How to remove “Ransom.1310”?

The Ransom.1310 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.1310 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Ransom.1310?


File Info:
name: 74ED8031F0623DE43C35.mlw
path: /opt/CAPEv2/storage/binaries/f442756ad6fadcd276f2e00263a87f0cc6be79107053a6da603bbf427ba7a19f
crc32: 7A42A6D9
md5: 74ed8031f0623de43c35758b09ef8a65
sha1: 28c0555c29db24b80cd923ec92a32ac20604531b
sha256: f442756ad6fadcd276f2e00263a87f0cc6be79107053a6da603bbf427ba7a19f
sha512: 42e5033a28226568361c2ecbe08feade30ea10f65fc5e07a34fcbab4d94f2ebbb7864a624e137e946b6f8b5133086afeeb127dcdf14b55ffdafd63c5a02ca424
ssdeep: 3072:PrxqxPNb7rS1vrqdw4sVXcy0/FTlfm3ys/ocY+8RvorM3Ag0FujrSV0r6krbR:Pr2qCJrFFTlwJYAM3AO1xfR
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T132248B1175D2C472C173153408E8E67A567DBA610B658EFFA7E80B6E4F781C0AB32A73
sha3_384: a17dc8321f1b2f58fa5be9b1cc9691944985fb8bc46a4b2c22c155a57f3ca25d5cdc43f83f44edfc2da3eb894403cf8c
ep_bytes: e883070000e987feffffff2544314200
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Ransom.1310 also known as:

Lionic	Trojan.Win32.Generic.4!c
tehtris	Generic.Malware
Cynet	Malicious (score: 99)
FireEye	Gen:Variant.Ransom.1310
McAfee	Artemis!74ED8031F062
Cylance	Unsafe
Sangfor	Trojan.Win32.Agent.aa
Cybereason	malicious.1f0623
Elastic	malicious (moderate confidence)
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Variant.Ransom.1310
MicroWorld-eScan	Gen:Variant.Ransom.1310
Ad-Aware	Gen:Variant.Ransom.1310
Emsisoft	Gen:Variant.Ransom.1310 (B)
F-Secure	Heuristic.HEUR/AGEN.1228724
VIPRE	Gen:Variant.Ransom.1310
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
GData	Gen:Variant.Ransom.1310
Webroot	W32.Malware.Gen
Avira	HEUR/AGEN.1228724
Antiy-AVL	Trojan/Generic.ASMalwS.82B4
Arcabit	Trojan.Ransom.D51E
Google	Detected
ALYac	Gen:Variant.Ransom.1310
MAX	malware (ai score=89)
TrendMicro-HouseCall	TROJ_GEN.R002H09GJ22
Ikarus	Trojan.Inject
MaxSecure	Trojan.Malware.140221355.susgen
Fortinet	W32/PossibleThreat

How to remove Ransom.1310?

Ransom.1310 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X