Trojan-Ransom.Win32.Cryptor.feo information

The Trojan-Ransom.Win32.Cryptor.feo is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Cryptor.feo virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Creates RWX memory
• Dynamic (imported) function loading detected
• Performs HTTP requests potentially not found in PCAP.
• Manipulates data from or to the Recycle Bin
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Queries information on disks, possibly for anti-virtualization
• Writes a potential ransom message to disk
• Attempts to modify proxy settings

How to determine Trojan-Ransom.Win32.Cryptor.feo?

File Info:
name: 72A63D3FA404D68096A0.mlw
path: /opt/CAPEv2/storage/binaries/0125d8e744bb40ee8bf74beb9c43eb4ffc4e5217cf80a1843f8d19dfb888ad68
crc32: A98A2681
md5: 72a63d3fa404d68096a0327c34f677c8
sha1: d81173de0becd320040ca950e153f4860719e599
sha256: 0125d8e744bb40ee8bf74beb9c43eb4ffc4e5217cf80a1843f8d19dfb888ad68
sha512: 8b7fb6bc85d9a33fbc2e43cb452f7f07e82b9a70b2c2ef0311290e4976cc78bd36aa22d4b6f4245d7bf3240e4525b09aba50083e88c682f5e818e7a6d1a3c40c
ssdeep: 768:uqul0GM06BZmLxgENXl3H5YKx852q3vTNybTEkY+Xv73kfKi/jmlzmijJ1jebpme:K0G3QoXYSs93kbTRvj3w/jlNbpE3i0
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T15B430235EF253372D5EB633E578A064B038D177D51246F7BCAD2399538A8AD3304AC21
sha3_384: bb1bd31515d0f72c466cd7447467c4ec982d97683760e3547bf676a6f88e104af8a4b4c95a092a586d2f4358e1c8ac1e
ep_bytes: 6a00e889ffffff33c0c2040000000000
timestamp: 2021-09-04 18:00:27

Version Info:
0: [No Data]

Trojan-Ransom.Win32.Cryptor.feo also known as:

How to remove Trojan-Ransom.Win32.Cryptor.feo?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.