Ransom Trojan

Trojan.Ransom.BOE removal

Malware Removal

The Trojan.Ransom.BOE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Ransom.BOE virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Attempts to modify desktop wallpaper
  • Exhibits behavior characteristic of Cerber ransomware
  • Attempts to execute a binary from a dead or sinkholed URL
  • Writes a potential ransom message to disk
  • Attempts to modify proxy settings
  • Attempts to access Bitcoin/ALTCoin wallets
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

How to determine Trojan.Ransom.BOE?


File Info:

crc32: B1084A63
md5: 5338552cb9aa7deeeac8f1b6f67a0e64
name: 5338552CB9AA7DEEEAC8F1B6F67A0E64.mlw
sha1: 5b496a0cee46eb591d5f738716a284882a802a11
sha256: e84f6cc7821cc3f0d4e8fa008d680d06e5e6cc20469e001431bd2d053c7c085e
sha512: 509d741dde0e23fd53ec2df9894a87972cae99c43cbcf1bd15243a051befe1c7a32ee466224ea016a38769785c12b89cf7d6495f7647bc7a07fb1bee78b5dfe9
ssdeep: 12288:n8Qb9j5tQtYWWG1JTuRGOSwegoYaU8ULI:nTXtQtYWNTuRGbRgZj8
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (c) 1999-2015 Igor Pavlov
InternalName: 7zFM
FileVersion: 1.5.1.2
CompanyName: Igor Pavlov
ProductName: 7-Zip
ProductVersion: 1.5.1.2
FileDescription: 7-Zip File Manager
OriginalFilename: 7zFM.exe
Translation: 0x0409 0x04b0

Trojan.Ransom.BOE also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0056e9231 )
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop7.24571
CynetMalicious (score: 100)
ALYacTrojan.Ransom.BOE
CylanceUnsafe
ZillyaTrojan.Zerber.Win32.1628
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 0056e9231 )
Cybereasonmalicious.cb9aa7
CyrenW32/Ransom.IO.gen!Eldorado
ESET-NOD32Win32/Filecoder.Cerber.G
APEXMalicious
AvastWin32:Rootkit-gen [Rtk]
KasperskyTrojan-Ransom.Win32.Zerber.dong
BitDefenderTrojan.Ransom.BOE
NANO-AntivirusTrojan.Win32.Zerber.enjbxg
MicroWorld-eScanTrojan.Ransom.BOE
TencentMalware.Win32.Gencirc.10bbbb24
Ad-AwareTrojan.Ransom.BOE
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34628.Du1@aWMJpPji
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_CERBER.SMJAL
McAfee-GW-EditionBehavesLike.Win32.Emotet.gc
FireEyeGeneric.mg.5338552cb9aa7dee
EmsisoftTrojan.Ransom.BOE (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Zerber.elx
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1134006
MicrosoftRansom:Win32/Cerber
ArcabitTrojan.Ransom.BOE
AegisLabTrojan.Win32.Zerber.j!c
GDataTrojan.Ransom.BOE
TACHYONRansom/W32.Cerber.488395
AhnLab-V3Trojan/Win32.Cerber.C1898959
Acronissuspicious
McAfeeGenericRXBE-QZ!5338552CB9AA
MAXmalware (ai score=80)
VBA32BScope.Trojan.Skeeyah
MalwarebytesMalware.AI.3503579042
PandaTrj/CI.A
TrendMicro-HouseCallRansom_CERBER.SMJAL
RisingRansom.Cerber!8.3058 (TFE:5:Ru6vFG4NUBT)
IkarusTrojan-Spy.Remcos
FortinetW32/Zerber.DONG!tr
AVGWin32:Rootkit-gen [Rtk]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Cerber.HwoCEpsA

How to remove Trojan.Ransom.BOE?

Trojan.Ransom.BOE removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment