Should I remove “Ransom.Henry.1 (B)”?

The Ransom.Henry.1 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.Henry.1 (B) virus can do?

Network activity detected but not expressed in API logs

How to determine Ransom.Henry.1 (B)?


File Info:
crc32: 90FAA793
md5: 009d06ea0ebbd21305a95b228cf3db46
name: 009D06EA0EBBD21305A95B228CF3DB46.mlw
sha1: b87b52ee8e8ca1889759fb7857507634051a3062
sha256: 98b2b20454a89011e2b6212ba6695d5b3b7aecfb043b7e409a1dcfe26ca7d29d
sha512: be1cfda5947342c5a86ecac38e65cc016117c5acc601d4a979fa38964ed31ce5f36e89c39ae7ece6fee7af88827701946279235635e370299b5501f73c08a63e
ssdeep: 1536:zttPhTdsssPVw2PSQfokHbdrWVsbVZ2PpQfokHbdrY:ztRwF9SkxiiOpkxk
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Soft Lider 2020
Assembly Version: 1.0.0.0
InternalName: SL_Reanimator.exe
FileVersion: 1.0.0.0
CompanyName: Soft Lider SRL
LegalTrademarks: 
Comments: 
ProductName: SL:Reanimator
ProductVersion: 1.0.0.0
FileDescription: SL:Reanimator
OriginalFilename: SL_Reanimator.exe

Ransom.Henry.1 (B) also known as:

Lionic	Trojan.Win32.Henry.4!c
ALYac	Gen:Variant.Ransom.Henry.1
Sangfor	Suspicious.Win32.Artemis.009D06EA0EBB
BitDefender	Gen:Variant.Ransom.Henry.1
MicroWorld-eScan	Gen:Variant.Ransom.Henry.1
Ad-Aware	Gen:Variant.Ransom.Henry.1
McAfee-GW-Edition	Artemis
FireEye	Gen:Variant.Ransom.Henry.1
Emsisoft	Gen:Variant.Ransom.Henry.1 (B)
GData	Gen:Variant.Ransom.Henry.1
McAfee	Artemis!009D06EA0EBB
MAX	malware (ai score=86)
TrendMicro-HouseCall	TROJ_GEN.R002H09HK21

How to remove Ransom.Henry.1 (B)?

Ransom.Henry.1 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X