Ransom Trojan

Should I remove “Trojan.Ransom.CryptoWire.B”?

Malware Removal

The Trojan.Ransom.CryptoWire.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Ransom.CryptoWire.B virus can do?

  • At least one process apparently crashed during execution
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Uses Windows utilities for basic functionality
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself

How to determine Trojan.Ransom.CryptoWire.B?


File Info:

crc32: 82B41873
md5: 224a8beed1ff71b5242b1904f2d7f738
name: 224A8BEED1FF71B5242B1904F2D7F738.mlw
sha1: c24f65ab3799da23a7649059b8cc1b66856d1a2b
sha256: 642c4a33730a083187291d949c358b92229fed4c85bf46d6068e5b3cbf932efb
sha512: 0e5ec49549849288d3f5caeda495675eaada5bf042567f9cf43aef901d4f201391e2704fa3de518c091f15f451e11d17c4be2a338ff67051635e3bee5ee5a12e
ssdeep: 24576:EAHnh+eWsN3skA4RV1Hom2KXMmHaSVeV5:Th+ZkldoPK8YaSQ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Trojan.Ransom.CryptoWire.B also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005365641 )
DrWebTrojan.Encoder.24576
CynetMalicious (score: 99)
CAT-QuickHealTrojan.AutoIt.Tiggre.ZZ
ALYacTrojan.Ransom.CryptoWire.B
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
AlibabaRansom:Win32/Filecoder.a528139c
K7GWTrojan ( 005365641 )
Cybereasonmalicious.ed1ff7
SymantecRansom.Cryptolocker
ESET-NOD32Win32/Filecoder.NRD
APEXMalicious
AvastFileRepMalware
KasperskyTrojan-Ransom.Script.Agent.f
BitDefenderTrojan.Ransom.CryptoWire.B
NANO-AntivirusTrojan.Win32.Encoder.fetixp
MicroWorld-eScanTrojan.Ransom.CryptoWire.B
TencentScript.Trojan.Agent.Hoes
Ad-AwareTrojan.Ransom.CryptoWire.B
SophosMal/Generic-R + Troj/Autoit-CAO
ComodoMalware@#26cqmtmgjumw2
BitDefenderThetaAI:Packer.C658345116
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.TrojanAitInject.ch
FireEyeTrojan.Ransom.CryptoWire.B
EmsisoftTrojan.Ransom.CryptoWire.B (B)
AviraHEUR/AGEN.1100014
eGambitUnsafe.AI_Score_94%
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.Ransom.CryptoWire.B
GDataTrojan.Ransom.CryptoWire.B (2x)
AhnLab-V3Malware/Win32.Generic.C2628236
McAfeeArtemis!224A8BEED1FF
MAXmalware (ai score=98)
VBA32TrojanRansom.Script
MalwarebytesMalware.AI.3087939905
PandaTrj/CI.A
IkarusTrojan.Ransom.CryptoWire
FortinetAutoIt/Ouroboros.A!tr.ransom
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Trojan.Ransom.CryptoWire.B?

Trojan.Ransom.CryptoWire.B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment