Ransom • Trojan

Trojan.Ransom.WannaCryptor.D removal instruction

The Trojan.Ransom.WannaCryptor.D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Ransom.WannaCryptor.D virus can do?

How to determine Trojan.Ransom.WannaCryptor.D?


File Info:
crc32: 656739AE
md5: a18731bcefe5482bd525657a28a727d0
name: A18731BCEFE5482BD525657A28A727D0.mlw
sha1: a0c8f44c293b65ced34fb2d24889273c62f8cdb7
sha256: 1863431e871dc389c66c76155334e9a6d312d68213efd75964932e085bebf803
sha512: 6eed3ce81739f041c6920321fb09e3568f8782f5b35095417df9413edb12bffe8f10e6465b72b47bd9fd0f7daacf6bd6dbd38c8dd94f7b571ff54e87077036c1
ssdeep: 3072:Rmrhm1eigTcR+uiUg6p4FLlG4tlLQ+mmnHFZxoHEo3m:REgNZiZhLlG4LmmR
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: LODCTR.EXE
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7600.16385
FileDescription: Load PerfMon Counters
OriginalFilename: LODCTR.EXE
Translation: 0x0409 0x04b0

Trojan.Ransom.WannaCryptor.D also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 00571a9e1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.11432
Cynet	Malicious (score: 100)
CAT-QuickHeal	Ransom.WannaCrypt.A4
ALYac	Trojan.Ransom.WannaCryptor.D
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	Ransom:Win32/Wanna.805407a4
K7GW	Trojan ( 00571a9e1 )
Cybereason	malicious.cefe54
Cyren	W32/WannaCry.G.gen!Eldorado
Symantec	Ransom.Wannacry
ESET-NOD32	a variant of Win32/Filecoder.WannaCryptor.D
Avast	Win32:WanaCry-A [Trj]
Kaspersky	Trojan-Ransom.Win32.Wanna.c
BitDefender	Trojan.Ransom.WannaCryptor.D
NANO-Antivirus	Trojan.Win32.Wanna.eovgej
MicroWorld-eScan	Trojan.Ransom.WannaCryptor.D
Tencent	Trojan.Win32.WannaCry.l
Ad-Aware	Trojan.Ransom.WannaCryptor.D
Sophos	Mal/Wanna-A
Comodo	TrojWare.Win32.Ransom.WannaCrypt.B@719b9h
BitDefenderTheta	Gen:NN.ZexaF.34608.pq0@aOm@Elgi
VIPRE	Trojan.Win32.WannaCrypt.a (v)
TrendMicro	Ransom_WCRY.SM
McAfee-GW-Edition	Ransom-WannaCry!A18731BCEFE5
FireEye	Generic.mg.a18731bcefe5482b
Emsisoft	Trojan.Ransom.WannaCryptor.D (B)
Avira	HEUR/AGEN.1118500
eGambit	Unsafe.AI_Score_100%
Microsoft	Ransom:Win32/WannaCrypt.A!rsm
AegisLab	Trojan.Win32.Wanna.toNl
ZoneAlarm	Trojan-Ransom.Win32.Wanna.c
GData	Win32.Trojan-Ransom.WannaCry.E
TACHYON	Ransom/W32.Wanna.245760
AhnLab-V3	Trojan/Win32.WannaCryptor.R200589
Acronis	suspicious
McAfee	Ransom-WannaCry!A18731BCEFE5
MAX	malware (ai score=100)
VBA32	Trojan-Ransom.Wanna
Malwarebytes	Ransom.WannaCrypt
Panda	Trj/RansomCrypt.I
TrendMicro-HouseCall	Ransom_WCRY.SM
Rising	Ransom.WanaCrypt!1.AAEB (CLOUD)
Ikarus	Trojan-Ransom.WannaCry
MaxSecure	Trojan.Ransom.Wanna.d
Fortinet	W32/Wanna.C!tr.ransom
AVG	Win32:WanaCry-A [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.WannaCry.HgIASOYA

How to remove Trojan.Ransom.WannaCryptor.D?

Trojan.Ransom.WannaCryptor.D removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X