Should I remove "Trojan-Ransom.Foreign"?

The Trojan-Ransom.Foreign is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Foreign virus can do?

Executable code extraction
Creates RWX memory
Performs some HTTP requests
The binary likely contains encrypted or compressed data.

Related domains:

z.whorecord.xyz

a.tomx.xyz

edgedl.gvt1.com

How to determine Trojan-Ransom.Foreign?


File Info:
crc32: A33E010C
md5: 9cb9c1ddc22633b5f5a415a7e604cfba
name: 9CB9C1DDC22633B5F5A415A7E604CFBA.mlw
sha1: c316ce0289fe96627b2f97ad12531236d0120a2f
sha256: 90dd3d14e8be387432b227fd3f568c44b5927581618b147842432d889629145a
sha512: 30bca480f41ff6b7b5b4090f5929e2adbc6343a0c532eb91e5e150c44a5d938ec17346a881b63d633bbb5d70e7c555e1439bdc8ac221bfb8d55eb173a145c525
ssdeep: 3072:T1GSCapYCXv/fC35rgf+Db9AICgKOKaeqUKOpVk/qfWJTfS1n37McU:T1GSDXPBf2b9KRaeqUp3WJrMu
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: iscsicli
FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7601.17514
FileDescription: iSCSI Discovery tool
OriginalFilename: iscsicli.exe
Translation: 0x0409 0x04b0

Trojan-Ransom.Foreign also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Panda.7065
FireEye	Generic.mg.9cb9c1ddc22633b5
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
BitDefenderTheta	Gen:NN.ZexaF.34590.mq0@aiNQELl
Symantec	Trojan Horse
APEX	Malicious
Rising	Malware.Heuristic!ET#92% (RDMK:cmRtazoydn/eB1r1d8LSZiNwhC0r)
TrendMicro	Mal_MiliCry-1h
McAfee-GW-Edition	BehavesLike.Win32.Emotet.cc
Antiy-AVL	Trojan[Ransom]/Win32.Foreign
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
VBA32	Trojan-Ransom.Foreign
Malwarebytes	Malware.AI.3080185980
TrendMicro-HouseCall	Mal_MiliCry-1h
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_99%

How to remove Trojan-Ransom.Foreign?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Trojan-Ransom.Foreign”?