Ransom Trojan

Should I remove “Trojan-Ransom.Win32.Cryptor.ekp”?

Malware Removal

The Trojan-Ransom.Win32.Cryptor.ekp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Cryptor.ekp virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.Cryptor.ekp?


File Info:

crc32: 6494E17E
md5: a65277124973b922dc9be26b69e53ad3
name: A65277124973B922DC9BE26B69E53AD3.mlw
sha1: 5d74bd43df35782c67407e2463cfd81e62de8d40
sha256: 9b536ab21fda27dc0eeb2757c9a585cabd9b06afcb4bd81be11c8092faba3317
sha512: 9a1a2bce8652cec06539fef1b7c724d94ff3a56e5ec347078387328c6e3a09093d4275f51d3c5f4186bf473c1297be67f9b4a383ae8a45f3db48c84f2a768026
ssdeep: 384:sMFUCnzLH2CvW/JhzVwQk96WALu18ZbTobwoHS4gdCE9FCTjerUmTe:sazLH6/JBVwQ06WAiyZb08oHngdC2FO
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Cryptor.ekp also known as:

CynetMalicious (score: 100)
CAT-QuickHealTrojanransom.Cryptor
ALYacGen:Variant.Mikey.122820
CylanceUnsafe
SangforRansom.Win32.Cryptor.ekp
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win64/Cryptor.33b81a74
K7GWTrojan ( 0057cbd51 )
Cybereasonmalicious.3df357
CyrenW64/Kryptik.EGT.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win64/GenKryptik.FFNR
APEXMalicious
AvastFileRepMalware
KasperskyTrojan-Ransom.Win32.Cryptor.ekp
BitDefenderGen:Variant.Mikey.122820
MicroWorld-eScanGen:Variant.Mikey.122820
Ad-AwareGen:Variant.Mikey.122820
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_ContiCrypt.R002C0DFF21
McAfee-GW-EditionBehavesLike.Win64.Generic.mc
FireEyeGeneric.mg.a65277124973b922
EmsisoftGen:Variant.Mikey.122820 (B)
AviraTR/Crypt.Agent.mogku
MicrosoftRansom:Win64/ContiCrypt.PG!MTB
ArcabitTrojan.Mikey.D1DFC4
GDataGen:Variant.Mikey.122820
AhnLab-V3Ransomware/Win.Filecoder.C4478224
McAfeeArtemis!A65277124973
MAXmalware (ai score=86)
MalwarebytesRansom.FileLocker
PandaTrj/CI.A
TrendMicro-HouseCallRansom_ContiCrypt.R002C0DFF21
IkarusTrojan.Win64.Krypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW64/GenKryptik.FFNR!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Trojan-Ransom.Win32.Cryptor.ekp?

Trojan-Ransom.Win32.Cryptor.ekp removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment