Ransom Trojan

How to remove “Trojan.Ransom.CryakKD.6083273”?

Malware Removal

The Trojan.Ransom.CryakKD.6083273 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Ransom.CryakKD.6083273 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Exhibits behavior characteristic of iSpy Keylogger
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Ransom.CryakKD.6083273?


File Info:

crc32: 3F90CCC7
md5: bb928de98e083b761ca09dd43b4fd11b
name: BB928DE98E083B761CA09DD43B4FD11B.mlw
sha1: 8c6186aff6a78474d07b13515dea4c8b7213de1f
sha256: 3e2f196883eef8aed58fb055418c703559dc9b2b1021aef5514f46db60352cbc
sha512: 6bb74f670268fb7df4826833362a39d478096f1d5bd57c5d158757f417e874918e12a68c59789aa964f56c69a99f65727396db4f2f631035b0b540164dc5ef3c
ssdeep: 1536:qX6oXLiYPyJBDkkdxEKxOU5Aj6AJSi7tbiz96XlcTYzkR44FQKmBs4TnzplXsslV:o6oeVJB7xxxOUKfZbijgjNOCTwCpphj
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: suffering
Assembly Version: 13.1.12.12
InternalName: friendly2.exe
FileVersion: 14.12.17.77
CompanyName: built
LegalTrademarks: miles
Comments: Among sex are leave law
ProductName: Merits
ProductVersion: 14.12.17.77
FileDescription: admitted speaking
OriginalFilename: friendly2.exe

Trojan.Ransom.CryakKD.6083273 also known as:

K7AntiVirusTrojan ( 700000121 )
LionicTrojan.MSIL.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.14685
CynetMalicious (score: 99)
CAT-QuickHealTrojan.MsilFC.S17875511
ALYacTrojan.Ransom.SamSam
CylanceUnsafe
ZillyaTrojan.Filecoder.Win32.6661
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 700000121 )
Cybereasonmalicious.98e083
SymantecBackdoor.Ratenjay
ESET-NOD32a variant of MSIL/Filecoder.Samas.D
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Trojan.Agent-6533731-0
KasperskyHEUR:Trojan-Ransom.MSIL.Generic
BitDefenderTrojan.Ransom.CryakKD.6083273
NANO-AntivirusTrojan.Win32.Ransom.euzudu
MicroWorld-eScanTrojan.Ransom.CryakKD.6083273
TencentMalware.Win32.Gencirc.11495f3e
Ad-AwareTrojan.Ransom.CryakKD.6083273
SophosMal/Generic-R + Troj/Samas-D
BitDefenderThetaGen:NN.ZemsilF.34796.lm1@aOrPkxl
VIPRETrojan.Win32.Generic!BT
TrendMicroMal_Samas-1
McAfee-GW-EditionTrojan-FNEY!BB928DE98E08
FireEyeGeneric.mg.bb928de98e083b76
EmsisoftTrojan.Ransom.CryakKD.6083273 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.MSIL.gzyn
AviraTR/Dropper.Gen2
Antiy-AVLTrojan/Generic.ASMalwS.223E6B6
MicrosoftRansom:MSIL/SamSam.D
GDataTrojan.Ransom.CryakKD.6083273
McAfeeTrojan-FNEY!BB928DE98E08
MAXmalware (ai score=99)
VBA32TScope.Trojan.MSIL
MalwarebytesMalware.AI.2056418218
PandaTrj/GdSda.A
TrendMicro-HouseCallMal_Samas-1
YandexTrojan.Filecoder!OK4Xht3dUrA
IkarusTrojan.MSIL.Filecoder
FortinetMSIL/Generic.AP.11FED6!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Generic.HwMAEpsA

How to remove Trojan.Ransom.CryakKD.6083273?

Trojan.Ransom.CryakKD.6083273 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment