Ransom Trojan

Trojan-Ransom.Win32.Foreign.nwry removal instruction

Malware Removal

The Trojan-Ransom.Win32.Foreign.nwry is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Foreign.nwry virus can do?

  • Creates RWX memory
  • A process created a hidden window
  • Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.Foreign.nwry?


File Info:

crc32: 273CBDEA
md5: a8897e45c5b4cb571f964f61b97b9cfa
name: A8897E45C5B4CB571F964F61B97B9CFA.mlw
sha1: 385d9f4ab54dbda576f78ae990a7b33a6c258dde
sha256: 7b9a25470ff4585e0cae3b990ee8fd41626fe6533411bdbcc7e263aacb3fea05
sha512: cee2436a2ba2389d9e16955daa9a4feedf3fac3e70da7e383f22cd2d5be2acbbaa26b3d4c8fd41de972081398d6c3dcd22729d1236b8d0b633ff8a8a1f204fb2
ssdeep: 24:e9GSsdgpra0FXLVudCCfXLoEaSW02dLBqQi2RY5r1IBd:KVvX8p8EaSWXdLBAbIH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Foreign.nwry also known as:

BkavW32.AIDetect.malware2
CynetMalicious (score: 90)
CylanceUnsafe
ZillyaTrojan.Yakes.Win32.16561
SangforTrojan.Win32.Save.a
BaiduWin32.Virus.Virlock.e
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastFileRepMalware
KasperskyTrojan-Ransom.Win32.Foreign.nwry
NANO-AntivirusTrojan.Win32.Yakes.cwudek
TencentWin32.Trojan.Yakes.clvl
ComodoMalware@#na0o6c7usjwn
BitDefenderThetaGen:NN.ZexaCO.34608.amW@aCSC1Te
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.zz
FireEyeGeneric.mg.a8897e45c5b4cb57
SentinelOneStatic AI – Suspicious PE
AviraTR/Yakes.bdqf
eGambitUnsafe.AI_Score_98%
MicrosoftTrojan:Win32/Wacatac.B!ml
AegisLabTrojan.Win32.Yakes.4!c
McAfeeArtemis!A8897E45C5B4
VBA32BScope.Trojan.Downloader
PandaTrj/CI.A
RisingRansom.Foreign!8.292 (TFE:dGZlOgRc6UGytV1i6Q)
FortinetW32/Yakes.BDQF!tr
AVGFileRepMalware
Qihoo-360Win32/Trojan.571

How to remove Trojan-Ransom.Win32.Foreign.nwry?

Trojan-Ransom.Win32.Foreign.nwry removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment