Ransom

What is “Ransom:Win32/Ako”?

Malware Removal

The Ransom:Win32/Ako is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Ransom:Win32/Ako virus can do?

  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Ransom:Win32/Ako?



File Info:

crc32: 8F7439F3
md5: f64ecdec4c84ac7ef0ca6c2ef4d94eea
name: F64ECDEC4C84AC7EF0CA6C2EF4D94EEA.mlw
sha1: 7c88af3c8a27402da1d67cfaa1a02555f1c7945d
sha256: fc257f64a0279bb5ae221b968d3f38bbb7237a8475c165c5a8430fe6633e3fe6
sha512: 87b8a1c6098a67a6a7f61e154deba8c16a5b421e5157183b40f808c23187ec46e046d7f4ac006d375fcf66000da7da588c9105f9acba5471604255d15c1ac8f7
ssdeep: 3072:Tf1BDZ0kVB67Duw9AMcUTeQZbMcpga/ijOJB8BtgIBQeM/nhG:T9X0GYbpyh/8A
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive


Version Info:

LegalCopyright: Copyright xa9 2016 Havy Alegria                                                                       
FileVersion: 5.2.2.187           
CompanyName: Havy Alegria                                                
Comments: This installation was built with Inno Setup.
ProductName: InnoExtractor                                               
ProductVersion: 5.2.2.187                                         
FileDescription: InnoExtractor Setup                                         
Translation: 0x0000 0x04b0

Ransom:Win32/Ako also known as:

MicroWorld-eScanTrojan.GenericKD.44509398
FireEyeTrojan.GenericKD.44509398
CAT-QuickHealTrojan.Generic
ALYacTrojan.Ransom.Makop
MalwarebytesRansom.Sodinokibi
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Generic.4!c
SangforMalware
K7AntiVirusTrojan ( 005732a41 )
BitDefenderTrojan.GenericKD.44509398
K7GWTrojan ( 005732a41 )
CyrenW32/Injector.ADO.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32NSIS/Injector.AJC
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan.Win32.Generic
AlibabaTrojan:Win32/Injector.8745dfd2
ViRobotTrojan.Win32.S.Makop.120468
RisingTrojan.Injector/NSIS!1.BFBB (CLASSIC)
Ad-AwareTrojan.GenericKD.44509398
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1139415
DrWebTrojan.Siggen11.19361
ZillyaDownloader.Deyma.Win32.200
TrendMicroTROJ_GEN.R032C0GKI20
McAfee-GW-EditionBehavesLike.Win32.Browser.cc
EmsisoftTrojan.GenericKD.44509398 (B)
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1139415
MAXmalware (ai score=99)
Antiy-AVLTrojan/MSIL.Vasal
MicrosoftRansom:Win32/Ako
GridinsoftRansom.Win32.Filecoder.dd!s1
ArcabitTrojan.Generic.D2A728D6
AhnLab-V3Malware/Win32.Generic.C4226226
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataTrojan.GenericKD.44509398
CynetMalicious (score: 100)
McAfeeRDN/Generic.dx
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R032C0GKI20
TencentWin32.Trojan-downloader.Deyma.Ecag
IkarusTrojan.NSIS.Agent
FortinetW32/Generic!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Generic/HEUR/QVM42.3.4CD7.Malware.Gen

How to remove Ransom:Win32/Ako?

Ransom:Win32/Ako removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment