Ransom Trojan

About “Trojan-Ransom.MSIL.Sram.cx” infection

Malware Removal

The Trojan-Ransom.MSIL.Sram.cx is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.MSIL.Sram.cx virus can do?

  • The binary likely contains encrypted or compressed data.

How to determine Trojan-Ransom.MSIL.Sram.cx?


File Info:

crc32: CC617100
md5: 66de8acdc809463ceb71d49d3920a50b
name: 66DE8ACDC809463CEB71D49D3920A50B.mlw
sha1: 48851153b22235d1d5519efb8da614b76d04e478
sha256: 8d9f9d25d38d042f1ed0fea8f656ed3846bbae18142f3d83610d3631b06011c0
sha512: ba9f4c0c87cb535ac4d234d5ecd843558565b2a1b6c4053af78fb10cd9fb1f0f0fc25a9f012d37db477b362b03da707e1b2b28b930a18c358f41de2caf66b84e
ssdeep: 6144:a48Xc1GjRQWkZ19AUd2CCkm/taEFl3g6RswD1f6Wp5V:a48Xyz93hm/XFl3fRRUWP
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 KnowBe4 Inc. 2016
Assembly Version: 1.0.1.9
InternalName: WeakCryptor.exe
FileVersion: 1.0.1.9
CompanyName: KnowBe4 Inc.
ProductName: Launcher
ProductVersion: 1.0.1.9
FileDescription: Launcher
OriginalFilename: WeakCryptor.exe

Trojan-Ransom.MSIL.Sram.cx also known as:

K7AntiVirusTrojan ( 005159961 )
Elasticmalicious (high confidence)
CynetMalicious (score: 85)
ALYacGen:Application.RanSim.1
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/Rantest.3adfc641
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.dc8094
CyrenW32/S-7064d619!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Riskware.KnownBe4.A
APEXMalicious
AvastWin32:RansomX-gen [Ransom]
KasperskyTrojan-Ransom.MSIL.Sram.cx
BitDefenderGen:Application.RanSim.1
MicroWorld-eScanGen:Application.RanSim.1
TencentMalware.Win32.Gencirc.10bcdb46
Ad-AwareGen:Application.RanSim.1
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
TrendMicroHT_RANSIM_GA2708C2.UVPM
McAfee-GW-EditionGenericRXAO-LK!66DE8ACDC809
FireEyeGeneric.mg.66de8acdc809463c
EmsisoftGen:Application.RanSim.1 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1127299
MicrosoftRansom:Win32/Rantest.A
ArcabitApplication.RanSim.1
AegisLabTrojan.Win32.Generic.4!c
ZoneAlarmHEUR:Trojan-Ransom.MSIL.Fasem.a
GDataGen:Application.RanSim.1
AhnLab-V3PUP/Win32.BundleInstaller.R206863
McAfeeGenericRXAO-LK!66DE8ACDC809
MAXmalware (ai score=77)
VBA32TScope.Trojan.MSIL
MalwarebytesRiskWare.RansomSimulator
PandaTrj/GdSda.A
TrendMicro-HouseCallHT_RANSIM_GA2708C2.UVPM
RisingRansom.Sram!8.E107 (CLOUD)
YandexTrojan.Agent!nUc3wM2JTi0
IkarusPUA.RanSim
FortinetMSIL/Fasem.A!tr.ransom
AVGWin32:RansomX-gen [Ransom]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Generic.HgIASOQA

How to remove Trojan-Ransom.MSIL.Sram.cx?

Trojan-Ransom.MSIL.Sram.cx removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment