About "Ransom.1484 (B)" infection

The Ransom.1484 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom.1484 (B) virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ransom.1484 (B)?


File Info:
crc32: FF6E59E9
md5: 322b407b789f7df7d7a01237a8a6c9ba
name: 322B407B789F7DF7D7A01237A8A6C9BA.mlw
sha1: 03a19804248485481170e8d1b2b87a7c8bfb2c31
sha256: 3ea1efa47fbaedb81406e1d329af41eb732a4adf4c0b26ec8d059380792c27a6
sha512: 4a846f907a96500537f6ab50f357f6845587e6643b17b13b267a45ed40c00cd7874a11e6eb527d302fe713c0d3a3de0226fec3654d0d2773795bef6ef628ec3a
ssdeep: 768:5Z/KwcvsijOqvi2rtwuP+y31uesvikB3H:5Z/KwcvsiUKtwuxdWiktH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: WAB.EXE
FileVersion: 6.00.2900.6040 (xpsp_sp3_gdr.101011-1837)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.00.2900.6040
FileDescription: Address Book
OriginalFilename: WAB.EXE
Translation: 0x0409 0x04b0

Ransom.1484 (B) also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ransom.1484
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	Trojan:Win32/Vitro.9eeed691
Cybereason	malicious.b789f7
APEX	Malicious
Avast	Win32:WrongInf-A [Susp]
ClamAV	Win.Virus.Virut-5901233-0
BitDefender	Gen:Variant.Ransom.1484
MicroWorld-eScan	Gen:Variant.Ransom.1484
Ad-Aware	Gen:Variant.Ransom.1484
Sophos	Mal/Generic-S
Comodo	Malware@#13oow4mvz7413
BitDefenderTheta	Gen:NN.ZexaF.34142.hm0@aGoklpfi
McAfee-GW-Edition	BehavesLike.Win32.Virut.cz
FireEye	Generic.mg.322b407b789f7df7
Emsisoft	Gen:Variant.Ransom.1484 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Ransom.nkjyd
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Tiggre!rfn
Arcabit	Trojan.Ransom.D5CC
GData	Gen:Variant.Ransom.1484
McAfee	Artemis!322B407B789F
MAX	malware (ai score=86)
Panda	Trj/CI.A
Ikarus	Trojan.Agent.Vitro
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:WrongInf-A [Susp]
Paloalto	generic.ml

How to remove Ransom.1484 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Ransom.1484 (B)” infection