Ransom

Ransom.Shade removal guide

Malware Removal

The Ransom.Shade is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom.Shade virus can do?

  • Reads data out of its own binary image
  • Anomalous binary characteristics

How to determine Ransom.Shade?


File Info:

crc32: F8A2541C
md5: 031458df7bfd8a945eab123f23c6ad2d
name: 031458DF7BFD8A945EAB123F23C6AD2D.mlw
sha1: 54616133e83c3e68536aa4f6243fea252dbecc51
sha256: 7c34e2112532e427ae0e484215d038978cf9f0367945cc79af12c3870a0154ad
sha512: ccbbab8a6fd4a1d05114f6888e3bcd2babbe83d2de87e86251fdbcf9a2f36d4ca68ca99e0f51e0e10bdb79557fececca54ea0d665308e985d83a2acc528287ea
ssdeep: 24576:SEg7pRIi1dbnlBYzxBOrYComiYdtOrx80wh:SIirYz2jomiY+Q
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Ransom.Shade also known as:

BkavW32.AIDetect.malware2
CynetMalicious (score: 85)
ALYacTrojan.Ransom.BTP
CylanceUnsafe
ZillyaTrojan.Ransom.Win32.757
CrowdStrikewin/malicious_confidence_80% (D)
K7GWTrojan ( 005153ec1 )
K7AntiVirusTrojan ( 005153ec1 )
SymantecTrojan.Gen.MBT
ESET-NOD32NSIS/Kryptik.E
ZonerTrojan.Win32.59890
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Ransomware.Troldesh-9832400-1
KasperskyHEUR:Trojan-Ransom.Win32.Agent.gen
BitDefenderTrojan.Ransom.BTP
NANO-AntivirusVirus.Win32.Gen.ccmw
MicroWorld-eScanTrojan.Ransom.BTP
TencentWin32.Trojan.Agent.Bno
Ad-AwareTrojan.Ransom.BTP
SophosMal/Generic-S
ComodoMalware@#9xljvryzk8il
F-SecureHeuristic.HEUR/AGEN.1116891
McAfee-GW-EditionBehavesLike.Win32.Injector.dc
FireEyeTrojan.Ransom.BTP
EmsisoftTrojan.Ransom.BTP (B)
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1116891
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.Ransom.BTP
ZoneAlarmHEUR:Trojan-Ransom.Win32.Agent.gen
GDataTrojan.Ransom.BTP
McAfeeArtemis!031458DF7BFD
MAXmalware (ai score=96)
MalwarebytesRansom.Shade
PandaTrj/CI.A
FortinetW32/Injector.XG!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Ransom.b44

How to remove Ransom.Shade?

Ransom.Shade removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment