Ransom

Ransom.Comrade.3 malicious file

Malware Removal

The Ransom.Comrade.3 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom.Comrade.3 virus can do?

  • Network activity detected but not expressed in API logs

How to determine Ransom.Comrade.3?


File Info:

crc32: 324C4027
md5: 34940017d2e48e54992763e00313bc7b
name: 34940017D2E48E54992763E00313BC7B.mlw
sha1: 8e29304ab71c0137b83d271e56a21b6f645bfa66
sha256: 4e1125767f9c4358e0e1e7e6058da88a685678ce827284caf6b5c7bc372d3a06
sha512: d54ae7a327586e31d1b66c55cca9d96edf63b7dc6822d5f841941bb95a917abfd4f908a88f81194ce6b2ab2cedfc75418d8f8040682557d7fa45b358c81a4638
ssdeep: 3072:n9e/YNXeDYTOLBBuldWd75J2uCk7tMluWSi40:nQAZQgO9B5d75JdrW4
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2013
Assembly Version: 1.2.0.0
InternalName: mod.exe
FileVersion: 1.2.0.0
CompanyName: modeinc
LegalTrademarks: md
Comments: model
ProductName: mod
ProductVersion: 1.2.0.0
FileDescription: mod
OriginalFilename: mod.exe
Translation: 0x0000 0x04b0

Ransom.Comrade.3 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Ransom.Comrade.3
FireEyeGeneric.mg.34940017d2e48e54
Qihoo-360Win32/Trojan.Crypmod.HwMAyw8A
McAfeeArtemis!34940017D2E4
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0050a5501 )
BitDefenderGen:Variant.Ransom.Comrade.3
K7GWTrojan ( 0050a5501 )
Cybereasonmalicious.7d2e48
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Ransomware.DotNetCryptor-6959671-0
KasperskyTrojan-Ransom.Win32.Crypmod.yjf
AlibabaRansom:Win32/Crypmod.43273e98
NANO-AntivirusTrojan.Win32.Crypmod.enihtm
AegisLabTrojan.Win32.Crypmod.j!c
Ad-AwareGen:Variant.Ransom.Comrade.3
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1121272
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_EDA2FANTOM.F117D5
McAfee-GW-EditionArtemis!Trojan
EmsisoftGen:Variant.Ransom.Comrade.3 (B)
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Ransom.Comrade.3
WebrootW32.Ransom.Gen
AviraHEUR/AGEN.1121272
ArcabitTrojan.Ransom.Comrade.3
ZoneAlarmTrojan-Ransom.Win32.Crypmod.yjf
MicrosoftRansom:Win32/Genasom
CynetMalicious (score: 100)
BitDefenderThetaGen:NN.ZemsilF.34590.hm0@aSe74Xe
ALYacTrojan.Ransom.Fantom
MAXmalware (ai score=99)
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Filecoder.EA
TrendMicro-HouseCallRansom_EDA2FANTOM.F117D5
TencentWin32.Trojan.Raas.Auto
YandexTrojan.Filecoder!rfwrfApXj3Y
IkarusTrojan-Ransom.HiddenTear
eGambitUnsafe.AI_Score_72%
FortinetW32/Crypmod.EA!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (D)

How to remove Ransom.Comrade.3?

Ransom.Comrade.3 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment