Trojan-Ransom.Win32.Cryptor.fea removal guide

The Trojan-Ransom.Win32.Cryptor.fea is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Cryptor.fea virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Queries information on disks, possibly for anti-virtualization

How to determine Trojan-Ransom.Win32.Cryptor.fea?

File Info:
name: 434253847FE9B9ECEF23.mlw
path: /opt/CAPEv2/storage/binaries/36a9c7e15713611fd30bb98777ef3e01c7d31059cbd925b9b7a8ddfca12fb13c
crc32: 4BFA67A1
md5: 434253847fe9b9ecef23ba8c4d8abbe5
sha1: c7559e2c1f349dd7e1499d2b7f4dd42909d22ae6
sha256: 36a9c7e15713611fd30bb98777ef3e01c7d31059cbd925b9b7a8ddfca12fb13c
sha512: 983dce7d868e7a6b75b7733002c466c745b3be8add0af7bb1676516305901c3480bc5449768296d3acda7f3ecdbb1e8c063c6665b1db27111ae2a2736348ff81
ssdeep: 1536:c+a5ZRwx11oGmEWOBnzwu23EoKlBwP3yYXel3J:cJ+x11oVOB8TKlaP3bOJJ
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T14F430168AD252814E845147DF19BCB1381B7B3A0B4449A75744FD82EFFDD32FA562E03
sha3_384: 88452e5a666fff5c973c542bc60358141444869a833931a15a9954821bba7ca34d913aa210b39c2a7750e16142ba03ff
ep_bytes: 6a00e889ffffff33c0c2040000000000
timestamp: 2021-09-04 18:00:27

Version Info:
0: [No Data]

Trojan-Ransom.Win32.Cryptor.fea also known as:

How to remove Trojan-Ransom.Win32.Cryptor.fea?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.