The Ransom:MSIL/Vigorf.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.
What Ransom:MSIL/Vigorf.A virus can do?
File Info:
name: 2B77BBF25D245E1C577B.mlwpath: /opt/CAPEv2/storage/binaries/c46fb584d736c90dc224c8830a03ec5fc46100b5e124ecb6a08336e785c73c7fcrc32: 20A7F00Cmd5: 2b77bbf25d245e1c577be9113e9c6d1fsha1: de9509181855db7c449b8062c56aa98837c4f5dcsha256: c46fb584d736c90dc224c8830a03ec5fc46100b5e124ecb6a08336e785c73c7fsha512: 5d4ecaff00d685a000374a0d288cc1021776f558009c7273d0d0c062d2a251a7c8f5bf0c303d7acfea2d5fa722f3d922ba116fab93e5fc7aa1033d3ec61f2ca3ssdeep: 384:9j1Y1ZSVxL9+nokwKwAiAn9kBKpojRKFZNexkkkkkkkXyEFMri79qsmcM9t+ja0g:9RSZcbBKpMQFZ7ymL79Vmc0ua0WzOOtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T159C239043AF84729D5BFABBA69B257405FB2F586AC74CB1E1D80014E2351784C9A3FA3sha3_384: a83a50c4ae7f1cb6b021f7811dfd03617b8d56667e539b258c26ad984a9ecf9ac52f3be41fd26c5421323c06debf99caep_bytes: ff250020400000000000000000000000timestamp: 2022-07-16 10:25:13Version Info:
Translation: 0x0000 0x04b0FileDescription: NominatusCryptFileVersion: 1.0.8232.4356InternalName: NominatusCrypt.exeLegalCopyright: Copyright 2022OriginalFilename: NominatusCrypt.exeProductName: NominatusCryptProductVersion: 1.0.8232.4356Assembly Version: 1.0.8232.4356
Bkav | W32.AIDetectNet.01 |
Lionic | Trojan.MSIL.DelShad.4!c |
Elastic | malicious (high confidence) |
Cynet | Malicious (score: 100) |
McAfee | RDN/Ransom |
Cylance | Unsafe |
Zillya | Trojan.Filecoder.Win32.25161 |
Sangfor | Ransom.Msil.Delshad.V37y |
K7AntiVirus | Trojan ( 00595c7d1 ) |
Alibaba | Trojan:MSIL/DelShad.222d38ee |
K7GW | Trojan ( 00595c7d1 ) |
Cybereason | malicious.25d245 |
Cyren | W32/ABRisk.UMUU-6934 |
Symantec | ML.Attribute.HighConfidence |
ESET-NOD32 | a variant of MSIL/Filecoder.ASQ |
APEX | Malicious |
Paloalto | generic.ml |
Kaspersky | HEUR:Trojan.MSIL.DelShad.gen |
BitDefender | Gen:Heur.Ransom.HiddenTears.1 |
NANO-Antivirus | Trojan.Win32.DelShad.jqpcpo |
MicroWorld-eScan | Gen:Heur.Ransom.HiddenTears.1 |
Avast | Win32:PWSX-gen [Trj] |
Rising | Ransom.Agent!8.6B7 (CLOUD) |
Ad-Aware | Gen:Heur.Ransom.HiddenTears.1 |
Emsisoft | Gen:Heur.Ransom.HiddenTears.1 (B) |
VIPRE | Gen:Heur.Ransom.HiddenTears.1 |
TrendMicro | TROJ_GEN.R002C0WGI22 |
McAfee-GW-Edition | RDN/Ransom |
FireEye | Gen:Heur.Ransom.HiddenTears.1 |
Ikarus | Trojan-Ransom.FileCrypter |
GData | Gen:Heur.Ransom.HiddenTears.1 |
Avira | TR/Redcap.ajtcx |
Antiy-AVL | Trojan/Generic.ASMalwS.53F4 |
Arcabit | Trojan.Ransom.HiddenTears.1 |
Microsoft | Ransom:MSIL/Vigorf.A |
Detected | |
AhnLab-V3 | Trojan/Win.Generic.C5210651 |
MAX | malware (ai score=82) |
Malwarebytes | Malware.AI.3351564927 |
TrendMicro-HouseCall | TROJ_GEN.R002C0WGI22 |
Tencent | Msil.Trojan.Delshad.Yylw |
SentinelOne | Static AI – Malicious PE |
MaxSecure | Trojan.Malware.121218.susgen |
Fortinet | W32/Filecoder.ASQ!tr.ransom |
BitDefenderTheta | Gen:NN.ZemsilF.34682.bm0@aiNrTOj |
AVG | Win32:PWSX-gen [Trj] |
Panda | Trj/Chgt.AB |
CrowdStrike | win/malicious_confidence_100% (W) |
The Trojan.Heur3.LVP.smLfa4apuSiI is considered dangerous by lots of security experts. When this infection is active,…
The Malware.AI.46185515 is considered dangerous by lots of security experts. When this infection is active,…
The Trojan-Dropper.Win32.Agent.tgjvit is considered dangerous by lots of security experts. When this infection is active,…
The Risktool.Flystudio.16024 is considered dangerous by lots of security experts. When this infection is active,…
The Trojan.Generic.34363382 is considered dangerous by lots of security experts. When this infection is active,…
The AIT:Trojan.Nymeria.4438 is considered dangerous by lots of security experts. When this infection is active,…