What is “Trojan-Ransom.Win32.Cryptor.fed”?

The Trojan-Ransom.Win32.Cryptor.fed is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Cryptor.fed virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Queries information on disks, possibly for anti-virtualization

How to determine Trojan-Ransom.Win32.Cryptor.fed?

File Info:
name: 9D7B26D6158B606394B2.mlw
path: /opt/CAPEv2/storage/binaries/7b8d16ac80f385961065c6b058ae16a08ed7258b4acd6039c8025aac528ce200
crc32: EC2DFC7B
md5: 9d7b26d6158b606394b2238e570ffdd4
sha1: 45eeaf8622140f6b1668e7008a34242e39d6fd97
sha256: 7b8d16ac80f385961065c6b058ae16a08ed7258b4acd6039c8025aac528ce200
sha512: e1a388f6410a2051b3852c67d19d945d7899d5c7e2611c7307f11d1370ca813103036a279009420f6bd524114f3a5835e860d12196c9ca441dcc810f55dfcbea
ssdeep: 768:/ED6FL9boHrCB+ijPvumZEkfKxdSzjW2Vso00Qkhd1XlcUJhdu//Yq6EQuVq:cD4LRaoudxd0We2khd1XZu76NuI
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T15F43F161AEA27A9CE7ED43FECCC796369531122053E12D77118E0F2A73817836B72472
sha3_384: 8774217cb30cd7d4ab3803996ef4db7ae34a378c4eb0c305e3c1f17859457278f1d0ada2e8df95d7430f25f63f8465ae
ep_bytes: 6a00e889ffffff33c0c2040000000000
timestamp: 2021-09-04 18:00:27

Version Info:
0: [No Data]

Trojan-Ransom.Win32.Cryptor.fed also known as:

How to remove Trojan-Ransom.Win32.Cryptor.fed?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.