Ransom

Ransom:Win32/EregorCrypt.G!MSR information

Malware Removal

The Ransom:Win32/EregorCrypt.G!MSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom:Win32/EregorCrypt.G!MSR virus can do?

  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Ransom:Win32/EregorCrypt.G!MSR?


File Info:

crc32: 8A3EAB26
md5: 627c2219a80245a25e4fe9843ac2a021
name: upload_file
sha1: e0caae0804957c5e31c53dd320ca83a5465169c9
sha256: 967422de1acc14deb7e7ce803d86aff44e2652bfcd550e3a34c2e37abc883dee
sha512: e49ed8da6427b147c4ead9aaf26908e80821ba3cd306cf9d593791fd59f0d74e2514ee5e1db89c34aa87e1598ea8926106113a8e3f50bf14c039901c3f455ce6
ssdeep: 12288:I6fhIvhbs6tNPQ3MId3f1PiuCobjFHb4IkydI20:I6JIvECubbjF8H2
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Ransom:Win32/EregorCrypt.G!MSR also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.34161720
ALYacTrojan.Ransom.Filecoder
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Generic.4!c
SangforMalware
K7AntiVirusTrojan ( 0056a9491 )
BitDefenderTrojan.GenericKD.34161720
K7GWTrojan ( 0056a9491 )
TrendMicroRansom.Win32.EGREGOR.A
CyrenW32/Trojan.HWTA-2826
SymantecML.Attribute.HighConfidence
Paloaltogeneric.ml
ClamAVWin.Ransomware.Egregor-9774524-0
AlibabaTrojan:Win32/Kryptik.d394f8dc
NANO-AntivirusTrojan.Win32.Kryptik.hqdthv
ViRobotTrojan.Win32.Z.Kryptik.722432.W
RisingTrojan.Generic@ML.94 (RDML:zz7Ie3+hu/MeYna3/C4SMA)
Ad-AwareTrojan.GenericKD.34161720
TACHYONTrojan/W32.Agent.722432.BU
SophosMal/Generic-S
ComodoMalware@#3cphxmns3zm0z
F-SecureTrojan.TR/Crypt.Agent.mxvgc
DrWebTrojan.Encoder.32808
ZillyaTrojan.Kryptik.Win32.2302090
InvinceaMal/Generic-S
McAfee-GW-EditionRDN/Generic.hbg
MaxSecureTrojan.Malware.104248901.susgen
FireEyeTrojan.GenericKD.34161720
EmsisoftTrojan.GenericKD.34161720 (B)
AviraTR/Crypt.Agent.mxvgc
MicrosoftRansom:Win32/EregorCrypt.G!MSR
ArcabitTrojan.Generic.D2094438
GDataTrojan.GenericKD.34161720
AhnLab-V3Trojan/Win32.Cryptor.C4064147
McAfeeRDN/Generic.hbg
MAXmalware (ai score=88)
ESET-NOD32a variant of Win32/Kryptik.HEDE
TrendMicro-HouseCallRansom.Win32.EGREGOR.A
IkarusTrojan.Win32.Crypt
eGambitUnsafe.AI_Score_94%
FortinetW32/Kryptik.HEDE!tr
BitDefenderThetaGen:NN.ZedlaF.34566.SC4@aauqSq
AVGWin32:CrypterX-gen [Trj]
AvastWin32:CrypterX-gen [Trj]
Qihoo-360Generic/Trojan.418

How to remove Ransom:Win32/EregorCrypt.G!MSR?

Ransom:Win32/EregorCrypt.G!MSR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment