Ransom Trojan

Trojan-Ransom.NSIS.MyxaH.qus removal instruction

Malware Removal

The Trojan-Ransom.NSIS.MyxaH.qus is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.NSIS.MyxaH.qus virus can do?

  • Reads data out of its own binary image
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan-Ransom.NSIS.MyxaH.qus?


File Info:

crc32: BF8014B3
md5: c6ca2d2d268b2d40f78bdb2e74bee330
name: C6CA2D2D268B2D40F78BDB2E74BEE330.mlw
sha1: 8a15e65ba36afaad25fd1af231633651760837a3
sha256: 320c93ed3bd1acf038f15c2fe042df93ef9ff8547b75b2ab056c4864e81408d2
sha512: dbbf2bc4d06e72a582f115f6cc3462dfcec6ce0f151298300c09531f59f45ecc05effa2446fd7aa3a9216d0643d986aac17d5901a05be10020e0ee18c911e930
ssdeep: 24576:7B6NgG8VwkKLt51rDrfS/IFuVn316HGBxi6FeP0ux/:7WIVaB3e/TmGfVsP7/
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Trojan-Ransom.NSIS.MyxaH.qus also known as:

K7AntiVirusTrojan ( 004b559d1 )
LionicTrojan.Win32.Generic.4!c
CynetMalicious (score: 99)
ALYacTrojan.GenericKD.30388907
CylanceUnsafe
K7GWTrojan ( 004b559d1 )
Cybereasonmalicious.d268b2
BaiduNSIS.Trojan-Dropper.Adware.a
SymantecPUA.Downloader
ESET-NOD32Win32/TrojanDropper.Addrop.B
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Adware.Faww-9848112-0
KasperskyTrojan-Ransom.NSIS.MyxaH.qus
BitDefenderTrojan.GenericKD.30388907
MicroWorld-eScanTrojan.GenericKD.30388907
TencentNsis.Trojan.Myxah.Tafa
Ad-AwareTrojan.GenericKD.30388907
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.AdwareAdload.cc
FireEyeGeneric.mg.c6ca2d2d268b2d40
EmsisoftTrojan.GenericKD.30388907 (B)
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1127162
eGambitUnsafe.AI_Score_84%
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Generic.D1CFB2AB
ZoneAlarmTrojan-Ransom.NSIS.MyxaH.qus
GDataTrojan.GenericKD.30388907
McAfeeArtemis!C6CA2D2D268B
MAXmalware (ai score=95)
PandaTrj/CI.A
IkarusTrojan-Dropper.Win32.Addrop
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan-Ransom.NSIS.MyxaH.qus?

Trojan-Ransom.NSIS.MyxaH.qus removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment