Ransom Trojan

BScope.TrojanRansom.Critroni removal guide

Malware Removal

The BScope.TrojanRansom.Critroni is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BScope.TrojanRansom.Critroni virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Creates a copy of itself
  • Collects information to fingerprint the system

Related domains:

edgedl.me.gvt1.com

How to determine BScope.TrojanRansom.Critroni?


File Info:

crc32: D0C4F62D
md5: cfde72ec86700c2e9b70f1b5195f391a
name: CFDE72EC86700C2E9B70F1B5195F391A.mlw
sha1: e6e72b65d26acc58596fc8414654a87efe89933e
sha256: 3544b953a6e72082340bdfe5010ae679767545a68c3b5195ce0741d6f09abec4
sha512: 599793505ce1e1ab350c362f33309dd2fd7952a206373b8ce14cc622173fca540f18e3c119cc5834a834796196487ad278218492aae608cf27bf0002bc5b6ed6
ssdeep: 12288:eFuvTwIg88kexsIgMatgNGj26M0czuFtwMYx12mzSYgI9u8aOjDtteK8lm:esT0Lz6VHj2n0cunwMYumzSY19u8a/KN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

BScope.TrojanRansom.Critroni also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0040fa101 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.1081
CynetMalicious (score: 100)
ALYacGen:Heur.Kelios.1
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
K7GWTrojan ( 0040fa101 )
Cybereasonmalicious.c86700
CyrenW32/Ransom.BD.gen!Eldorado
ESET-NOD32a variant of Win32/Filecoder.CTBLocker.A
APEXMalicious
AvastWin32:Critroni-B [Trj]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Heur.Kelios.1
NANO-AntivirusTrojan.Win32.MlwGen.dcnpns
ViRobotTrojan.Win32.CryptoLocker.679936
MicroWorld-eScanGen:Heur.Kelios.1
TencentWin32.Trojan.Raas.Auto
Ad-AwareGen:Heur.Kelios.1
SophosML/PE-A + Mal/Harnig-B
BitDefenderThetaAI:Packer.D4464F661E
VIPRETrojan.Win32.Critroni.a (v)
TrendMicroRansom_CRYPCBT.SMA
McAfee-GW-EditionBehavesLike.Win32.Sality.jc
FireEyeGeneric.mg.cfde72ec86700c2e
EmsisoftGen:Heur.Kelios.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/Generic.bekwa
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Generic.ASMalwS.B1EBB3
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftRansom:Win32/Critroni.A
GDataGen:Heur.Kelios.1
AhnLab-V3Trojan/Win32.Agent.C430204
Acronissuspicious
McAfeeRansom-FTX!CFDE72EC8670
MAXmalware (ai score=100)
VBA32BScope.TrojanRansom.Critroni
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom_CRYPCBT.SMA
RisingTrojan.Generic@ML.100 (RDML:VFC08aFpwQDyvqnJW+s5Eg)
YandexTrojan.DR.Agent!wwXsujK4FTQ
IkarusTrojan.Win32.Filecoder
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.DNKK!tr
AVGWin32:Critroni-B [Trj]
Paloaltogeneric.ml

How to remove BScope.TrojanRansom.Critroni?

BScope.TrojanRansom.Critroni removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment