Categories: RansomTrojan

Trojan.Ransom.CryptXXXKD.12609035 removal guide

The Trojan.Ransom.CryptXXXKD.12609035 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Ransom.CryptXXXKD.12609035 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Collects information to fingerprint the system
Anomalous binary characteristics

How to determine Trojan.Ransom.CryptXXXKD.12609035?


File Info:
crc32: 773060CFmd5: a87b7ea498a601c410ad30c97222ef35name: A87B7EA498A601C410AD30C97222EF35.mlwsha1: 7283a3db8c06cf819cb05a0134657742c4ba294fsha256: 8c17852db0f2092a5b1479594b8edc612c6529f4fd1a8b0099ae77236ebf3b3asha512: 2127249f16c3dc86aa37655ddeda979612253ad3b75a4412fbc728c2aa4e55e27cc3812b2184bf967b6bd788fc2ea0272001d3aee8b2b66dc26230e528ea6340ssdeep: 3072:y/3TE1iFgPmazm5pnwablWJFbDDovSMgyoGvExl2/ZVucKrGwpUy1w6btPe:yfTE14EmazAwA2Fesxl2hVucK63y6ytype: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2013 Nero AG and its licensorsInternalName: NeroDiscFileVersion: 15,0,25,0CompanyName: Nero AGPrivateBuild: LegalTrademarks: Comments: ProductName: NeroDiscMergeWrongDiscSpecialBuild: 15,0,25,0ProductVersion: 15,0,25,0FileDescription: NeroDiscMergeWrongDisc ApplicationOriginalFilename: NeroDiscMergeWrongDisc.exeTranslation: 0x0409 0x04e4

Trojan.Ransom.CryptXXXKD.12609035 also known as:

K7AntiVirus	Trojan ( 0051e08e1 )
Lionic	Trojan.Win32.Generic.4!c
Cynet	Malicious (score: 99)
CAT-QuickHeal	Downldr.Freepds.MUE.ZZ5
ALYac	Trojan.Ransom.CryptXXXKD.12609035
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.2596468
CrowdStrike	win/malicious_confidence_80% (D)
Alibaba	Ransom:Win32/Tovicrypt.5f24bfd2
K7GW	Trojan ( 0051e08e1 )
Cybereason	malicious.498a60
Cyren	W32/S-8ecc9d92!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.FZJS
Zoner	Probably Heur.ExeHeaderH
APEX	Malicious
Avast	Win32:Goblinek [Inf]
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.Ransom.CryptXXXKD.12609035
MicroWorld-eScan	Trojan.Ransom.CryptXXXKD.12609035
Tencent	Win32.Trojan.Generic.Lneh
Ad-Aware	Trojan.Ransom.CryptXXXKD.12609035
Sophos	Mal/Generic-R + Mal/Swizzor-D
Comodo	Malware@#2cuultqc6faav
BitDefenderTheta	Gen:NN.ZexaF.34142.yy0@a89L7PCi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Mal_Crypmic-1
McAfee-GW-Edition	BehavesLike.Win32.Generic.fm
FireEye	Generic.mg.a87b7ea498a601c4
Emsisoft	Trojan.Ransom.CryptXXXKD.12609035 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Generic.giait
Avira	HEUR/AGEN.1110705
Antiy-AVL	Trojan/Generic.ASMalwS.22B7999
Microsoft	Ransom:Win32/Tovicrypt.A
Arcabit	Trojan.Ransom.CryptXXXKD.DC0660B
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Trojan.Ransom.CryptXXXKD.12609035
Acronis	suspicious
McAfee	Artemis!A87B7EA498A6
MAX	malware (ai score=100)
VBA32	BScope.Trojan.Bagsu
Malwarebytes	Malware.AI.2451378745
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	Mal_Crypmic-1
Rising	Trojan.Generic@ML.100 (RDML:ozrt/qXagzZacRi3PK5BYg)
Yandex	Trojan.GenAsa!/Jktgqz9N7U
Ikarus	Trojan-Ransom.Tovicrypt
MaxSecure	Win.MxResIcn.Heur.Gen
Fortinet	W32/Kryptik.FNZR!tr
AVG	Win32:Goblinek [Inf]
Paloalto	generic.ml