Ransom

About “Ransom:Win32/Mytreex.A” infection

Malware Removal

The Ransom:Win32/Mytreex.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom:Win32/Mytreex.A virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Ransom:Win32/Mytreex.A?


File Info:

crc32: EF565679
md5: 634db728d99581f6da4f9de685dd5f45
name: 634DB728D99581F6DA4F9DE685DD5F45.mlw
sha1: 2d381ccbca95bb53efe4c73573a37581dbb9b2f4
sha256: dcbc57e9e12416ea956b2aeb0569dae5fab1afdb1ea3a92c40dfba6167c14e44
sha512: 202cac7d6df865b92e24edfd552305d87cbc31897cbf7d7a66f3c2671ff0ad8330f9c845b0e9ad99299ac90d85ad6201a507661de71de3fa500656a1c3cf952d
ssdeep: 6144:bKrsHTmImQF5trzMKH1jiqh4swCLGPC4TR+GMsLbaraf9gn0ah5EVBlt4T1bwk:KsHTmw5oKD4sVEC4T4cuW9g0LV+z
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Ransom:Win32/Mytreex.A also known as:

BkavW32.AIDetectVM.malware2
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader25.13496
MicroWorld-eScanGen:Trojan.Brresmon.Gen.1
FireEyeGeneric.mg.634db728d99581f6
Qihoo-360Win32/Trojan.43f
McAfeeEmotet-FAL!634DB728D995
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Matrix.j!c
SangforMalware
K7AntiVirusTrojan ( 0051418e1 )
BitDefenderGen:Trojan.Brresmon.Gen.1
K7GWTrojan ( 0051418e1 )
Cybereasonmalicious.8d9958
BitDefenderThetaAI:Packer.C3ADF56021
CyrenW32/S-b05f9b2e!Eldorado
SymantecRansom.GlobeImpstr!g2
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Ransom.Win32.Matrix.km
NANO-AntivirusTrojan.Win32.Agent.erixlo
ViRobotTrojan.Win32.R.Agent.519168
RisingTrojan.Ransom.GlobeImposter!1.AF70 (CLASSIC)
Ad-AwareGen:Trojan.Brresmon.Gen.1
TACHYONRansom/W32.Matrix.519168
SophosML/PE-A + Troj/Inject-CQU
ComodoMalware@#hxivwcihfumm
F-SecureHeuristic.HEUR/AGEN.1126305
TrendMicroTSPY_EMOTET.SML3
McAfee-GW-EditionBehavesLike.Win32.Generic.hh
EmsisoftGen:Trojan.Brresmon.Gen.1 (B)
IkarusTrojan.Win32.Injector
JiangminTrojan.Scarsi.aqx
AviraHEUR/AGEN.1126305
Antiy-AVLTrojan/Win32.Agent
MicrosoftRansom:Win32/Mytreex.A
ArcabitTrojan.Brresmon.Gen.1
ZoneAlarmTrojan-Ransom.Win32.Matrix.km
GDataGen:Trojan.Brresmon.Gen.1
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Matrixran.C2056960
VBA32BScope.Trojan.Downloader
ALYacTrojan.Ransom.Matrix
MAXmalware (ai score=100)
MalwarebytesMalware.AI.3695715394
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Injector.DQGJ
TrendMicro-HouseCallTSPY_EMOTET.SML3
TencentMalware.Win32.Gencirc.10bb25f5
YandexTrojan.GenAsa!Nf7bE/Z91qc
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_100%
FortinetW32/Kryptik.FUFJ!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Ransom:Win32/Mytreex.A?

Ransom:Win32/Mytreex.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment