Categories: Ransom

Ransom.704 removal

The Ransom.704 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom.704 virus can do?

CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Ransom.704?


File Info:
name: 3851459993A1B813775A.mlwpath: /opt/CAPEv2/storage/binaries/59e612a03e2694c1d640b70f3edda4f295a245fa93145fb9a33acaafb9daa97acrc32: 29AC4EDDmd5: 3851459993a1b813775a7dc9baa2ff6csha1: fbe08fe557d7279cf2aa2ae6346574b3bf639283sha256: 59e612a03e2694c1d640b70f3edda4f295a245fa93145fb9a33acaafb9daa97asha512: ee8cdcc2415ffa91c15652fce48736dc53c5f3b198591a88aaf598d37458e93672692a03912f275a276ee1bc94ace60e7faa09905046e9e8a228ef2a62cf73e3ssdeep: 768:d7A7a0T15WAX0nybtjSyGRq1fhwzH/jCH4+DXCo2XPtU/+vd:d7AeQ15YQtjSy48hC/jCHx7N2ftU/Idtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T124139F29A7EECA39D8FE1BB50822525107B0ED05D713EB7E5E48F05B1EBB3018E51B51sha3_384: f9056b2e6ef6873b3110541ace3fd2f85565906c5d9f7ece53a3c83a3d2cf12ef32e705701ec741d44a1f1532cb9d15aep_bytes: ff250020400000000000000000000000timestamp: 2018-03-08 14:49:21
Version Info:
Translation: 0x0000 0x04b0FileDescription: pepe lockerFileVersion: 1.0.0.0InternalName: yami ransomware cat.exeLegalCopyright: Copyright ©  2018OriginalFilename: yami ransomware cat.exeProductName: pepe lockerProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

Ransom.704 also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.MSIL.Agent.j!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ransom.704
FireEye	Gen:Variant.Ransom.704
McAfee	Artemis!3851459993A1
Cylance	Unsafe
VIPRE	Gen:Variant.Ransom.704
Sangfor	Ransom.Win32.Agent.Vpdz
Alibaba	Trojan:Application/Generic.b425b894
Cybereason	malicious.993a1b
Symantec	Trojan Horse
ESET-NOD32	a variant of Generik.FWKGPWJ
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan-Ransom.MSIL.Agent.gen
BitDefender	Gen:Variant.Ransom.704
NANO-Antivirus	Trojan.Win32.Ransom.fggnro
Avast	Win32:Malware-gen
Tencent	Msil.Trojan.Agent.Zwhl
Ad-Aware	Gen:Variant.Ransom.704
Comodo	Malware@#3ufb2zk695t1e
Zillya	Trojan.Agent.Win32.2941225
TrendMicro	Ransom_YAMI.THGAIAH
McAfee-GW-Edition	Artemis!Trojan
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Ransom.704 (B)
GData	Gen:Variant.Ransom.704
Avira	TR/Ransom.Agent.hgyul
Antiy-AVL	Trojan[Ransom]/MSIL.Agent
Kingsoft	Win32.Troj.Undef.(kcloud)
Arcabit	Trojan.Ransom.704
Microsoft	Trojan:Win32/Zpevdo.B
Google	Detected
BitDefenderTheta	Gen:NN.ZemsilF.34754.cq0@aOd2MVj
ALYac	Trojan.Ransom.Filecoder
TrendMicro-HouseCall	Ransom_YAMI.THGAIAH
Rising	Trojan.Generic/MSIL@AI.94 (RDM.MSIL:+JtJtk+brhViAD1Uf8L0NQ)
Yandex	Trojan.Agent!3VTI8jG0wME
Ikarus	Trojan.SuspectCRC
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)