Ransom

Ransom.Cryak.55 (B) information

Malware Removal

The Ransom.Cryak.55 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom.Cryak.55 (B) virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Steals private information from local Internet browsers
  • Exhibits behavior characteristic of Pony malware
  • Collects information about installed applications
  • Harvests credentials from local FTP client softwares
  • Anomalous binary characteristics

Related domains:

scansoftemailrelated.pro

How to determine Ransom.Cryak.55 (B)?


File Info:

crc32: 5516A09A
md5: 67ec93adbe39328b80592424511ffac7
name: 67EC93ADBE39328B80592424511FFAC7.mlw
sha1: 3f2f6cb97dde72f2e34d5b8c8d10b761f24ec100
sha256: 1212035243c76da269f60cacfc23af072580036ba82e5634adf7da3868e01c03
sha512: 7f32dbeea0f9d093d2efd577b384f04355d185d33ab8e62bcb5d6ff6b4997026504084f5445744bee3f20e32daafb962641fe5185bcb9d11a6ab5bf6f16324b0
ssdeep: 1536:GP+q7IQFLmEF4e/pxXMbt6WRDKBFXkKOIiLpdVxt9HmrpqXBeUcQzKJuFsec7r5:D4SCpx8pqXkKsfTtdmVWwXQzWXZA71x
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Ransom.Cryak.55 (B) also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0055e3991 )
ALYacGen:Variant.Ransom.Cryak.55
MalwarebytesMachineLearning/Anomalous.100%
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderGen:Variant.Ransom.Cryak.55
K7GWTrojan ( 0055e3991 )
Cybereasonmalicious.dbe393
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
NANO-AntivirusTrojan.Win32.Yakes.ybkcc
ViRobotTrojan.Win32.A.Yakes.115712.N
MicroWorld-eScanGen:Variant.Ransom.Cryak.55
Ad-AwareGen:Variant.Ransom.Cryak.55
SophosMal/Generic-R + Mal/EncPk-AGD
ComodoMalware@#hy5900kumuu4
BitDefenderThetaAI:Packer.344B88F921
VIPRETrojan.Win32.Generic!BT
FireEyeGeneric.mg.67ec93adbe39328b
EmsisoftGen:Variant.Ransom.Cryak.55 (B)
JiangminTrojan/Yakes.het
WebrootW32.Rogue.Gen
AviraTR/Yakes.ayko
Antiy-AVLTrojan/Generic.ASMalwS.641A2
GDataGen:Variant.Ransom.Cryak.55
Acronissuspicious
VBA32Trojan.Yakes
MAXmalware (ai score=82)
TencentWin32.Trojan.Yakes.bnjg
YandexTrojan.Yakes!f0NPjWpcGX4
IkarusTrojan.Win32.Menti
FortinetW32/Zbot.AAO!tr
PandaTrj/OCJ.A
Qihoo-360Win32/Botnet.Yakes.HwUBEpsA

How to remove Ransom.Cryak.55 (B)?

Ransom.Cryak.55 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment