Ransom Trojan

Trojan-Ransom.Win32.Crypren.ahui (file analysis)

Malware Removal

The Trojan-Ransom.Win32.Crypren.ahui is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Crypren.ahui virus can do?

  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Trojan-Ransom.Win32.Crypren.ahui?


File Info:

crc32: 63767065
md5: f8ca07456f8c3999f39ed87153c802db
name: F8CA07456F8C3999F39ED87153C802DB.mlw
sha1: bd2bb3de077c7f99d1be818f9c4c67d802c48d28
sha256: c8ac09edb1460d12f1fa772b99853118beefdf97cd2404dfbbbf4a38a66e892e
sha512: d431ca1fe3335d0e782b14d619eaa2eaec08a0ded286825bb8544c303de668dc0a0bbce1d105ab73b8a14b4730b834409ecf50abfe47d7c2758d1d95f7fbc86f
ssdeep: 192:KJR0X7cZauQ9iz7OyHas/x1l4AtyDeUD7drYARKjOcpjqj/GIpj6/24Rg7E53z6:KJR0Xwqy6Otgb71YJjxqjP6/DO78/29
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Crypren.ahui also known as:

Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.36957943
AlibabaTrojan:Win32/Filecoder.161b2622
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.OHC
APEXMalicious
AvastWin32:Trojan-gen
KasperskyTrojan-Ransom.Win32.Crypren.ahui
BitDefenderTrojan.GenericKD.36957943
MicroWorld-eScanTrojan.GenericKD.36957943
TencentWin32.Trojan.Filecoder.Efuo
Ad-AwareTrojan.GenericKD.36957943
SophosMal/Generic-S
TrendMicroRansom_Crypren.R067C0WFG21
McAfee-GW-EditionArtemis
FireEyeTrojan.GenericKD.36957943
EmsisoftTrojan.FileCoder (A)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Generic.gwsud
AviraTR/FileCoder.yecpr
MicrosoftTrojan:Win32/Zpevdo.B
ZoneAlarmTrojan-Ransom.Win32.Crypren.ahui
GDataTrojan.GenericKD.36957943
McAfeeArtemis!F8CA07456F8C
MAXmalware (ai score=80)
MalwarebytesRansom.CryptoLocker
TrendMicro-HouseCallRansom_Crypren.R067C0WFG21
RisingTrojan.Generic@ML.88 (RDML:JJtQ6Div3g/aa0hQRCPdKw)
IkarusTrojan.SuspectCRC
MaxSecureTrojan.Malware.118388289.susgen
FortinetW32/Filecoder.GDSFYJB!tr
AVGWin32:Trojan-gen

How to remove Trojan-Ransom.Win32.Crypren.ahui?

Trojan-Ransom.Win32.Crypren.ahui removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment