Ransom

Ransom.Kiara removal guide

Malware Removal

The Ransom.Kiara is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom.Kiara virus can do?

  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests

Related domains:

z.whorecord.xyz
a.tomx.xyz
shark.ua

How to determine Ransom.Kiara?


File Info:

crc32: 206C7378
md5: 7b3ab4dec7c3a9e59cca53792adb64a9
name: 7B3AB4DEC7C3A9E59CCA53792ADB64A9.mlw
sha1: 881568d58ce89b5b43f507e72ac009f69664268a
sha256: 3f966871c1f3a0f3a7e480b7e67a714ce85bf3c0997b0ae46a55c52e707a749a
sha512: 16a01576ada5741944b558edb691140c2035ca159fdc842fa3761fb458a7a3cb22afcaa8c43ed79505d034c029927b231742167688f9646d36b7640bb2e1859f
ssdeep: 49152:WFvrRmpgJIvyU/6mUv2nJp4GBq178PTFrzQM:UvrRmpg26X2j4GBS8PTJj
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Ransom.Kiara also known as:

K7AntiVirusRiskware ( 0040eff71 )
LionicTrojan.Win32.Aura.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.2667
CynetMalicious (score: 99)
ALYacGen:Variant.Graftor.417020
CylanceUnsafe
ZillyaTrojan.Aura.Win32.244
CrowdStrikewin/malicious_confidence_80% (W)
AlibabaRansom:Win32/Pottieq.36bfc8ae
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.ec7c3a
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.NFQ
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.Aura.ang
BitDefenderGen:Variant.Graftor.417020
NANO-AntivirusTrojan.Win32.Encoder.fhdnfm
MicroWorld-eScanGen:Variant.Graftor.417020
TencentWin32.Trojan.Aura.Ahyo
Ad-AwareGen:Variant.Graftor.417020
SophosMal/Generic-S
ComodoMalware@#u0up03lt0422
BitDefenderThetaGen:NN.ZexaF.34790.1zW@aqkJ2fei
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom.Win32.POTTIEQ.SMAL
McAfee-GW-EditionBehavesLike.Win32.Dropper.th
FireEyeGeneric.mg.7b3ab4dec7c3a9e5
EmsisoftGen:Variant.Graftor.417020 (B)
JiangminTrojanDropper.FrauDrop.annq
AviraHEUR/AGEN.1121076
eGambitUnsafe.AI_Score_84%
Antiy-AVLTrojan/Generic.ASMalwS.1EB5E06
MicrosoftRansom:Win32/Pottieq.A
GDataGen:Variant.Graftor.417020
McAfeeArtemis!7B3AB4DEC7C3
MAXmalware (ai score=99)
VBA32BScope.TrojanRansom.Aura
MalwarebytesRansom.Kiara
PandaTrj/CI.A
TrendMicro-HouseCallRansom.Win32.POTTIEQ.SMAL
YandexTrojan.GenAsa!NQC51oNl304
IkarusTrojan-Ransom.FileCrypter
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Filecoder.NFQ!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Generic.HgIASSIA

How to remove Ransom.Kiara?

Ransom.Kiara removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment