About “Ransom.Wanacry.S1670343” infection

The Ransom.Wanacry.S1670343 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom.Wanacry.S1670343 virus can do?

Authenticode signature is invalid

How to determine Ransom.Wanacry.S1670343?


File Info:
name: 722C36404F3B4DBB57C9.mlw
path: /opt/CAPEv2/storage/binaries/2ed2fe0dda4aff6cc02673e576d9075cf5f20a53590ab002d0a6cce1b44f5329
crc32: F8C4606F
md5: 722c36404f3b4dbb57c90f304878d592
sha1: cf033f305b14375c9c440a20f51db8d0f82f1961
sha256: 2ed2fe0dda4aff6cc02673e576d9075cf5f20a53590ab002d0a6cce1b44f5329
sha512: f6faa39a31e079088aa3691e37e468d254f36a68cb30ca8c5101fe920d392fa68de1fb67fa6a7952ff0df6862db6b9649b68cfd4eb634078c0ac4eae0b053672
ssdeep: 98304:sDqPoBhz1aRxcSUDk36SAEdhvxWa9P593RzPfwo0:sDqPe1Cxcxk3ZAEUadzRLfw9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15006224CF67C4138D87708B2E27B461C45AEAAFCCF5DC40E62B4F1A53D03D5A69A6D0A
sha3_384: 9800567a8119154c947482f30314fcb4086d5c23d84b5877fd07bb3d5a699374074c5c366bf0b9af81dd99b7f625a144
ep_bytes: 33c0c208000000000d0a0d0a54686973
timestamp: 2008-01-01 08:55:28

Version Info:
0: [No Data]

Ransom.Wanacry.S1670343 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.48269087
FireEye	Generic.mg.722c36404f3b4dbb
CAT-QuickHeal	Ransom.Wanacry.S1670343
ALYac	Trojan.GenericKD.48269087
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Ransom.Win32.Wannacrypt_0.se2
CrowdStrike	win/malicious_confidence_100% (D)
Baidu	Win32.Worm.Rbot.a
VirIT	Trojan.Win32.WannaCry.B
Cyren	W32/SuspPack.AA.gen!Eldorado
Symantec	Ransom.Wannacry
APEX	Malicious
ClamAV	Win.Ransomware.Wanna-9769986-0
BitDefender	Trojan.GenericKD.48269087
Avast	Sf:WNCryLdr-A [Trj]
Tencent	Win32.Trojan.Ransomlocker.Aeee
Ad-Aware	Trojan.GenericKD.48269087
Sophos	Generic ML PUA (PUA)
DrWeb	Trojan.Encoder.11432
Zillya	Trojan.RansomKD.Win32.131
McAfee-GW-Edition	BehavesLike.Win32.Generic.wc
Emsisoft	Trojan.GenericKD.48269087 (B)
SentinelOne	Static AI – Malicious PE
GData	Trojan.GenericKD.48269087
Jiangmin	TrojanSpy.OnLineGames.hia
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	Trojan/Generic.ASCommon.E0
Microsoft	Trojan:Script/Phonzy.A!ml
Cynet	Malicious (score: 100)
McAfee	Trojan-FOIM!722C36404F3B
MAX	malware (ai score=83)
VBA32	Hoax.Wanna
Malwarebytes	Ransom.WannaCrypt
Rising	Trojan.Kryptik!1.AA23 (RDMK:cmRtazomjxDwyQiT8LvQahRSRaN3)
Ikarus	Trojan-Ransom.WannaCrypt
eGambit	Trojan.Generic
Fortinet	W32/Agent.D13E!tr
AVG	Sf:WNCryLdr-A [Trj]
Cybereason	malicious.04f3b4
MaxSecure	Trojan.Malware.121218.susgen

How to remove Ransom.Wanacry.S1670343?

Ransom.Wanacry.S1670343 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X