Ransom

Ransom.Dharma.98 removal tips

Malware Removal

The Ransom.Dharma.98 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom.Dharma.98 virus can do?

  • Executable code extraction
  • Creates RWX memory

How to determine Ransom.Dharma.98?


File Info:

crc32: 3DCC353E
md5: 7eda4d79cbfd33facc2cfe5a865cb002
name: 7EDA4D79CBFD33FACC2CFE5A865CB002.mlw
sha1: a4abca74ac8c98910f5bc7499c38e21617eb283f
sha256: 4719a64be3539c45a2e4fa36aadd93b6247e0fe8ed06aaef51e7918bddb78748
sha512: 29d16745645713a93f18be4fdfb86a6cbe383f6d104c9ee31eb547339971e57b5e30dbb67d13dbb1ec6d128e2b15ac0d795b4e2f6168e69ca6d1f885f45b0a31
ssdeep: 6144:48ZLsvNYPtbImHz/krbhVXDOUJRFI74ged5XfSs:4mCNYPtbXTMr19qeRGdOfSs
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: All rights reserved.
InternalName: Interactive
FileVersion: 4.4.45.247
CompanyName: Oxford Nanopore Technologies
FileDescription: Subjective Full Tim Cexistent Bottleneck
LegalTrademarks: All rights reserved.
Comments: Subjective Full Tim Cexistent Bottleneck
ProductName: Interactive
Languages: English
ProductVersion: 4.4.45.247
PrivateBuild: 4.4.45.247
OriginalFilename: Interactive.exe
Translation: 0x0409 0x04b0

Ransom.Dharma.98 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusRiskware ( 0040eff71 )
Elasticmalicious (high confidence)
DrWebTrojan.DownLoad.64914
CynetMalicious (score: 100)
ALYacGen:Variant.Ransom.Dharma.98
CylanceUnsafe
ZillyaTrojan.Cutwail.Win32.1449
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
AlibabaTrojan:Win32/Cutwail.e9df28b2
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.9cbfd3
ESET-NOD32a variant of Win32/Kryptik.GTMF
APEXMalicious
AvastWin32:Trojan-gen
KasperskyTrojan.Win32.Cutwail.xir
BitDefenderGen:Variant.Ransom.Dharma.98
NANO-AntivirusTrojan.Win32.Cutwail.fqswuw
MicroWorld-eScanGen:Variant.Ransom.Dharma.98
Ad-AwareGen:Variant.Ransom.Dharma.98
ComodoMalware@#3mkrm1dswx707
BitDefenderThetaGen:NN.ZexaF.34628.tu0@ai9iyFei
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionGenericRXHV-TW!7EDA4D79CBFD
FireEyeGeneric.mg.7eda4d79cbfd33fa
EmsisoftGen:Variant.Ransom.Dharma.98 (B)
JiangminTrojan.Cutwail.id
WebrootW32.Rogue.Gen
ZoneAlarmTrojan.Win32.Cutwail.xir
GDataGen:Variant.Ransom.Dharma.98
AhnLab-V3Malware/Win32.Generic.C3300726
McAfeeGenericRXHV-TW!7EDA4D79CBFD
VBA32BScope.Trojan.Cutwail
MalwarebytesSpyware.PasswordStealer
PandaTrj/CI.A
TencentWin32.Trojan.Cutwail.Amwo
YandexTrojan.Cutwail!+E91zD9BOe8
IkarusTrojan.SuspectCRC
MaxSecureTrojan.Malware.1385160.susgen
FortinetW32/Kryptik.GTMF!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
Qihoo-360Win32/Botnet.Cutwail.HwoCgn0A

How to remove Ransom.Dharma.98?

Ransom.Dharma.98 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment