Ransom • Trojan

What is “Trojan-Ransom.Win32.Foreign.obhq”?

The Trojan-Ransom.Win32.Foreign.obhq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Ransom.Win32.Foreign.obhq virus can do?

How to determine Trojan-Ransom.Win32.Foreign.obhq?


File Info:
crc32: 0B0A08D4
md5: cba814cbe99c858b23d66806b2b32a2a
name: CBA814CBE99C858B23D66806B2B32A2A.mlw
sha1: 04c7c3a489dfe873e2540614439059c6fd5ac879
sha256: 7a79163b9c251182c01cfce30cd190175149462b1bf498629760fdb81d63d6e3
sha512: 61d25123bac734d7632c12388abe01fc671e5c6178929a5bd9ddd3d87975c296ce55667dba4e9d8478ca874daf8e86e7d0370507f9fc732fe9f04e1476464f5b
ssdeep: 768:4R7tn+4O43xM92hyq9qtx1NdpNVSkJPXpDQPB0rpI6hc9eBoqBTNOqe+:49BXhy4qtx1NXQSrW6hMTiTNre+
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: SyntaxMain.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: WindowsFormsApp15
ProductVersion: 1.0.0.0
FileDescription: WindowsFormsApp15
OriginalFilename: SyntaxMain.exe

Trojan-Ransom.Win32.Foreign.obhq also known as:

Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Foreign.obhq
Alibaba	Ransom:Win32/Foreign.825ed3de
NANO-Antivirus	Trojan.Win32.RiskGen.fmejvf
AegisLab	Trojan.Win32.Foreign.4!c
Rising	Ransom.Foreign!8.292 (CLOUD)
Zillya	Trojan.GenericKD.Win32.209875
McAfee-GW-Edition	Artemis!Trojan
Ikarus	Trojan.SuspectCRC
Avira	TR/Foreign.gzfzd
MAX	malware (ai score=99)
Microsoft	Trojan:Win32/Occamy.C
ESET-NOD32	a variant of MSIL/Riskware.GameHack.AR
McAfee	Artemis!CBA814CBE99C
VBA32	TScope.Trojan.MSIL
Panda	Trj/GdSda.A
Tencent	Win32.Trojan.Foreign.Tbim
Yandex	Trojan.Foreign!+PXq3dSJSFQ
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Foreign.OBHQ!tr
AVG	Win32:Malware-gen
Qihoo-360	Win32/Trojan.Ransom.500

How to remove Trojan-Ransom.Win32.Foreign.obhq?

Trojan-Ransom.Win32.Foreign.obhq removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X