Ransom • Trojan

Trojan-Ransom.Win32.Encoder.rvu removal guide

The Trojan-Ransom.Win32.Encoder.rvu is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Ransom.Win32.Encoder.rvu virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan-Ransom.Win32.Encoder.rvu?


File Info:
name: 3F392AB2889F17F04161.mlw
path: /opt/CAPEv2/storage/binaries/f38c3b493130b205797f4bfb3615b35fa875a2536a2a24a7a647094605466276
crc32: 67DDD414
md5: 3f392ab2889f17f041610623db1138e7
sha1: 8fc3b2216f8489fa7efb1f0a17d73e5a883e21d4
sha256: f38c3b493130b205797f4bfb3615b35fa875a2536a2a24a7a647094605466276
sha512: 94196c42c21bf4f207d52b0e098d8cbf66aac05fa4af36c212697ce45734fcf30f2a4312302ef411c9e95d17e6d7499a5c4bace0987f03987b8b8b2f3bb95c6e
ssdeep: 6144:ZKhhJS1IJyE/HBXw/KWI0QZ/oQt92Y2EtgI3q1s7777777777777O5w:ZKhhGIJyE/Hhwy/0+/H61s777777777f
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T117449E11A2E80A73D5EFCBF5A93672728A7E2F96B304E7582DD4B55D22B2F804301743
sha3_384: 53ab8f8d1599fa83be86940cf26c098200e74caa98a643882ff64ceb1cbb381eab4f7a908387851da4a2c8260b55e1a7
ep_bytes: ff250020400000000000000000000000
timestamp: 2017-07-26 13:27:21

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 1.0.0.0
InternalName: DEDomainComputer.exe
LegalCopyright:  
OriginalFilename: DEDomainComputer.exe
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Trojan-Ransom.Win32.Encoder.rvu also known as:

Lionic	Trojan.Win32.Encoder.U!c
MicroWorld-eScan	Trojan.GenericKD.61039925
FireEye	Trojan.GenericKD.61039925
ALYac	Trojan.GenericKD.61039925
Cylance	Unsafe
VIPRE	Trojan.GenericKD.61039925
Symantec	Trojan.Gen.MBT
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 99)
Kaspersky	Trojan-Ransom.Win32.Encoder.rvu
BitDefender	Trojan.GenericKD.61039925
NANO-Antivirus	Trojan.Win32.Encoder.jqzmyx
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Encoder.Lcnw
Ad-Aware	Trojan.GenericKD.61039925
Emsisoft	Trojan.GenericKD.61039925 (B)
TrendMicro	Ransom_Encoder.R06BC0WGS22
McAfee-GW-Edition	Artemis
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
GData	Trojan.GenericKD.61039925
Jiangmin	Trojan.Encoder.avb
Webroot	W32.Trojan.Gen
Avira	TR/Encoder.zcrsw
Antiy-AVL	Trojan/Generic.ASMalwS.58DA
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Ransom:Win32/Genasom
McAfee	Artemis!3F392AB2889F
MAX	malware (ai score=82)
TrendMicro-HouseCall	Ransom_Encoder.R06BC0WGS22
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:XlmcfBhlcRFh4CxIaqo9dw)
Fortinet	W32/Ransom_Encoder.R06BC0WGS22
AVG	Win32:Malware-gen
Panda	Trj/RansomGen.A

How to remove Trojan-Ransom.Win32.Encoder.rvu?

Trojan-Ransom.Win32.Encoder.rvu removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X