Ransom

Should I remove “Ransom.RobinHood”?

Malware Removal

The Ransom.RobinHood is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom.RobinHood virus can do?

  • The executable is compressed using UPX

How to determine Ransom.RobinHood?


File Info:

crc32: 62B07EE9
md5: ecabc3520bc41422982f6c64a1bed234
name: upload_file
sha1: afddbe853627feb6447528b8f6097b877ef0f7fd
sha256: 3f56501f764d49723188bb119845fec4f2419a5080b74513fd0734e2a628e754
sha512: b6d36783477d0b9523df50a506e065cbfe719f66d33dd20e5e201fbde06b987351977498f952d22e1cfa3648f5293c25fdb6e4bb01d9e1cad9ee9f2728fad645
ssdeep: 24576:W2d8FTqj8wkeJ1bQevXpdOluDuMAbz7mh0JJRfrtEuseON8jpwBHOsTvDgacF/t:h80T7Qxt2K9U2/LEo02Ul1
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

0: [No Data]

Ransom.RobinHood also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
FireEyeGeneric.mg.ecabc3520bc41422
CAT-QuickHealTrojan.Wacatac
McAfeeGenericRXAA-FA!ECABC3520BC4
CylanceUnsafe
AegisLabTrojan.Win32.Malicious.4!c
SangforMalware
Cybereasonmalicious.53627f
TrendMicroTrojan.Win32.WACATAC.THKOFBO
BitDefenderThetaGen:NN.ZexaF.34590.ooZ@a4vOcGp
CyrenW32/Trojan.KCPN-4165
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Ransomware.Robbinhood-9786991-0
SophosMal/Generic-S
ComodoPacked.Win32.MUPX.Gen@24tbus
F-SecureTrojan.TR/Patched.Ren.Gen
InvinceaMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.RAHack.vh
SentinelOneStatic AI – Suspicious PE
AviraTR/Patched.Ren.Gen
Antiy-AVLTrojan/Win32.Wacatac
MicrosoftTrojan:Win32/Ymacco.AA3F
GridinsoftRansom.Win32.Wacatac.oa
CynetMalicious (score: 100)
ALYacTrojan.Ransom.RobbinHood
MalwarebytesRansom.RobinHood
TrendMicro-HouseCallTrojan.Win32.WACATAC.THKOFBO
IkarusTrojan.Patched
MaxSecureTrojan.Malware.300983.susgen
AVGFileRepMalware
Qihoo-360Generic/HEUR/QVM19.1.6ACF.Malware.Gen

How to remove Ransom.RobinHood?

Ransom.RobinHood removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment