Categories: RansomTrojan

Trojan.Ransom.AIG (file analysis)

The Trojan.Ransom.AIG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Ransom.AIG virus can do?

Mimics the file times of a Windows system file
Installs itself for autorun at Windows startup
Exhibits possible ransomware file modification behavior
Writes a potential ransom message to disk
Network activity detected but not expressed in API logs
Creates a copy of itself
Anomalous binary characteristics

How to determine Trojan.Ransom.AIG?


File Info:
crc32: FDD734A7md5: 871564bb0c6973e4eb3f4aafa368fabdname: 871564BB0C6973E4EB3F4AAFA368FABD.mlwsha1: da616d5082f810c153ba2ae5cb75a1a44778c57csha256: 4509eb48fa6eb2117118bd33eaebfe190028e3d54976596878814031591dafe8sha512: af92e1306dd61ea7a075aa522cc50b73462f240c979091a33d15b069d6ab928af5edccb032ff650459c75bb617b3c75fee6deb361840d59c60f8c62f4eeb7c05ssdeep: 192:H/TrG62a6B10k3g4fXk1iTV3HGc7EkpAqEjvu2q9C/YpXnAITZfPtRMwu8V:HebFNw4Pk1itKkpAjjI2Ypdmwtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Trojan.Ransom.AIG also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Ransom.AIG
FireEye	Generic.mg.871564bb0c6973e4
CAT-QuickHeal	Trojan.Ransom.FO4
McAfee	Ransom-FASY!871564BB0C69
Cylance	Unsafe
VIPRE	Trojan.Win32.Ransom.fo (v)
Sangfor	Malware
K7AntiVirus	Trojan ( 005451b81 )
BitDefender	Trojan.Ransom.AIG
K7GW	Trojan ( 005451b81 )
Cybereason	malicious.b0c697
BitDefenderTheta	AI:Packer.68035A0E1F
Cyren	W32/Filecoder.Y.gen!Eldorado
Symantec	Ransom.CryptoTorLocker
ESET-NOD32	a variant of Win32/Filecoder.Q
Baidu	Win32.Trojan.Filecoder.g
APEX	Malicious
ClamAV	Win.Trojan.CryptoTorLocker2015-1
Kaspersky	Trojan-Ransom.Win32.Xorist.lk
NANO-Antivirus	Trojan.Win32.Xorist.dxuuhl
ViRobot	Trojan.Win32.A.Xorist.1268736
Ad-Aware	Trojan.Ransom.AIG
Sophos	ML/PE-A + Troj/Ransom-EY
Comodo	TrojWare.Win32.Kryptik.ER@4o1ar2
DrWeb	Trojan.Encoder.94
TrendMicro	Ransom_XORIST.SMA
McAfee-GW-Edition	Ransom-FASY!871564BB0C69
Emsisoft	Trojan.Ransom.AIG (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan/Xorist.at
eGambit	Unsafe.AI_Score_92%
Avira	TR/Ransom.Xorist.EJ
MAX	malware (ai score=86)
Antiy-AVL	Trojan[Ransom]/Win32.Xorist
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Ransom:Win32/Sorikrypt.A
Gridinsoft	Ransom.Filecoder.E.sd!yf
Arcabit	Trojan.Ransom.AIG
AhnLab-V3	Trojan/Win32.Xorist.R25524
ZoneAlarm	Trojan-Ransom.Win32.Xorist.lk
GData	Win32.Trojan-Ransom.Xorist.D
Cynet	Malicious (score: 100)
TotalDefense	Win32/Ransom.A!generic
Acronis	suspicious
VBA32	Hoax.Xorist
ALYac	Trojan.Ransom.AIG
Malwarebytes	Ransom.FileCryptor
Panda	Trj/RansomXor.A
Zoner	Trojan.Win32.73585
TrendMicro-HouseCall	Ransom_XORIST.SMA
Rising	Trojan.Ransom!1.690B (CLASSIC)
Yandex	Trojan.GenAsa!Lm0QpYhTqAM
Ikarus	Trojan-Ransom.Xorist
Fortinet	W32/Xorist.DD8C!tr.ransom
Webroot	W32.Ransom.Xorist
AVG	Win32:Filecoder-M [Trj]
Avast	Win32:Filecoder-M [Trj]
CrowdStrike	win/malicious_confidence_90% (D)
Qihoo-360	HEUR/QVM20.1.8082.Malware.Gen