Ransom Trojan

Trojan.Ransom.CEO removal guide

Malware Removal

The Trojan.Ransom.CEO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Ransom.CEO virus can do?

  • Network activity detected but not expressed in API logs

How to determine Trojan.Ransom.CEO?


File Info:

crc32: 25919CD7
md5: 3a9fb9d0762ffd40bbea44c2ff92f889
name: 3A9FB9D0762FFD40BBEA44C2FF92F889.mlw
sha1: 3c0945674fd66b78c89baba47a05a4b91f15dc60
sha256: 14e7fbd2856eee84d06ccb44c6318f5d95a4e8d8744685c8ac09062b9f8fcec5
sha512: 4192a33dc1dd98ab0bc3fd4385a4a47ce0de3f03870f27207df293fc9b3be96ad3e9e56b675f4283a0f7596ba9b43362fddd131a1b558dbcb3c209c91f789177
ssdeep: 24576:Lu6Jx3O0c+JY5UZ+XC0kGso/WaY3O16WY:lI0c++OCvkGsUWaYsY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Trojan.Ransom.CEO also known as:

K7AntiVirusRiskware ( 0040eff71 )
CynetMalicious (score: 99)
ALYacTrojan.Ransom.Filecoder
CylanceUnsafe
SangforSuspicious.Win32.Malware.gen
CrowdStrikewin/malicious_confidence_60% (W)
AlibabaRansom:Win32/FileCryptor.6c057922
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.0762ff
CyrenW32/AutoIt.NA.gen!Eldorado
APEXMalicious
AvastWin32:Malware-gen
BitDefenderTrojan.Ransom.CEO
MicroWorld-eScanTrojan.Ransom.CEO
Ad-AwareTrojan.Ransom.CEO
SophosMal/Generic-S
F-SecureTrojan.TR/FileCryptor.dmrcj
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom.Win32.LAUGHCRYPT.A
McAfee-GW-EditionBehavesLike.Win32.TrojanAitInject.ch
FireEyeTrojan.Ransom.CEO
EmsisoftTrojan.Ransom.CEO (B)
WebrootW32.Trojan.GenKD
AviraTR/FileCryptor.dmrcj
ArcabitTrojan.Ransom.CEO
AegisLabTrojan.Win32.Filecryptor.4!c
GDataTrojan.Ransom.CEO
McAfeeArtemis!3A9FB9D0762F
MalwarebytesMachineLearning/Anomalous.95%
TrendMicro-HouseCallRansom.Win32.LAUGHCRYPT.A
IkarusTrojan-Ransom.FileCryptor
FortinetMalicious_Behavior.SB
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan.Ransom.CEO?

Trojan.Ransom.CEO removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment