Ransom Trojan

GenPack:Trojan.Ransom.Cerber.YM removal instruction

Malware Removal

The GenPack:Trojan.Ransom.Cerber.YM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What GenPack:Trojan.Ransom.Cerber.YM virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

How to determine GenPack:Trojan.Ransom.Cerber.YM?


File Info:

crc32: 6DCB4468
md5: 1c9956ff06506a1c44a52bdb0694c7e5
name: 1C9956FF06506A1C44A52BDB0694C7E5.mlw
sha1: d49c1e7f13bc4f8dfeb0276be3ca9fa8d182e429
sha256: 6be7f5fe6d9b0e1dd0b890a9d59eaaec61b58ad941f6856cdde19d245c6a27ba
sha512: 0bc32f0eaa54079b413fbe029eac0e81e036f386cba8af62e6d6e6d73a9d2bbd527bf8fead6867f2beaede43d8bc730b0c8d8c74448f80b12932074385b63cb8
ssdeep: 1536:JoUC0hvimQ1qGICEeJ0RNB0weYckhtW/SXW9/B:Jox7ICEewedat4SG9J
type: MS-DOS executable, MZ for MS-DOS

Version Info:

0: [No Data]

GenPack:Trojan.Ransom.Cerber.YM also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0052964f1 )
LionicTrojan.Win32.Zerber.4!c
Elasticmalicious (high confidence)
ALYacGenPack:Trojan.Ransom.Cerber.YM
ZillyaTrojan.Zerber.Win32.4412
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
BitDefenderGenPack:Trojan.Ransom.Cerber.YM
K7GWTrojan ( 0052964f1 )
Cybereasonmalicious.f06506
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.FUKG
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyTrojan-Ransom.Win32.Zerber.eiwe
AlibabaRansom:Win32/Zerber.f86c825e
NANO-AntivirusTrojan.Win32.Zerber.fnmwpb
MicroWorld-eScanGenPack:Trojan.Ransom.Cerber.YM
TencentWin32.Trojan.Zerber.Eaxt
Ad-AwareGenPack:Trojan.Ransom.Cerber.YM
SophosMal/Generic-S
ComodoMalware@#2054djve2q11s
BitDefenderThetaAI:Packer.8BB0B2201E
VIPRETrojan.Win32.Generic!BT
TrendMicroPossible_Cerber-33a
McAfee-GW-EditionBehavesLike.Win32.Generic.lh
FireEyeGeneric.mg.1c9956ff06506a1c
EmsisoftGenPack:Trojan.Ransom.Cerber.YM (B)
JiangminBackdoor.Androm.qya
AviraTR/Crypt.ZPACK.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.211BEB2
ArcabitGenPack:Trojan.Ransom.Cerber.YM
ZoneAlarmTrojan-Ransom.Win32.Zerber.eiwe
GDataGenPack:Trojan.Ransom.Cerber.YM
VBA32Hoax.Zerber
MAXmalware (ai score=100)
TrendMicro-HouseCallPossible_Cerber-33a
YandexPacked/MPress
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Zerber.EIWE!tr
PandaTrj/CI.A

How to remove GenPack:Trojan.Ransom.Cerber.YM?

GenPack:Trojan.Ransom.Cerber.YM removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment