Ransom Trojan

What is “Trojan-Ransom.Win32.Cryptor.emb”?

Malware Removal

The Trojan-Ransom.Win32.Cryptor.emb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Cryptor.emb virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.Cryptor.emb?


File Info:

crc32: 65E93BA5
md5: b45784369329647e6df08bde3bc7ec4a
name: B45784369329647E6DF08BDE3BC7EC4A.mlw
sha1: aca15b8406c0e16c9a6d7fd8e3483abbd8628ddd
sha256: d5b99f97dd32fbbc3ec57fc1ad91019def440f69cd24ad53eb1dbe04f4020f10
sha512: 8cb581b50ed10c372e37a2707922350c997c63ec0414fce73e06617ba6fce37bd3d2cdf1a26987f09c5a3346075471bbcc0fb61dc7d907d0da0bb3aa5976526c
ssdeep: 384:wxiNh2laraKqlJ7DSMaC/iE+yvJeGicN3twrWFeQYQq3URIaZXY:wxeQbHKE+yvsJy3h4QHq3baN
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Cryptor.emb also known as:

CynetMalicious (score: 100)
ALYacGen:Variant.Cerbu.105049
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 0057e53f1 )
Cybereasonmalicious.406c0e
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win64/Injector.FM
APEXMalicious
AvastFileRepMalware
KasperskyTrojan-Ransom.Win32.Cryptor.emb
BitDefenderGen:Variant.Cerbu.105049
MicroWorld-eScanGen:Variant.Cerbu.105049
Ad-AwareGen:Variant.Cerbu.105049
F-SecureTrojan.TR/AD.ContiRansom.vmdsk
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win64.Ardurk.mc
FireEyeGeneric.mg.b45784369329647e
EmsisoftGen:Variant.Cerbu.105049 (B)
AviraTR/AD.ContiRansom.vmdsk
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Cerbu.D19A59
ZoneAlarmTrojan-Ransom.Win32.Cryptor.emb
GDataGen:Variant.Cerbu.105049
McAfeeArtemis!B45784369329
MAXmalware (ai score=84)
MalwarebytesRansom.FileLocker
MaxSecureTrojan.Malware.300983.susgen
FortinetW64/Kryptik.FM!tr
AVGFileRepMalware

How to remove Trojan-Ransom.Win32.Cryptor.emb?

Trojan-Ransom.Win32.Cryptor.emb removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment