Ransom Trojan

Trojan-Ransom.Win32.Foreign.nxdq removal tips

Malware Removal

The Trojan-Ransom.Win32.Foreign.nxdq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Foreign.nxdq virus can do?

  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan-Ransom.Win32.Foreign.nxdq?


File Info:

crc32: 0AE9062E
md5: 8cfcb07c0ebad6cc57821d84c11585b9
name: 8CFCB07C0EBAD6CC57821D84C11585B9.mlw
sha1: 0331c541dee8c59014541a792ceea92c53c2b4fd
sha256: 6c6505bbb4af3d83b5e440ffbf38fee2001fa9afed977433f8b0afc35f6a85fe
sha512: 9f8778e12fe061f3b26db10fb6c24e7763058c68d9840eadad66955b9172eb06b83ba87ceea4e3c1c414f43b34b8fb695793bca2296009a25f7b181b83ad308c
ssdeep: 12288:pH7o4x56/9J3NUwnsGQq85RDgaeOz+rSU47QqEmvyL26qqFqqFqqJR:pH7rW/hpngvfDgNSPxEHL9qMqMqI
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Foreign.nxdq also known as:

BkavW32.AIDetect.malware1
K7AntiVirusRiskware ( 004bbc481 )
CynetMalicious (score: 100)
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWRiskware ( 004bbc481 )
Cybereasonmalicious.1dee8c
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastFileRepMalware
KasperskyTrojan-Ransom.Win32.Foreign.nxdq
TencentWin32.Trojan.Foreign.Efvg
SophosML/PE-A
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.8cfcb07c0ebad6cc
SentinelOneStatic AI – Suspicious PE
Antiy-AVLTrojan[Ransom]/Win32.Foreign
ZoneAlarmTrojan-Ransom.Win32.Foreign.nxdq
AhnLab-V3Trojan/Win32.Foreign.C2329979
McAfeeArtemis!8CFCB07C0EBA
MalwarebytesMalware.Heuristic.1006
RisingRansom.Foreign!8.292 (CLOUD)
AVGFileRepMalware

How to remove Trojan-Ransom.Win32.Foreign.nxdq?

Trojan-Ransom.Win32.Foreign.nxdq removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment