Categories: Ransom

Ransom.XVFXGW removal tips

The Ransom.XVFXGW is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom.XVFXGW virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Uses Windows utilities for basic functionality
Attempts to delete volume shadow copies
Modifies boot configuration settings
Exhibits possible ransomware file modification behavior
Writes a potential ransom message to disk
Network activity detected but not expressed in API logs
Likely virus infection of existing system binary
Uses suspicious command line tools or Windows utilities

How to determine Ransom.XVFXGW?


File Info:
crc32: D28F28A2md5: 18df39e1f3afca1a7633c6340d614e9bname: 18DF39E1F3AFCA1A7633C6340D614E9B.mlwsha1: dc34134a43416d6af2f781b97699d5803d384464sha256: 58673f5c9344f510703ffda908c7e7830f36905015529ab629479c6bf44236e9sha512: 7c8a118114d5fbe55eff94dcffdb5788b4dda6185d521f251693aeef852cab519d54570ac8b6fb29e957dba35b2071001cc10a63c326b8710a87d23c7902b6b9ssdeep: 768:PPvqexwEkfzeL4nCmvFk0F3Pi74drNysg45Ctfm9Wko3cNa29TXqRCWZFmeM//I:nvqeDGe0CmvFk0FfVBNst/x216cu63gtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
0: [No Data]

Ransom.XVFXGW also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.31087
Cynet	Malicious (score: 100)
ALYac	Trojan.Ransom.Genasom
Cylance	Unsafe
Zillya	Trojan.Filecoder.Win32.12589
Sangfor	Ransom.Win32.Genasom.mt
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/generic.ali2000027
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.1f3afc
Symantec	Downloader
ESET-NOD32	a variant of Win32/Filecoder.OAU
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Virus.Win32.Infector
BitDefender	Gen:Variant.Graftor.717353
NANO-Antivirus	Trojan.Win32.Encoder.hcnyni
ViRobot	Trojan.Win32.S.Genasom.57344
MicroWorld-eScan	Gen:Variant.Graftor.717353
Tencent	Win32.Trojan.Filecoder.Eaxz
Ad-Aware	Gen:Variant.Graftor.717353
Sophos	Mal/Generic-S
Comodo	Malware@#2l9dbjxn8wnyg
BitDefenderTheta	Gen:NN.ZexaF.34770.dmGfayq1tmki
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom.Win32.CRYPTOPXJ.SMJK
McAfee-GW-Edition	BehavesLike.Win32.Generic.qc
FireEye	Generic.mg.18df39e1f3afca1a
Emsisoft	Gen:Variant.Graftor.717353 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Agentb.ghw
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1141575
Antiy-AVL	Trojan/Generic.ASSuf.29221
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Genasom!MSR
Arcabit	Trojan.Graftor.DAF229
AegisLab	Virus.Win32.Infector.n!c
ZoneAlarm	HEUR:Virus.Win32.Infector
GData	Win32.Trojan-Ransom.Filecoder.CF@gen
TACHYON	Ransom/W32.Genasom.114688
AhnLab-V3	Malware/Win32.Generic.C4017809
McAfee	GenericRXAA-FA!18DF39E1F3AF
MAX	malware (ai score=100)
VBA32	Trojan.Encoder
Malwarebytes	Ransom.XVFXGW
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom.Win32.CRYPTOPXJ.SMJK
Rising	Ransom.Agent!1.C307 (CLASSIC)
Yandex	Trojan.Filecoder!b+h7y9ZrmdE
Ikarus	Trojan.SuspectCRC
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Filecoder.OAU!tr.ransom
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Genasom.HwsBEpsA