What is “Ransom.Gimemo.16898”?

The Ransom.Gimemo.16898 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.Gimemo.16898 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)

How to determine Ransom.Gimemo.16898?


File Info:
crc32: 256887B6
md5: b39ffa129358865dc6d9414b7d6c7ae8
name: B39FFA129358865DC6D9414B7D6C7AE8.mlw
sha1: c141cf6eb1c1e582f030ac3e98ccd2f366a63bde
sha256: aadd43b0a2651cb6d67b81d3a4553cfff0dae2ec4867e483a86419ff3d512ce1
sha512: c2c8784f12d191a15c73e4fa88db5c1718a976bbeeb84c946c15c497c9e5d888078f080646bd6cb771431909c9963185831d6628c154d3f7eabe11ba044509e4
ssdeep: 12288:D6Cu/1x08V5KSeWRYIgX1syO+bQmX22cGhbs5OVysrDRk8L:D6FDi3IMCyO+b62cGeCPRkm
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: olingi x7248x6743x6240x6709
FileVersion: 1.0.0.0
CompanyName: olingi
Comments: x7f51x9875x64cdx4f5cx63d2x4ef6x8f85x52a9x5de5x5177
ProductName: x7f51x9875x64cdx4f5cx63d2x4ef6x8f85x52a9x5de5x5177V1.00
ProductVersion: 1.0.0.0
FileDescription: x7f51x9875x64cdx4f5cx63d2x4ef6x8f85x52a9x5de5x5177
Translation: 0x0804 0x04b0

Ransom.Gimemo.16898 also known as:

MicroWorld-eScan	Trojan.GenericKD.2855935
CAT-QuickHeal	Ransom.Gimemo.16898
ALYac	Trojan.GenericKD.2855935
CrowdStrike	malicious_confidence_100% (D)
K7GW	Backdoor ( 04c50ce71 )
K7AntiVirus	Backdoor ( 04c50ce71 )
Cyren	W32/Agent.EW.gen!Eldorado
Symantec	Heur.AdvML.B
Avast	Win32:Malware-gen
BitDefender	Trojan.GenericKD.2855935
Ad-Aware	Trojan.GenericKD.2855935
Comodo	Worm.Win32.Dropper.RA
F-Secure	Trojan:W32/DelfInject.R
VIPRE	Trojan.Win32.Generic!BT
Invincea	virus.win32.virut.br
McAfee-GW-Edition	BehavesLike.Win32.Flyagent.ch
Emsisoft	Trojan.GenericKD.2855935 (B)
F-Prot	W32/Agent.EW.gen!Eldorado
Avira	TR/Agent.823296.79
Arcabit	Trojan.Generic.D2B93FF
AegisLab	Troj.Generickd!c
GData	Trojan.GenericKD.2855935
McAfee	Artemis!B39FFA129358
AVware	Trojan.Win32.Generic!BT
Rising	Malware.Heuristic!ET (rdm+)
Ikarus	Win32.SuspectCrc

How to remove Ransom.Gimemo.16898?

Ransom.Gimemo.16898 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X