Ransom Trojan

Trojan.Ransom.Crysis.E (B) removal

Malware Removal

The Trojan.Ransom.Crysis.E (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Ransom.Crysis.E (B) virus can do?

  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Attempts to delete volume shadow copies
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Uses suspicious command line tools or Windows utilities

How to determine Trojan.Ransom.Crysis.E (B)?


File Info:

crc32: A8535D60
md5: 169e0fcb3869aaaa80b5479a684f0f5e
name: upload_file
sha1: 7832e27fab82e78c2dd66b873628c054990f3dbb
sha256: d424fd77dc8e421ac66621a2ea3a36533e6cdb19335b909cbaaac970993e62a4
sha512: 08c8b51983fb7f8dee9098c035484f88356ef0d23b79dad9ac5e40d56cdbeb1a2f8bf924e992b08529aa98f52f380bc6d6bdc9b1a090b7f91dde16dc7d18ee5f
ssdeep: 1536:mBwl+KXpsqN5vlwWYyhY9S4A14DDNN6f3SIujHXr8r9QjgcCYvSJj35:Qw+asqN5aW/hL/Ur6fcXre9vTWSJj35
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Ransom.Crysis.E (B) also known as:

BkavW32.RansomeDNZ.Trojan
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Ransom.Crysis.E
FireEyeGeneric.mg.169e0fcb3869aaaa
CAT-QuickHealRansom.Crysis.A3
McAfeeRansom-Dharma!169E0FCB3869
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Crusis.tqMs
SangforMalware
K7AntiVirusTrojan ( 00519f781 )
BitDefenderTrojan.Ransom.Crysis.E
K7GWTrojan ( 00519f781 )
CrowdStrikewin/malicious_confidence_100% (W)
TrendMicroRansom.Win32.CRYSIS.SM
BitDefenderThetaAI:Packer.D3B9457E1E
CyrenW32/Trojan.ILHO-9216
SymantecRansom.Crysis
ESET-NOD32a variant of Win32/Filecoder.Crysis.P
TrendMicro-HouseCallRansom.Win32.CRYSIS.SM
AvastWin32:RansomX-gen [Ransom]
ClamAVWin.Trojan.Dharma-6668198-0
KasperskyTrojan-Ransom.Win32.Crusis.to
AlibabaRansom:Win32/generic.ali2000010
NANO-AntivirusTrojan.Win32.Filecoder.emdnxn
ViRobotTrojan.Win32.Ransom.94720.F
Ad-AwareTrojan.Ransom.Crysis.E
TACHYONRansom/W32.crysis.94720
SophosTroj/Criakl-G
ComodoTrojWare.Win32.Crysis.D@6sd9xy
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.Encoder.3953
InvinceaML/PE-A + Troj/Criakl-G
McAfee-GW-EditionBehavesLike.Win32.Generic.nc
SentinelOneDFI – Suspicious PE
EmsisoftTrojan.Ransom.Crysis.E (B)
APEXMalicious
JiangminTrojan.Crypren.ic
MaxSecureTrojan-Ransom.Win32.Crusis.To
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Win32.AGeneric
MicrosoftRansom:Win32/Wadhrama!hoa
ArcabitTrojan.Ransom.Crysis.E
SUPERAntiSpywareRansom.Crysis/Variant
AhnLab-V3Trojan/Win32.Crysis.R213980
ZoneAlarmTrojan-Ransom.Win32.Crusis.to
GDataWin32.Trojan-Ransom.VirusEncoder.A
CynetMalicious (score: 100)
Acronissuspicious
ALYacTrojan.Ransom.Crysis
MAXmalware (ai score=100)
VBA32TrojanRansom.Crusis
MalwarebytesRansom.Crysis
PandaTrj/GdSda.A
RisingRansom.Crysis!1.A6AA (CLASSIC)
IkarusTrojan-Ransom.Crysis
eGambitUnsafe.AI_Score_66%
FortinetW32/Crysis.W!tr.ransom
WebrootW32.Ransom.Gen
AVGWin32:RansomX-gen [Ransom]
Cybereasonmalicious.b3869a
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Ransom.Crusis.A

How to remove Trojan.Ransom.Crysis.E (B)?

Trojan.Ransom.Crysis.E (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment