Ransom.DopplePaymer.4 (B) removal instruction

The Ransom.DopplePaymer.4 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.DopplePaymer.4 (B) virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Ransom.DopplePaymer.4 (B)?


File Info:
name: 4C307FF329DD0EF057BF.mlw
path: /opt/CAPEv2/storage/binaries/e77a8191ff6b0c02c5c0112cdecb1de239def96d955d7d1fa834213bdcffefe2
crc32: F87059F4
md5: 4c307ff329dd0ef057bfffead1b3e6b3
sha1: 03fa0ec8017e5aad12bf12b900c58eaa006c98e3
sha256: e77a8191ff6b0c02c5c0112cdecb1de239def96d955d7d1fa834213bdcffefe2
sha512: b4615869dd54c9ac828f20fe19278eaa68ed7fce10a174902f7e762acf6b0918c3fd29630e5cf0a806a868155c088f7a52be0961525fe73fdec831485857179c
ssdeep: 768:y907izQDs0e+jx4bHfw/ExlAmySJCQy39Lsmswr2i/WMI67y5gqoZn:EszxjGb/iQlQHQC9Lsmswr2mpIQqo5
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T10B245C25FA11C066E4D281FBD6B7C7FAF62C2A70539414D7D3E4FAE523290E52A3184B
sha3_384: 8bb9972d1daaa2ff47d049dc8c3b5178cc077d9450f8119ea8225e13580150788d49034f014f65f5c14d86ada2e6caac
timestamp: 2017-07-26 02:14:16

Version Info:
0: [No Data]

Ransom.DopplePaymer.4 (B) also known as:

Lionic	Trojan.Win32.DopplePaymer.4!c
MicroWorld-eScan	Gen:Variant.Ransom.DopplePaymer.4
McAfee	RDN/Generic.dx
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Unwanted-Program ( 0059886f1 )
K7GW	Unwanted-Program ( 0059886f1 )
Cybereason	malicious.329dd0
Cyren	W32/Heuristic-CO3!Eldorado
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Ransom.DopplePaymer.4
Emsisoft	Gen:Variant.Ransom.DopplePaymer.4 (B)
VIPRE	Gen:Variant.Ransom.DopplePaymer.4
McAfee-GW-Edition	RDN/Generic.dx
Trapmine	malicious.high.ml.score
FireEye	Gen:Variant.Ransom.DopplePaymer.4
GData	Gen:Variant.Ransom.DopplePaymer.4
Xcitium	Heur.Corrupt.PE@1z141z3
Arcabit	Trojan.Ransom.DopplePaymer.4
Google	Detected
ALYac	Gen:Variant.Ransom.DopplePaymer.4
MAX	malware (ai score=85)
Malwarebytes	Malware.Heuristic.1003
TrendMicro-HouseCall	TROJ_GEN.R002H0CDA23
Rising	Trojan.Generic@AI.100 (RDML:E1xOoBu874RtQ6Uca2ibuQ)
MaxSecure	Trojan.Malware.109204192.susgen
Fortinet	W32/PossibleThreat
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Ransom.DopplePaymer.4 (B)?

Ransom.DopplePaymer.4 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X