Ransom Trojan

Trojan-Ransom.MSIL.Makop removal guide

Malware Removal

The Trojan-Ransom.MSIL.Makop is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.MSIL.Makop virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid

How to determine Trojan-Ransom.MSIL.Makop?


File Info:

name: 121C90A0BB017E21D205.mlw
path: /opt/CAPEv2/storage/binaries/faf034965587491de473cb2b481b7eadcfdcb1eefed69a23313389f20845b152
crc32: 892C68AD
md5: 121c90a0bb017e21d205d0261386631b
sha1: ba93c939db25ab3d5f159beb5c7a1317642c6ead
sha256: faf034965587491de473cb2b481b7eadcfdcb1eefed69a23313389f20845b152
sha512: 2b4446450ae3e7034bf7d3738b15b43beec728df2f7a485b5b2d16d16323f62903b93504c5c1ce2df542b1fb5c113daa42579452688919649c289a19ac1e4208
ssdeep: 768:C28joKUrB+9q/WtJTLkdYq/m+vvaqVdwTxycmfykboEFC7cpjfI2woms6E1v0Z48:Ci5q
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17CD4E5193E7756B8E1E0E1F68875868C312CDFBE925804C8D227D4AB5B4BB8E64D3D70
sha3_384: 0c970db52c6975a68bc4a9ef82ab79f528dffac36bd91d3bd651f1fd4d56e97240eacc382630689cd83faeb231b37b16
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-02-08 07:44:38

Version Info:

Translation: 0x0000 0x04b0
Comments: TextTransform.exe
CompanyName: Microsoft Corporation
FileDescription: TextTransform.exe
FileVersion: 16.0.30028.119
InternalName: TextTransform.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: TextTransform.exe
ProductName: Microsoft® Visual Studio®
ProductVersion: 16.0.30028.119
Assembly Version: 16.0.0.0

Trojan-Ransom.MSIL.Makop also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Ransomware.GenericKDS.36330299
FireEyeTrojan.Ransomware.GenericKDS.36330299
McAfeePWS-FCWL!121C90A0BB01
CylanceUnsafe
ZillyaTrojan.Kryptik.Win32.2923319
K7AntiVirusTrojan ( 00577a991 )
AlibabaRansom:MSIL/Makop.402e4bac
K7GWTrojan ( 00577a991 )
Cybereasonmalicious.0bb017
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of MSIL/Kryptik.ZPI
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-Ransom.MSIL.Makop.gen
BitDefenderTrojan.Ransomware.GenericKDS.36330299
NANO-AntivirusTrojan.Win32.Agensla.imfoqg
AvastWin32:PWSX-gen [Trj]
TencentMsil.Trojan.Makop.Ducq
Ad-AwareTrojan.Ransomware.GenericKDS.36330299
SophosMal/Generic-S
DrWebTrojan.PackedNET.536
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_Makop.R002C0PL921
EmsisoftTrojan.Ransomware.GenericKDS.36330299 (B)
IkarusTrojan.MSIL.Crypt
GDataTrojan.Ransomware.GenericKDS.36330299
JiangminTrojan.MSIL.abysf
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1234790
Antiy-AVLTrojan/Generic.ASMalwS.317D749
MicrosoftRansom:Win32/Ako
CynetMalicious (score: 100)
AhnLab-V3Malware/Gen.RL_Reputation.C4330173
BitDefenderThetaGen:NN.ZemsilCO.34212.Nm0@a8o1GVh
ALYacTrojan.Ransom.Makop
MAXmalware (ai score=100)
VBA32TScope.Trojan.MSIL
MalwarebytesTrojan.Crypt.MSIL.Generic
TrendMicro-HouseCallRansom_Makop.R002C0PL921
RisingMalware.Obfus/MSIL@AI.100 (RDM.MSIL:+Bp+jAesw3Uxw0y7WSfwjg)
YandexTrojan.Kryptik!bDOlLzJNIW8
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/GenKryptik.FBHJ!tr
AVGWin32:PWSX-gen [Trj]
PandaTrj/RnkBend.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan-Ransom.MSIL.Makop?

Trojan-Ransom.MSIL.Makop removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment