Ransom • Trojan

Trojan-Ransom (A) removal

The Trojan-Ransom (A) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Ransom (A) virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Trojan-Ransom (A)?


File Info:
crc32: C64B6C02
md5: 03b007b2ef6fd0cc1049d2029df9b0ff
name: 03B007B2EF6FD0CC1049D2029DF9B0FF.mlw
sha1: 191e18c2f7705eea125f69fb52f34b5f5229fc0b
sha256: a294d2a132b9422e570140e6a6a7c06c2693b698b359c258495eafb88c9c5bd3
sha512: ea0df1a405bd03f576de05ee96d7ce472f8783e5a874e94a79b3fd611b503f8095ff3ac057f9e907d2f873f8d28f2726df293e9aa33dd22e1a6f8e2215c3e98e
ssdeep: 12288:YExQNLvC94ftVY1w605zh7t4Y/J9PDm4W9lvVev:HKLvPPYyz3lDDjWQv
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Hewlett-Packard 2018
Assembly Version: 1.0.0.0
InternalName: Desencriptar.exe
FileVersion: 1.0.0.0
CompanyName: Hewlett-Packard
LegalTrademarks: 
Comments: 
ProductName: Desencriptar
ProductVersion: 1.0.0.0
FileDescription: Desencriptar
OriginalFilename: Desencriptar.exe

Trojan-Ransom (A) also known as:

ALYac	Trojan.Ransom.Filecoder
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	Ransom:Application/FileCrypter.59ec5239
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Dropper.Tiggre-9821453-0
ViRobot	Trojan.Win32.S.Agent.596992.AG
Comodo	Malware@#1u29swnmhlr1v
VIPRE	Trojan.Win32.Generic!BT
Emsisoft	Trojan-Ransom (A)
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Occamy.C
AegisLab	Trojan.Win32.Generic.4!c
AhnLab-V3	Trojan/Win32.Ransom.R249412
McAfee	Artemis!03B007B2EF6F
Malwarebytes	MachineLearning/Anomalous.94%
Panda	Trj/GdSda.A
Rising	Trojan.Zpevdo!8.F912 (CLOUD)
Ikarus	Trojan-Ransom.FileCrypter
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat
AVG	Win32:Malware-gen

How to remove Trojan-Ransom (A)?

Trojan-Ransom (A) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X