Ransom

Ransom:Win32/Somhoveran.dam#1 removal instruction

Malware Removal

The Ransom:Win32/Somhoveran.dam#1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom:Win32/Somhoveran.dam#1 virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Ransom:Win32/Somhoveran.dam#1?


File Info:

crc32: 818C8FB6
md5: ce24eb6c4249ae84f958ebdb51ac941b
name: CE24EB6C4249AE84F958EBDB51AC941B.mlw
sha1: 52731a30414eb8bf5fd5ca9abb74ded085093c0e
sha256: bc8e49fc1c9e807b1a4e542debd39f9e16c254126725cf4281fd04a8859eea50
sha512: 94f6209e47956a22ce7056ad58fdbc7aa4c50c7a98c01994fd43fc0ebca9391f0d096a2a0ec97ee768709bdad7643b9be0a038d9cdaa5fd5507404ab77147b00
ssdeep: 3072:UBgjS2GJyRGvl3hF85k+6LLH1zN14GPEdGVM9h9kKhnsE7u146bi9hcBF:UfMG9RFsULVxbPEdGV0AIsNniUb
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Ransom:Win32/Somhoveran.dam#1 also known as:

BkavW32.AIDetect.malware1
CynetMalicious (score: 100)
ALYacTrojan.Generic.23224887
CylanceUnsafe
SangforRansom.Win32.Gandcrab_12.se
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaRansom:Win32/Somhoveran.728a6d92
Cybereasonmalicious.c4249a
SymantecSMG.Heur!gen
APEXMalicious
AvastWin32:Agent-ATUS [Trj]
ClamAVWin.Ransomware.Gimemo-6725202-0
BitDefenderTrojan.Generic.23224887
MicroWorld-eScanTrojan.Generic.23224887
TencentWin32.Trojan.Crypt.Szlc
Ad-AwareTrojan.Generic.23224887
SophosGeneric PUA FC (PUA)
ComodoMalware@#2rfl4c3yywr7u
McAfee-GW-EditionBehavesLike.Win32.RAHack.cc
FireEyeGeneric.mg.ce24eb6c4249ae84
EmsisoftTrojan.Generic.23224887 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Gimemo.tj
AviraTR/Crypt.ULPM.Gen
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASMalwFH.4CE9DEA
MicrosoftRansom:Win32/Somhoveran.dam#1
GDataTrojan.Generic.23224887
AhnLab-V3Malware/Win32.Generic.C2931833
McAfeeRDN/Generic.dvk
MAXmalware (ai score=99)
MalwarebytesMalware.AI.3029823362
PandaTrj/CI.A
IkarusTrojan-Ransom.Somhoveran
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/PossibleThreat
AVGWin32:Agent-ATUS [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Generic.HgIASQsA

How to remove Ransom:Win32/Somhoveran.dam#1?

Ransom:Win32/Somhoveran.dam#1 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment