Ransom:Win32/Criakl.B malicious file

The Ransom:Win32/Criakl.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ransom:Win32/Criakl.B virus can do?

Creates RWX memory
Unconventionial language used in binary resources: Russian
Anomalous binary characteristics

How to determine Ransom:Win32/Criakl.B?


File Info:
crc32: 1CFDD5C6
md5: 201e6e5fa9198b4ce7d3f5c9a9f086d4
name: 201E6E5FA9198B4CE7D3F5C9A9F086D4.mlw
sha1: b291fb2cfde9bd5fb2e72020d480912132c91551
sha256: 7ad970d3564929a0d620f405ecd1ade8cced92efa7e3245021383d3a29a87bc2
sha512: bfac72de9bc685eb65d282ed804ddace0f469b42b13362ba24de90706967034d421fc4766a796c90f6bb3e807c6ad2c3e5f4a28c65e18431a306abc783acb942
ssdeep: 12288:zJDgbFHjfT/xA5crtmeLoGk8/uR1nCp+WlczFc3lcYlczFcsVcquczFcsVcKucz:ztazbxVtmeLoGVujTWlczFc3lcYlczF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Ransom:Win32/Criakl.B also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Cynet	Malicious (score: 85)
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.fa9198
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Criakl.Hmhq
Sophos	Mal/Generic-S
Comodo	Malware@#3346oeq4upzj6
BitDefenderTheta	Gen:NN.ZelphiF.34608.DGW@a4TiwZdc
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.gh
Webroot	W32.Trojan.Gen
Avira	TR/Criakl.B.1
Microsoft	Ransom:Win32/Criakl.B
AegisLab	Trojan.Win32.Generic.4!c
AhnLab-V3	Malware/Win32.Generic.C2642997
McAfee	Artemis!201E6E5FA919
Panda	Trj/CI.A
Rising	Ransom.Criakl!8.1B3B (CLOUD)
Yandex	Trojan.Criakl!9u7gU4cDLaM
Ikarus	Trojan-Ransom.Criakl
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Multi.daf

How to remove Ransom:Win32/Criakl.B?

Ransom:Win32/Criakl.B removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X