The Ransom.Win32CiR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.
What Ransom.Win32CiR virus can do?
File Info:
name: 0C20545E6919C93F5C10.mlwpath: /opt/CAPEv2/storage/binaries/64c7656a533821bc8c16f75d2b7f93943f00dd4eaf05b09c356cdf7bc0f79a9dcrc32: 6BE2D819md5: 0c20545e6919c93f5c1082cda160b4d2sha1: 3b7ed80a79a4ea2448d8d949dbcb9cd94874bbe9sha256: 64c7656a533821bc8c16f75d2b7f93943f00dd4eaf05b09c356cdf7bc0f79a9dsha512: eb3944a7fb0f2ee66c98adb7777e1afbf5033586c5fccdc0b7647ee32a0c0701ce4f0087fa47d069471fe284dec403c5481579c586f76f86c6a4172569bb1c19ssdeep: 3072:u4s7kEShsbBBdjpYwxPYFCCCjORX4pgSewBrkRfihiybdXVVnldlgGrZOqtvpQFW:upbZuOPYFOj64pgnIrULKlgiZ9QFExMtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1BB549D407BA0D039E1B316F4B979D3A8B92EBDE19B2054CB22D53AEE96346D0DC74707sha3_384: 9cac082bcce3ab098e192bf35949fe859dcce3bd063e01318bd02c9fd3dedb41fe041f85b73009afbfe34191abcfbd5dep_bytes: 8bff558bece8668a0000e8110000005dtimestamp: 2020-11-03 02:51:44Version Info:
Translations: 0x0798 0x02be
Bkav | W32.IepraSecAL.Trojan |
Lionic | Trojan.Win32.Androm.m!c |
tehtris | Generic.Malware |
MicroWorld-eScan | Trojan.GenericKD.39570040 |
FireEye | Generic.mg.0c20545e6919c93f |
CAT-QuickHeal | Ransom.Win32CiR |
McAfee | RDN/Generic BackDoor |
Cylance | Unsafe |
VIPRE | Trojan.GenericKD.39570040 |
Sangfor | Trojan.Win32.Save.a |
K7AntiVirus | Riskware ( 00584baa1 ) |
Alibaba | Ransom:Win32/StopCrypt.9c493ed6 |
K7GW | Riskware ( 00584baa1 ) |
Cybereason | malicious.a79a4e |
VirIT | Trojan.Win32.Genus.LFK |
Cyren | W32/Kryptik.GKO.gen!Eldorado |
Symantec | ML.Attribute.HighConfidence |
Elastic | malicious (high confidence) |
ESET-NOD32 | Win32/PSW.Fareit.L |
TrendMicro-HouseCall | TrojanSpy.Win32.LOKI.PUHBAZCLTB |
Paloalto | generic.ml |
ClamAV | Win.Packed.Zard-9947437-0 |
Kaspersky | HEUR:Backdoor.Win32.Androm.gen |
BitDefender | Trojan.GenericKD.39570040 |
NANO-Antivirus | Trojan.Win32.Androm.jpscrj |
Cynet | Malicious (score: 100) |
Avast | Win32:AceCrypter-W [Cryp] |
Tencent | Backdoor.Win32.Mokes.ha |
Ad-Aware | Trojan.GenericKD.39570040 |
TACHYON | Backdoor/W32.Androm.295936.E |
Emsisoft | Trojan.Crypt (A) |
Comodo | Malware@#eemgi14x7tpj |
DrWeb | Trojan.DownLoader44.58057 |
Zillya | Trojan.Fareit.Win32.38802 |
TrendMicro | TrojanSpy.Win32.LOKI.PUHBAZCLTB |
McAfee-GW-Edition | BehavesLike.Win32.Generic.dh |
SentinelOne | Static AI – Malicious PE |
Trapmine | malicious.high.ml.score |
Sophos | Mal/Generic-S + Troj/Krypt-FV |
APEX | Malicious |
GData | Win32.Trojan.PSE.12ZYE8D |
Jiangmin | Backdoor.Tofsee.fqp |
Avira | TR/PSW.Fareit.hmwwb |
Antiy-AVL | Trojan/Generic.ASMalwS.A9D |
Arcabit | Trojan.Generic.D25BCA78 |
Microsoft | Ransom:Win32/StopCrypt.PMA!MTB |
Detected | |
AhnLab-V3 | Trojan/Win.MalPE.R488344 |
Acronis | suspicious |
VBA32 | TrojanSpy.Stealer |
ALYac | Trojan.GenericKD.39570040 |
MAX | malware (ai score=84) |
Malwarebytes | Trojan.MalPack.GS |
Rising | Trojan.Kryptik!1.DE4C (KTSE) |
Ikarus | Trojan-Ransom.StopCrypt |
MaxSecure | Trojan.Malware.300983.susgen |
Fortinet | W32/Packed.GEE!tr |
AVG | Win32:AceCrypter-W [Cryp] |
Panda | Trj/WLT.G |
CrowdStrike | win/malicious_confidence_100% (W) |
The Malware.AI.297176713 is considered dangerous by lots of security experts. When this infection is active,…
The Win32:VB-ADTK [Trj] is considered dangerous by lots of security experts. When this infection is…
The Generic.Dacic.94CCEEA9.A.D811194F is considered dangerous by lots of security experts. When this infection is active,…
The BScope.Adware.Shopper is considered dangerous by lots of security experts. When this infection is active,…
The Jalapeno.720 is considered dangerous by lots of security experts. When this infection is active,…
The Malware.AI.2226594566 is considered dangerous by lots of security experts. When this infection is active,…