How to remove “Ransom.Cryak.38 (B)”?

The Ransom.Cryak.38 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.Cryak.38 (B) virus can do?

Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
Anomalous binary characteristics

How to determine Ransom.Cryak.38 (B)?


File Info:
crc32: 253937FE
md5: accc93f303ae1f986eae1371b7be4384
name: ACCC93F303AE1F986EAE1371B7BE4384.mlw
sha1: 84ba6bbdbc70e18d55d4e26437aab275c95724d2
sha256: e904c7d5beeb4a0a8d5c8826e75aa257d7e22a0954690fd2a272aeeb8755513f
sha512: 09b7983c41211ecfa5692e18edfdb5bdcc963a0dd02dcfe2bb2488458ce35e723bb3f04623c71bb872428f17b2dbb26cd6409ddcb57ce4e1bb79b182a17afeb4
ssdeep: 49152:OXz+tLUN6C3TBy21Nj5tXS49H1vMBoXX47Uaa:OXz+tLUN6I5th9HxMBoXI7Uaa
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: x43ex43ex43e x440x43ex441x441x442x435x445x43dx43ex43bx43ex433x438x438                                                                                  
FileDescription: x421x443x434x435x431x43dx44bx435 x43fx440x438x441x442x430x432x44b 4.5.5.3 Installation                      
FileVersion: 4.5.5.3             
Comments: 
CompanyName: x43ex43ex43e x440x43ex441x441x442x435x445x43dx43ex43bx43ex433x438x438                                          
Translation: 0x0409 0x04e4

Ransom.Cryak.38 (B) also known as:

Bkav	W32.AIDetect.malware1
DrWeb	Trojan.Encoder.567
CAT-QuickHeal	TrojanPWS.Zbot.AP4
ALYac	Trojan.Lethic.Gen.5
Cylance	Unsafe
Sangfor	Trojan.Win32.Dropper.Gen
Alibaba	Trojan:Win32/Filecoder.f4200dcb
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Filecoder.CQ
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Ransom.Cryak.38
NANO-Antivirus	Trojan.Win32.Llac.cqxjzh
MicroWorld-eScan	Gen:Variant.Ransom.Cryak.38
Tencent	Win32.Trojan.Filecoder.Lqoy
Sophos	Mal/Generic-S
Comodo	Malware@#3i4l7v7vj3jex
BitDefenderTheta	Gen:NN.ZexaF.34670.I3W@aOK77Mf
VIPRE	Trojan.Win32.Ransom.ahd (v)
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tc
FireEye	Generic.mg.accc93f303ae1f98
Emsisoft	Gen:Variant.Ransom.Cryak.38 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Cryakl.jw
Avira	TR/Crypt.XPACK.Gen9
eGambit	Generic.Dropper
Microsoft	Trojan:Win32/Bagsu!rfn
AegisLab	Hacktool.Win32.Black.3!c
GData	Trojan.Lethic.Gen.5
AhnLab-V3	Trojan/Win32.Agent.R124982
McAfee	Artemis!ACCC93F303AE
MAX	malware (ai score=99)
VBA32	SScope.Malware-Cryptor.Hlux
Panda	Trj/Chgt.L
Rising	Spyware.Usteal!8.307 (C64:YzY0OuXyM8ZZN58n)
Yandex	Trojan.Injector!adA6DmtxrsA
Ikarus	Backdoor.MSIL
MaxSecure	Trojan-Ransom.Win32.Crypmod.zfq
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Packed.Black.HwUB7N8A

How to remove Ransom.Cryak.38 (B)?

Ransom.Cryak.38 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X