What is “Trojan.Ransom.KrakenCryptor”?

The Trojan.Ransom.KrakenCryptor is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Ransom.KrakenCryptor virus can do?

• Uses Windows utilities for basic functionality
• Uses Windows utilities to enumerate running processes
• Authenticode signature is invalid
• Deletes executed files from disk
• Uses csc.exe C# compiler to build and execute code
• Uses suspicious command line tools or Windows utilities

How to determine Trojan.Ransom.KrakenCryptor?

File Info:
name: E1AEE9EF64D71E0C9BB8.mlw
path: /opt/CAPEv2/storage/binaries/0857d5f714e88a2347affff4a440d9c76e6ddd18265e1c9a7d1c9966b0bfe61a
crc32: 6CE099D6
md5: e1aee9ef64d71e0c9bb8eee9742efdef
sha1: 1ef57a935a60c5fb7a046693652ea0f1f6db2f71
sha256: 0857d5f714e88a2347affff4a440d9c76e6ddd18265e1c9a7d1c9966b0bfe61a
sha512: dfd7399ad9c4cadbbdc2a33533e136ab49fad7bfc2b37526b0fce12e21cf42d1c8894f34fe76a18f7630a257f74a64df9eb6586d15f08bc53e8cf2342c9ccb3b
ssdeep: 3072:wMwaC5chbz3lEztKGvO7pUlCEPbAA5QX6Y:bwYbTlEztKt7pr6bv5+6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16CD3E83EDB0A2D14C7AD10B9B4456E15E8F1960F0121D12B7E7EAACF4F262EDE6060E5
sha3_384: 95d996cd689625e78878959b836d9d55fc4acf511500bc8a0beff5145a56add6c1ed7ab93dd81b08ac3339e544dbaa37
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-11-04 15:00:13

Version Info:
Translation: 0x0000 0x04b0
Comments: Bitberry
CompanyName: 
FileDescription: www.bitberry.net
FileVersion: 0.0.2.2
InternalName: bitberry.exe
LegalCopyright: Bitberry - All right reserved.
LegalTrademarks: 
OriginalFilename: bitberry.exe
ProductName: 
ProductVersion: 0.0.2.2
Assembly Version: 0.0.2.2

Trojan.Ransom.KrakenCryptor also known as:

How to remove Trojan.Ransom.KrakenCryptor?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.