What is "Ransom:Win32/Vortex.A"?

The Ransom:Win32/Vortex.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom:Win32/Vortex.A virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ransom:Win32/Vortex.A?


File Info:
crc32: CA83A171
md5: a149c44f1c587208b3df6003a94cf35f
name: A149C44F1C587208B3DF6003A94CF35F.mlw
sha1: c7f78866cdc220289d8853557daff230624b80e7
sha256: 1db955e76118dee6321ccb07a970fc20ca7aa1985c107bd92e1ee98d1876b991
sha512: 763dfd1145cd23b158bc3809e300c56919ffa040ba16afffff67bce273b12dd2d5ca3f7caa89679355e46cc4be8f31f2f41fbb21988c508e7edbfaba60c5aeb1
ssdeep: 3072:i0CUymWj9mWIDgT/0NxdVULbeq60Ty6Rec7jaIl5P3cIl5P3BOs9AOAItab3:/9M8xcT/0NxDoVRPaI/PsI/PosBab
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: 
Assembly Version: 1.0.0.222
InternalName: MenadzerDzwiekuHD.exe
FileVersion: 1.0.0.222
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 1.0.0.222
FileDescription: 
OriginalFilename: MenadzerDzwiekuHD.exe

Ransom:Win32/Vortex.A also known as:

K7AntiVirus	Trojan ( 005082d71 )
Lionic	Trojan.MSIL.Agent.j!c
Cynet	Malicious (score: 100)
ALYac	Trojan.Ransom.Vortex.A
Cylance	Unsafe
Zillya	Trojan.Ransom.Win32.1810
Sangfor	Suspicious.Win32.Save.a
Alibaba	Ransom:MSIL/Vortex.9845693e
K7GW	Trojan ( 005082d71 )
Cybereason	malicious.f1c587
Symantec	Ransom.Vortex
ESET-NOD32	a variant of MSIL/Filecoder.FF
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.MSIL.Agent.gol
BitDefender	Trojan.Ransom.Vortex.A
NANO-Antivirus	Trojan.Win32.Ransom.eviwpt
MicroWorld-eScan	Trojan.Ransom.Vortex.A
Tencent	Win32.Trojan.Ransom.Ljjt
Ad-Aware	Trojan.Ransom.Vortex.A
Sophos	Mal/Generic-R + Troj/Vortex-B
Comodo	Malware@#3nqjarysqi8zy
BitDefenderTheta	Gen:NN.ZemsilF.34142.ym0@aKt4ePm
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom.MSIL.FILELOCK.SM
McAfee-GW-Edition	GenericRXBN-YV!A149C44F1C58
FireEye	Generic.mg.a149c44f1c587208
Emsisoft	Trojan.Ransom.Vortex.A (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.hnna
Avira	HEUR/AGEN.1117961
Antiy-AVL	Trojan/Generic.ASMalwS.22C92EF
Microsoft	Ransom:Win32/Vortex.A
GData	MSIL.Trojan-Ransom.Vortex.B
McAfee	GenericRXBN-YV!A149C44F1C58
MAX	malware (ai score=99)
VBA32	Trojan-Ransom.MSIL.Agent
Malwarebytes	Malware.AI.3950378252
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom.MSIL.FILELOCK.SM
Yandex	Trojan.Agent!giHuOwaj3Jk
Ikarus	Trojan-Ransom.FileCrypter
MaxSecure	Trojan.Malware.73710288.susgen
Fortinet	MSIL/Filecoder.FF!tr.ransom
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Ransom:Win32/Vortex.A?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Ransom:Win32/Vortex.A”?