Ransom.Samas.4 (B) (file analysis)

The Ransom.Samas.4 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom.Samas.4 (B) virus can do?

• Creates RWX memory
• Network activity detected but not expressed in API logs
• Anomalous binary characteristics

How to determine Ransom.Samas.4 (B)?

File Info:
crc32: 14874C96
md5: c5a7a230b5d53e23bda69330ffc42424
name: C5A7A230B5D53E23BDA69330FFC42424.mlw
sha1: 053409cba547e908c8b634e48f011ba4629bad5e
sha256: 7a4ab3bf71eab332f080ca6f5df80f577e15d9383d1f2c2ca3f8db6559db6e07
sha512: a1ce573c45dda856d84f67f020cf77301b8b457b3146d9ef87918a1b55ff4c35b0553ed571439925a43912d6254178fedb4aeb4ed787bb9c04882277608df47c
ssdeep: 384:8rdeQUBvBW0ERdWZES4rdpuMZmg2CzYcHeID9+:8he6BNdEMd3zYcHeID9+
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 S.K.International
Assembly Version: 1.0.0.0
InternalName: Config.exe
FileVersion: 2.0.1.74
CompanyName: S.K.International
LegalTrademarks: S.K.International
Comments: Z78Config
ProductName: Z78Config
ProductVersion: 2.0.1.74
FileDescription: Z78Config
OriginalFilename: Config.exe

Ransom.Samas.4 (B) also known as:

How to remove Ransom.Samas.4 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.