Should I remove “Ransom.Gimemo.16897”?

The Ransom.Gimemo.16897 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.Gimemo.16897 virus can do?

Unconventionial language used in binary resources: Russian
Anomalous binary characteristics

How to determine Ransom.Gimemo.16897?


File Info:
crc32: 4E3EF3A3
md5: 267d85255c4f87ec27234a185d0ab155
name: 267D85255C4F87EC27234A185D0AB155.mlw
sha1: 53995e6d50a9d123bf571975a55f33812cae8c78
sha256: cf1525ac3fbaab13d1e926d43b38b167a3a9520ebc52fadfdcfe80a92a6a2c83
sha512: e16942f4b0ae26391843bcba944059cd37a55d678af19fb7ef0d82b7050e6036cc5e2db65789c5a8f5e11f7257083af883b841fca4b93bd797e78a13f4612171
ssdeep: 6144:BLy84u9nSO2GjZkD10BIY3rb1YfBdfpoZ3u/Ht52w6JSeiFPXzB7:J+u9nx2GjMY3XKfd/H/9PV7
type: PE32 executable (Unknown subsystem 0x0) Unknown processor type 0x0, for MS Windows

Version Info:
0: [No Data]

Ransom.Gimemo.16897 also known as:

DrWeb	Trojan.Winlock.3333
ClamAV	Win.Ransomware.Lockscreen-9831110-0
CAT-QuickHeal	Ransom.Gimemo.16897
ALYac	Trojan.Generic.5848174
Malwarebytes	Trojan.Winlock
Zillya	Trojan.Fullscreen.Win32.35
K7GW	Trojan ( 0039911e1 )
K7AntiVirus	Trojan ( 0039911e1 )
Baidu	Win32.Trojan.LockScreen.b
Cyren	W32/Trojan.GDVD-7096
Symantec	Trojan.Ransomlock
APEX	Malicious
Avast	Win32:LockScreen-AHV [Trj]
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Blocker.jzec
BitDefender	Trojan.Generic.5848174
ViRobot	Trojan.Win32.A.ChameleonUnlicence.383298
MicroWorld-eScan	Trojan.Generic.5848174
Tencent	Trojan-Ransom.Win32.Blocker.jzec
Ad-Aware	Trojan.Generic.5848174
Sophos	ML/PE-A + Mal/Ransom-AI
Comodo	TrojWare.Win32.Ransom.Fullscreen.fgt@4t6ar8
VIPRE	Trojan.Win32.Birele.mby (v)
TrendMicro	Ransom_WINLOCK.SM
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
FireEye	Trojan.Generic.5848174
Emsisoft	Trojan.Generic.5848174 (B)
Jiangmin	Trojan/Fullscreen.ak
Microsoft	Ransom:Win32/Weenloc
ZoneAlarm	Trojan-Ransom.Win32.Blocker.jzec
GData	Trojan.Generic.5848174
TACHYON	Ransom/W32.DP-PornoAsset.407040
AhnLab-V3	Trojan/Win32.Atraps.R214152
McAfee	Trojan-FAZX!267D85255C4F
MAX	malware (ai score=82)
TrendMicro-HouseCall	Ransom_WINLOCK.SM
Yandex	Trojan.WinBlock.Black.Gen.AA
Ikarus	Trojan-Ransom.Fullscreen
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:LockScreen-AHV [Trj]

How to remove Ransom.Gimemo.16897?

Ransom.Gimemo.16897 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X