Should I remove “Ransom.HiddenTearDecrypter”?

The Ransom.HiddenTearDecrypter is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.HiddenTearDecrypter virus can do?

How to determine Ransom.HiddenTearDecrypter?


File Info:
crc32: 58682CCF
md5: 7326176f721001e073ac78fa15b4b8de
name: 7326176F721001E073AC78FA15B4B8DE.mlw
sha1: 895cd6eab4fd29fb3085897a5edef8ea46cbcee9
sha256: 9594f2e7554f217329d7b935f0429293cfc9ad3ad7441f42d8ae87eb384e29f2
sha512: f6bd7df37ab659adf7b830e5ac6f3415762d9bcdd05421025c995b9f781bcb0768f99cb269b2cdf44f38ca7cf846fd524f12ddfc9f64c6140f1a54ee25e1c271
ssdeep: 3072:2TiHbVjfnkI+SQUTHvLVaRaOlukadQtX7dB+oJt:M+jcI457dayJ7dBBJ
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2015
Assembly Version: 1.0.0.0
InternalName: hidden-tear-decrypter.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: hidden-tear-decrypter
ProductVersion: 1.0.0.0
FileDescription: hidden-tear-decrypter
OriginalFilename: hidden-tear-decrypter.exe

Ransom.HiddenTearDecrypter also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Cynet	Malicious (score: 85)
ALYac	Gen:Variant.MSILPerseus.114896
Cylance	Unsafe
Sangfor	Trojan.Win32.Malware.gen
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Ransom:Application/Fignotok.3df4d9a8
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.f72100
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Dropper.Tiggre-9821453-0
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.MSILPerseus.114896
NANO-Antivirus	Trojan.Win32.Agent.epzoxb
MicroWorld-eScan	Gen:Variant.MSILPerseus.114896
Tencent	Msil.Trojan.Msilperseus.Aenu
Ad-Aware	Gen:Variant.MSILPerseus.114896
Sophos	Troj/Fignotok-D
Comodo	Malware@#1lb8p2zaitxzz
BitDefenderTheta	Gen:NN.ZemsilF.34628.Dm0@ae1YBgh
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_HiddenTearRABLOCK.B
McAfee-GW-Edition	Ransomware-FTD!7326176F7210
FireEye	Gen:Variant.MSILPerseus.114896
Emsisoft	Gen:Variant.MSILPerseus.114896 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1129970
Microsoft	Trojan:Win32/Skeeyah.A!rfn
Arcabit	Trojan.MSILPerseus.D1C0D0
AegisLab	Trojan.Win32.Generic.4!c
GData	Gen:Variant.MSILPerseus.114896
McAfee	Ransomware-FTD!7326176F7210
MAX	malware (ai score=86)
Malwarebytes	Ransom.HiddenTearDecrypter
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_HiddenTearRABLOCK.B
Rising	Malware.Undefined!8.C (CLOUD)
Yandex	Trojan.Agent!aPM82M5X3PU
Ikarus	Trojan-Ransom.FileCrypter
Fortinet	MSIL/Generic.AP.1D1BCC!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Generic/Trojan.Generic.HwMAEpsA

How to remove Ransom.HiddenTearDecrypter?

Ransom.HiddenTearDecrypter removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X