans – a great deal of different purposes and sources:

When it comes to Trojans, we need to say that this is by all means the most famous kind of malware, and the one with the most diverse purposes and sources. In the paragraphs that follow we will provide you with a list of the most common of them. Nonetheless, there are some sides of this viruses’ behavior that bind all the versions, making them part of the same family. What we can distinguish is their capability of infecting one’s PC silently and without any sign of the infection. Normally, such programs use a possible vulnerability of your PC for that purpose. It might be the lack of an anti-virus tool or one that has not been updated for a while. Also, it could be a weak spot of your OS in general. For instance, your system might have become vulnerable if you have not updated it recently. Another very common thing for all the known Trojans is their ability to stay hidden and at the same time perform their evil plans, while never giving any sign of there being something wrong. What’s more, all Trojans are awfully malicious and may cause some significant trouble, whatever kind of problems they may provoke. The possible goals of Js/coinminer.f as well as of any other Trojans might differ extremely. Here are some examples for you.

Js/coinminer.f Malware Removal



Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).



We get asked this a lot, so we are putting it here: Removing parasite manually may take hours and damage your system in the process. We recommend downloading SpyHunter to see if it can detect parasite files for you.

Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab. Try to determine which processes are dangerous. 


Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at:

Scan Results

Virus Scanner Result

After you open their folder, end the processes that are infected, then delete their folders. 

Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections. 


Hold together the Start Key and R. Type appwiz.cpl –> OK.


You are now in the Control Panel. Look for suspicious entries. Uninstall it/them. If you see a screen like this when you click Uninstall, choose NO:



Type msconfig in the search field and hit enter. A window will pop-up:


Startup —> Uncheck entries that have “Unknown” as Manufacturer or otherwise look suspicious.

  • Remember this step – if you have reason to believe a bigger threat (like ransomware) is on your PC, check everything here.

Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.


To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.

If you want to avoid the risk, we recommend downloading SpyHunter
a professional malware removal tool.

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

Type Regedit in the windows search field and press Enter.

Once inside, press CTRL and F together and type the virus’s Name. Right click and delete any entries you find with a similar name. If they don’t show up this way, go manually to these directories and delete/uninstall them:

  • HKEY_CURRENT_USER—-Software—–Random Directory. It could be any one of them – ask us if you can’t discern which ones are malicious.
    HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
    HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random

Different malicious functions and intentions such as:

  • Theft of certain data: The scammers who create such malware may want some info from you. They might be after your bank deposit details, so that they can later be able to drain your deposits. They could also be after some data from your professional network (especially if your PC is a part of such a network). Such criminals may need your private details or social media account credentials, for example. It is even possible for them to hijack your social media profiles or even steal your identity. In the event of the latter, the hackers may use Js/coinminer.f to impersonate you and use your identity to commitg crimes on your behalf.
  • Usage of your system resources: Any Trojan might be exploited for the purpose of turning your PC into a bot and using all your system resources for awful purposes only.
  • Malware spreading: Js/coinminer.f may also be used as a means of spreading Ransomware viruses. Trojans often work in such a way. They are able to penetrate someone’s device and sneak any other virus inside it. This is awfully disturbing since you could end up harassed not by one, but by two viruses at the same time.

Furthermore, keep in mind that such multipurpose malware could have many other functions and aims. Nonetheless, we have simply outlined the most basic ones here to help you get  an idea of the purposes and usages of these terrible viruses.

Potential sources that may infect you with Js/coinminer.f (and other Trojans):

Like with the usages, there may be tens of possible sources. Still, we can distinguish the most regularly used ones as:

  1. Malvertisements: Trojan horses could come from fake ads that are produced all around the web. These malicious pop-ups may redirect you to web pages that contain  various viruses.
  2. Contagious emails: Such viruses can come from accessing spam sent to your email. No email is really safe, so you have to avoid all those that you don’t expect or otherwise seem suspicious. Moreover, remember that their attachments may be contaminated as well.
  3. Torrents and video-streaming pages: These could also be sources of viruses. The majority of them that are illegal and get spread with no permission or license are the most common sources.

If you really have been infected by Js/coinminer.f, you need to remove it from your device:

Pay close attention to the steps below, whatever the purpose of this Trojan is. We believe they can help you get rid of it!


Name Js/coinminer.f
Type Trojan
Danger Level High (Trojans are often used as a backdoor for Ransomware)
Symptoms Nothing bothering at first, but then – the nightmare begins once the virus starts acting.
Distribution Method Via spam ads, emails, attachments, all kinds of fake update requests.
Detection Tool

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version.
More information about SpyHunter and steps to uninstall.

If the guide doesn’t help, download the anti-virus program we recommended or try our free online virus scanner. Also, you can always ask us in the comments for help!

Leave a Comment