Categories: Ransom

Ransom.916 malicious file

The Ransom.916 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom.916 virus can do?

Executable code extraction
Creates RWX memory
Uses Windows utilities for basic functionality
Sniffs keystrokes

Related domains:

collegefan.collegefan.org

How to determine Ransom.916?


File Info:
crc32: 18FD61DDmd5: 227b29acc48d064d55f2de6f922722e0name: 227B29ACC48D064D55F2DE6F922722E0.mlwsha1: 34a7d393bd442f8a5dcd21c38ab6a3effb4cb548sha256: 388b4da558f59e668cf0e955f936cb4eb44877f04627636bced5bb1ec08c63f0sha512: 901d9becf934aef8f9df2f90f69415400197fd1645a3087fc6aff4b6bc1de2dc8bde093cce9718e7a6ccc0923efb995262da38a979bd75eaea1f9240f981e450ssdeep: 1536:FzqMFdn5f2x0E6f0E/l/koLH2N8TZzcjoH3c3LhlO:Fz5FdFE20E/lcorYY3c7ytype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: Copyright xa9  2018 xc2xa91999-2015 Jonathan Bennett & AutoIt TeamAssembly Version: 1.0.0.0InternalName: WMM2CLIP.exeFileVersion: 1.0.0.0CompanyName: xc2xa91999-2015 Jonathan Bennett & AutoIt TeamLegalTrademarks: xc2xa91999-2015 Jonathan Bennett & AutoIt TeamComments: xc2xa91999-2015 Jonathan Bennett & AutoIt TeamProductName: xc2xa91999-2015 Jonathan Bennett & AutoIt TeamProductVersion: 1.0.0.0FileDescription: xc2xa91999-2015 Jonathan Bennett & AutoIt TeamOriginalFilename: WMM2CLIP.exe

Ransom.916 also known as:

Lionic	Trojan.MSIL.Blocker.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader19.37002
ALYac	Gen:Variant.Ransom.916
Cylance	Unsafe
Zillya	Trojan.Blocker.Win32.40414
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (D)
Alibaba	Trojan:MSIL/GenKryptik.f9305d97
K7GW	Trojan ( 0052f20d1 )
K7AntiVirus	Trojan ( 0052f20d1 )
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/GenKryptik.BXYX
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan-Ransom.MSIL.Blocker.gen
BitDefender	Gen:Variant.Ransom.916
NANO-Antivirus	Trojan.Win32.Ransom.fibdps
MicroWorld-eScan	Gen:Variant.Ransom.916
Tencent	Msil.Trojan.Blocker.Hpih
Ad-Aware	Gen:Variant.Ransom.916
Sophos	Mal/Generic-S
Comodo	Malware@#l48aqu6yk4lk
McAfee-GW-Edition	Packed-FGX!227B29ACC48D
FireEye	Generic.mg.227b29acc48d064d
Emsisoft	Gen:Variant.Ransom.916 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.keab
Avira	HEUR/AGEN.1126764
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.2816B2F
Microsoft	Backdoor:MSIL/Bladabindi
Arcabit	Trojan.Ransom.916
GData	Gen:Variant.Ransom.916
McAfee	Packed-FGX!227B29ACC48D
MAX	malware (ai score=99)
Malwarebytes	Trojan.Crypt.MSIL
Panda	Trj/GdSda.A
Ikarus	Trojan.MSIL.Krypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/GenKryptik.CELB!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Blocker.HgIASOUA