Ransom.197 (B) information

The Ransom.197 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom.197 (B) virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ransom.197 (B)?


File Info:
crc32: 20777803
md5: 310d1b51dbe682a2e129e1675d656ba1
name: 310D1B51DBE682A2E129E1675D656BA1.mlw
sha1: d2bdaeb05ed5faba5bec2ce77d487ef4e87da8fc
sha256: 2b795b95395bfb99610479c35f9f1def0207573aa2d82b27685ea1f1c3ab314b
sha512: 3bb01f7a11e9e202d97d40f1ac916aed6460017f577f30fef9b74563e08a9f4585f1b238b17852f6dcbf11e68b62ff0060b01faffdbb0dd98d3ede5311664e31
ssdeep: 3072:vp2hsr8gd9++4xHNizPUUMTldUr0/7LyVaxjclYXrIrhcfzUhndggpqQYpjaKKK:Hwe+rB+sUkl1LlZclHhcfzSdggpqQYp
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2018 ktcs Corporation. All rights reserved.
Assembly Version: 19.2.12.40
InternalName: BitsMemoPad.exe
FileVersion: 19.2.12.40
CompanyName: (xc8fc)xcf00xc774xd2f0xc528xc5d0xc2a4
LegalTrademarks: Bits Solution
Comments: 
ProductName: BitsMemoPad
ProductVersion: 19.2.12.40
FileDescription: Bits xba54xbaa8xd328xb4dc
OriginalFilename: BitsMemoPad.exe

Ransom.197 (B) also known as:

MicroWorld-eScan	Gen:Variant.Ransom.197
ALYac	Gen:Variant.Ransom.197
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_70% (D)
Cybereason	malicious.1dbe68
Cyren	W32/MSIL_Troj.YS.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Ransom.197
Ad-Aware	Gen:Variant.Ransom.197
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34110.qm0@amS49Dl
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
FireEye	Generic.mg.310d1b51dbe682a2
Emsisoft	Gen:Variant.Ransom.197 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Ransom.pwiic
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.2A950D4
Microsoft	Backdoor:Win32/Bladabindi!ml
Arcabit	Trojan.Ransom.197
GData	Gen:Variant.Ransom.197
AhnLab-V3	Trojan/Win32.Tiggre.C3060849
McAfee	Artemis!310D1B51DBE6
MAX	malware (ai score=82)
Malwarebytes	MachineLearning/Anomalous.94%
Panda	Trj/GdSda.A
Yandex	Trojan.Agent!ldkTcu0s1PY
Ikarus	Trojan.MSIL.Confuser
MaxSecure	Trojan.Malware.74132313.susgen
Fortinet	MSIL/Agent.REDC!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Ransom.197 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Ransom.197 (B) information