Ransom

Ransom:Win32/Wyhymyz.D malicious file

Malware Removal

The Ransom:Win32/Wyhymyz.D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ransom:Win32/Wyhymyz.D virus can do?

  • Installs itself for autorun at Windows startup
  • Exhibits possible ransomware file modification behavior
  • Anomalous binary characteristics

How to determine Ransom:Win32/Wyhymyz.D?


File Info:

crc32: 59C8B6EC
md5: 0d0e90d22b19573fec684e41f2cf00c6
name: 0D0E90D22B19573FEC684E41F2CF00C6.mlw
sha1: a58ae4979420b7ff67454e3357eecb974cb54619
sha256: 7dd67c6a276678f59db17b6e92e26a5ceede9893435b38c867fdbc8b53390ac6
sha512: 0d7b8d296451fbe1d9f6eacf7266fb5490bee8487c040a7e8e147cc36ba30c5388d330164b503f5f1ff33959a08a1503f51801f2a2e311a9410341b4febc8131
ssdeep: 1536:2EAmOoTQXSc4E8YsW+Vvlppma4t0jqqHR:2v4TQXX4gstQ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Ransom:Win32/Wyhymyz.D also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00523f201 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.10700
CynetMalicious (score: 90)
CAT-QuickHealRanom.Hermes.ZZ4
ALYacTrojan.Ransom.Hermes
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_70% (D)
K7GWTrojan ( 00523f201 )
Cybereasonmalicious.22b195
ESET-NOD32a variant of Win32/Filecoder.Hermes.F
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Ransomware.Hermes-6690553-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGeneric.Ransom.Hermes.233C2FE0
NANO-AntivirusTrojan.Win32.Encoder.exuyzo
MicroWorld-eScanGeneric.Ransom.Hermes.233C2FE0
Ad-AwareGeneric.Ransom.Hermes.233C2FE0
SophosMal/Generic-R + Mal/Hermes-A
ComodoMalware@#1ti8t1laq5e0j
BitDefenderThetaGen:NN.ZexaF.34628.wqW@a0MCyao
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_HERMES.SM
McAfee-GW-EditionRansom-Hermes!0D0E90D22B19
FireEyeGeneric.mg.0d0e90d22b19573f
EmsisoftGeneric.Ransom.Hermes.233C2FE0 (B)
SentinelOneStatic AI – Suspicious PE
AviraTR/Crypt.ZPACK.Gen
MicrosoftRansom:Win32/Wyhymyz.D
GDataGeneric.Ransom.Hermes.233C2FE0
McAfeeRansom-Hermes!0D0E90D22B19
MAXmalware (ai score=99)
VBA32BScope.TrojanRansom.Cryptor
MalwarebytesMachineLearning/Anomalous.100%
PandaTrj/CI.A
TrendMicro-HouseCallRansom_HERMES.SM
RisingTrojan.Generic@ML.100 (RDML:HNdAYsM5R4tOEglT0itlkQ)
IkarusTrojan-Ransom.FileCrypter
FortinetW32/Generic.F!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.e6d

How to remove Ransom:Win32/Wyhymyz.D?

Ransom:Win32/Wyhymyz.D removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment