Ransom • Trojan

Should I remove “Trojan.Ransom.TroldeshKD.6089243”?

The Trojan.Ransom.TroldeshKD.6089243 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Ransom.TroldeshKD.6089243 virus can do?

Unconventionial language used in binary resources: Danish
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.Ransom.TroldeshKD.6089243?


File Info:
crc32: C96CE5B7
md5: d0ac00faab9dda9f0ac5be2e3055927d
name: D0AC00FAAB9DDA9F0AC5BE2E3055927D.mlw
sha1: 91e7e34ee2e4ce5829eee80077544c8bbaf23b6e
sha256: bb0280571f2997771b2148bdf9f051d895caf690bf2aab3bd5c6b322d28ae68d
sha512: b3248e58cab02ba77a62609e5772f2e5b3180caff5a278e7414a4da20aa8b234086bb2d2266738bc2d745e72ea782638bcf30ac114e2519e26bc9876b919ae18
ssdeep: 12288:EAjmNEjWvxIjwvN7GTzyS9Uo3yhdr6OHQ2X3vb6hi:EsmNYWvxIBTzL9XyrWOw2X3Dci
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
LegalCopyright: Copyright xa9 1995-Present 
FileVersion: 7.1.6.7
CompanyName: Lu.com
LegalTrademarks: Copyright xa9 1995-Present 
ProductName: AnswerUncomfortable
ProductVersion: 7.1.6.7
FileDescription: Idahos Recently Mining      Important 1616
OriginalFilename: AnswerUncomfortable
Translation: 0x0406 0x04b0

Trojan.Ransom.TroldeshKD.6089243 also known as:

K7AntiVirus	Trojan ( 0051a67e1 )
Elastic	malicious (high confidence)
ALYac	Trojan.Ransom.TroldeshKD.6089243
Malwarebytes	MachineLearning/Anomalous.100%
Zillya	Trojan.Ransom.Win32.994
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Foreign.19872d24
K7GW	Trojan ( 0051a67e1 )
Cybereason	malicious.aab9dd
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.FXLY
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 99)
Kaspersky	Trojan-Ransom.Win32.Foreign.nori
BitDefender	Trojan.Ransom.TroldeshKD.6089243
NANO-Antivirus	Trojan.Win32.Kryptik.etmzfi
MicroWorld-eScan	Trojan.Ransom.TroldeshKD.6089243
Tencent	Win32.Trojan.Foreign.Wqcy
Ad-Aware	Trojan.Ransom.TroldeshKD.6089243
Sophos	Mal/Generic-S
Comodo	Malware@#2j4tsg6s4esw6
BitDefenderTheta	Gen:NN.ZexaF.34796.Mq0@aW1j2raG
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Mal_MiliCry-1h
McAfee-GW-Edition	BehavesLike.Win32.Dropper.jc
FireEye	Generic.mg.d0ac00faab9dda9f
Emsisoft	Trojan.Ransom.TroldeshKD.6089243 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1117348
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Tiggre!rfn
GData	Trojan.Ransom.TroldeshKD.6089243
TACHYON	Ransom/W32.Foreign.626688.B
AhnLab-V3	Win-Trojan/Sagecrypt.Gen
McAfee	Artemis!D0AC00FAAB9D
MAX	malware (ai score=99)
VBA32	BScope.Backdoor.Mokes
Panda	Trj/CI.A
TrendMicro-HouseCall	Mal_MiliCry-1h
Rising	Trojan.Generic@ML.80 (RDML:GRQz0zUZxAVy4qs5MNyAmA)
Yandex	Trojan.Foreign!l/etBDCCK3g
Ikarus	Trojan.Crypt
Fortinet	W32/Generic.1H!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Foreign.HgIASRIA

How to remove Trojan.Ransom.TroldeshKD.6089243?

Trojan.Ransom.TroldeshKD.6089243 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X