Ransom

Heur.Mint.SP.Ransom.Dearcry.1 removal tips

Malware Removal

The Heur.Mint.SP.Ransom.Dearcry.1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Heur.Mint.SP.Ransom.Dearcry.1 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Heur.Mint.SP.Ransom.Dearcry.1?


File Info:

name: D1073F6233771D78795D.mlw
path: /opt/CAPEv2/storage/binaries/5370503152552abb559bf5ebff26572f56a2e4175fe3711c79339ba01fdaf710
crc32: E0E68623
md5: d1073f6233771d78795dfd3d03b18181
sha1: 802925ba2729553e6815dc185b2b4f9beee7d9ac
sha256: 5370503152552abb559bf5ebff26572f56a2e4175fe3711c79339ba01fdaf710
sha512: 5a45f96989eeb91ceb73b186826b9d98a7c0853e1a7be2b374c7ab0a85e00777869e5aeda9bfb2345c3960cecff7a4993de48221c3f6ab591bb31c16b921c1db
ssdeep: 6144:CLYk5DRUO0pvpdosj+JaRyoksWFAK3rVf4qUXeFLEITTY2c:iYk5VUOmpdziaQdxAqUuFL3Y
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T186741213E7A1883AE1528C300D25D6545A7B7E262C3C059A71ECAEED9FB3791890F71F
sha3_384: 8c7c689e00bae607cc60cb625bc0b314b0bc601d411b240d2f3e814a5ef815a74294048a667773fc9445a7fed66380f8
ep_bytes: 558bec83c4b853565733c08945f08945
timestamp: 1992-06-19 22:22:17

Version Info:

Comments: This installation was built with Inno Setup: http://www.innosetup.com
CompanyName: Comedy Planet Inc
FileDescription: Comedy-Planet Setup
FileVersion:
InternalName:
OriginalFilename:
ProductName:
ProductVersion:
Translation: 0x0409 0x04e4

Heur.Mint.SP.Ransom.Dearcry.1 also known as:

MicroWorld-eScanGen:Heur.Mint.SP.Ransom.Dearcry.1
FireEyeGen:Heur.Mint.SP.Ransom.Dearcry.1
ALYacGen:Heur.Mint.SP.Ransom.Dearcry.1
Cybereasonmalicious.233771
BitDefenderGen:Heur.Mint.SP.Ransom.Dearcry.1
NANO-AntivirusTrojan.Win32.Agent.bnmjee
EmsisoftGen:Heur.Mint.SP.Ransom.Dearcry.1 (B)
VIPREGen:Heur.Mint.SP.Ransom.Dearcry.1
SophosComedy-Planet (PUA)
GDataGen:Heur.Mint.SP.Ransom.Dearcry.1 (2x)
WebrootAdware.Comedy-planet
AviraADWARE/ComPlanet.VQ
ArcabitTrojan.Mint.SP.Ransom.Dearcry.1
MAXmalware (ai score=85)
VBA32TrojanDownloader.Agent
YandexTrojan.DR.Agent!quBu58svDB4
BitDefenderThetaGen:NN.ZexaF.34742.dmW@aKHuOln

How to remove Heur.Mint.SP.Ransom.Dearcry.1?

Heur.Mint.SP.Ransom.Dearcry.1 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment