Ransom • Trojan

Should I remove “Trojan.Ransom.WCryImposter.A”?

The Trojan.Ransom.WCryImposter.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Ransom.WCryImposter.A virus can do?

How to determine Trojan.Ransom.WCryImposter.A?


File Info:
crc32: 719AC287
md5: b84d8a56f7700e0f350034cd6215aa6f
name: B84D8A56F7700E0F350034CD6215AA6F.mlw
sha1: ada005195b0f2c97198900eb78b681e33275c9e0
sha256: e2bfb86e0d8464357c562bd7a897ff1196638ec9922afe0366f1acbf98e4804c
sha512: a818d3d3ead37ab6c5ee813e46f02610e5885809ebc8286ba9c3a22449bc6283820e96a649d801c9ab906e59cd1c789c0371b9cb86caa614fd56fec65d412491
ssdeep: 6144:60ywxcfkma8p54o4D5I92Lt4JG2nO14u+BeTfaBVwcQzLNOiuLu0z7ZkNLK25YCA:60ywdO54o4lTFn6eruI7ui8Zk55bHg
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan.Ransom.WCryImposter.A also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.28049
ALYac	Trojan.Ransom.WCryImposter.A
Zillya	Trojan.Wanna.Win32.26
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
BitDefender	Trojan.Ransom.WCryImposter.A
Cybereason	malicious.6f7700
Symantec	Downloader
ESET-NOD32	Win32/FakeTool.BY
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Wanna.aaer
NANO-Antivirus	Trojan.Win32.Wanna.eqhend
MicroWorld-eScan	Trojan.Ransom.WCryImposter.A
Tencent	Win32.Trojan.Wanna.Pezl
Ad-Aware	Trojan.Ransom.WCryImposter.A
Sophos	Mal/Generic-S
Comodo	Worm.Win32.Dropper.RA@1qraug
McAfee-GW-Edition	BehavesLike.Win32.Generic.tt
FireEye	Trojan.Ransom.WCryImposter.A
Emsisoft	Trojan.Ransom.WCryImposter.A (B)
Jiangmin	Trojan.Wanna.y
eGambit	Unsafe.AI_Score_98%
Antiy-AVL	Trojan/Generic.ASMalwS.2053B0B
Microsoft	Trojan:Win32/Wacatac.A!ml
Arcabit	Trojan.Ransom.WCryImposter.A
GData	Trojan.Ransom.WCryImposter.A
TACHYON	Ransom/W32.WannaCry.1244654
McAfee	GenericRXAA-AA!B84D8A56F770
MAX	malware (ai score=99)
Rising	Trojan.Generic@ML.90 (RDML:Nlonh/W2QSFymHZxPQs3vg)
Ikarus	Trojan.Win32.FakeTool
Fortinet	W32/FakeTool.BY!tr
Paloalto	generic.ml

How to remove Trojan.Ransom.WCryImposter.A?

Trojan.Ransom.WCryImposter.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X