Ransom Trojan

Trojan-Ransom.Win32.Crypren.aeoz malicious file

Malware Removal

The Trojan-Ransom.Win32.Crypren.aeoz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Crypren.aeoz virus can do?

  • Unconventionial language used in binary resources: Latvian
  • The binary likely contains encrypted or compressed data.
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Network activity detected but not expressed in API logs

How to determine Trojan-Ransom.Win32.Crypren.aeoz?


File Info:

crc32: B3BAE324
md5: 129d5afd8ec7c819c490e99159db28df
name: 129D5AFD8EC7C819C490E99159DB28DF.mlw
sha1: bb76c8351a164a696b54031dffd0bab5daedb809
sha256: b7eda12b0e88f9712139c3a177c8d86d380409cdc9b116c490f5314663c64595
sha512: 720afbef7cbfca7bf76558cf77a07d4de108adc8794f31e46ddece0ffa3b3ae4d4d9fa26c68461e79f7af7d8fe08fdfcad905f33370a6b7ad355ec7bc1e9d90f
ssdeep: 3072:qAgy82SPv7eekv4MnORRGJv8Y45416wWX02mwSBNyggR2xPYXwX:qGKTh64MStp2IrX02mrXDPYXwX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

FileVersion: 2.4.8

Trojan-Ransom.Win32.Crypren.aeoz also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00516fdf1 )
LionicTrojan.Win32.Crypren.4!c
Elasticmalicious (high confidence)
ALYacTrojan.BRMon.Gen.4
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/Genasom.ali1000102
K7GWTrojan ( 0057c3ac1 )
Cybereasonmalicious.d8ec7c
CyrenW32/S-914f521c!Eldorado
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.GKGZ
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
CynetMalicious (score: 100)
KasperskyTrojan-Ransom.Win32.Crypren.aeoz
BitDefenderTrojan.BRMon.Gen.4
NANO-AntivirusTrojan.Win32.Crypren.fhzrpr
ViRobotTrojan.Win32.R.Agent.233984.C
MicroWorld-eScanTrojan.BRMon.Gen.4
TencentMalware.Win32.Gencirc.114d4ee4
Ad-AwareTrojan.BRMon.Gen.4
SophosMal/Generic-R + Mal/GandCrab-B
ComodoTrojWare.Win32.Ransom.GandCrab.VP@8aqu9h
BitDefenderThetaAI:Packer.FD8206CB1F
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
FireEyeGeneric.mg.129d5afd8ec7c819
EmsisoftTrojan.BRMon.Gen.4 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Crypren.mf
WebrootW32.Adware.Gen
AviraHEUR/AGEN.1121533
MicrosoftTrojan:Win32/Occamy.C
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
ZoneAlarmTrojan-Ransom.Win32.Crypren.aeoz
GDataTrojan.BRMon.Gen.4
TACHYONRansom/W32.Crypren.233984
AhnLab-V3Win-Trojan/Gandcrab05.Exp
Acronissuspicious
McAfeeTrojan-FPST!129D5AFD8EC7
MAXmalware (ai score=100)
VBA32BScope.Trojan.Gandcrab
MalwarebytesTrojan.MalPack
PandaTrj/GdSda.A
RisingTrojan.Generic@ML.100 (RDML:eGycwSq6tJicJ2ohqRfo8w)
YandexTrojan.GenAsa!SqA/Kby/RAc
IkarusTrojan-Ransom.GandCrab
MaxSecureRansomeware.CRAB.gen
FortinetW32/GenKryptik.CNAR!tr
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Generic.HwoCEpsA

How to remove Trojan-Ransom.Win32.Crypren.aeoz?

Trojan-Ransom.Win32.Crypren.aeoz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment