Ransom Trojan

Trojan-Ransom.MSIL.Fasem.e information

Malware Removal

The Trojan-Ransom.MSIL.Fasem.e is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.MSIL.Fasem.e virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan-Ransom.MSIL.Fasem.e?


File Info:

crc32: 4322AFD2
md5: 91c744188621afd4eb54cd6fd3d8e686
name: 91C744188621AFD4EB54CD6FD3D8E686.mlw
sha1: c66392a4c7b633bf8111395427bbea1330b78b0d
sha256: f1bc32d917ef5e396c134e551fa113da74edd206843b208de2a5ccea2a48164c
sha512: 4ef2a76a12d793e6ddd6379313d1b15ba29130d621ac551f8c2391041e14f8f0014086dcc5d6229e94c3f8d8d4f5b45d35e3639ec0a9199d504834fb555619a5
ssdeep: 6144:/dMwmqKDItTYUd2CCkm/taEFl3g6RswD1f6Wp5V:/tKctT/hm/XFl3fRRUWP
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 KnowBe4 Inc. 2016
Assembly Version: 1.1.0.7
InternalName: Remover.exe
FileVersion: 1.1.0.7
CompanyName: KnowBe4 Inc.
ProductName: Launcher
ProductVersion: 1.1.0.7
FileDescription: Launcher
OriginalFilename: Remover.exe

Trojan-Ransom.MSIL.Fasem.e also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.70913
FireEyeGeneric.mg.91c744188621afd4
ALYacTrojan.GenericKDZ.70913
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.MSIL.Sram.j!c
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005159961 )
BitDefenderTrojan.GenericKDZ.70913
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.88621a
CyrenW32/S-b3365ced!Eldorado
SymantecHacktool.Cryptran!g2
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
ClamAVWin.Trojan.Generic-6268112-0
KasperskyHEUR:Trojan-Ransom.MSIL.Fasem.e
NANO-AntivirusTrojan.Win32.Ransom.esvwxe
Ad-AwareTrojan.GenericKDZ.70913
SophosMal/Generic-S
ComodoMalware@#33mepf4ibqz8f
F-SecureHeuristic.HEUR/AGEN.1127299
TrendMicroHT_ZUSY_GF1900B0.UVPM
McAfee-GW-EditionGenericRXBT-DN!91C744188621
EmsisoftTrojan.GenericKDZ.70913 (B)
IkarusTrojan-Ransom.Rantest
JiangminTrojan.Generic.ebnai
AviraHEUR/AGEN.1127299
MAXmalware (ai score=100)
Antiy-AVLTrojan/Win32.AGeneric
MicrosoftTrojan:Win32/Ditertag.A
ArcabitTrojan.Generic.D11501
SUPERAntiSpywarePUP.RanSim/Variant
ZoneAlarmHEUR:Trojan-Ransom.MSIL.Fasem.e
GDataTrojan.GenericKDZ.70913
CynetMalicious (score: 85)
AhnLab-V3Trojan/Win32.Dynamer.C2037120
McAfeeGenericRXBT-DN!91C744188621
VBA32Hoax.MSIL.Sram
MalwarebytesGeneric.Trojan.Injector.DDS
PandaTrj/GdSda.A
ESET-NOD32a variant of MSIL/Riskware.KnownBe4.A
TrendMicro-HouseCallHT_ZUSY_GF1900B0.UVPM
RisingTrojan.Generic!8.C3 (C64:YzY0OratGg0LzQ5c)
YandexTrojan.Agent!xcoLo3hSYHE
SentinelOneStatic AI – Malicious PE
FortinetMSIL/Fasem.A!tr.ransom
AVGWin32:RansomX-gen [Ransom]
CrowdStrikewin/malicious_confidence_80% (D)
Qihoo-360Win32/Application.IM.7ee

How to remove Trojan-Ransom.MSIL.Fasem.e?

Trojan-Ransom.MSIL.Fasem.e removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment