Trojan-Ransom.Win32.GandCrypt.eyv malicious file

The Trojan-Ransom.Win32.GandCrypt.eyv is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.GandCrypt.eyv virus can do?

• Executable code extraction
• Creates RWX memory
• Unconventionial language used in binary resources: Portuguese (Brazilian)
• The binary likely contains encrypted or compressed data.
• Attempts to repeatedly call a single API many times in order to delay analysis time
• Exhibits possible ransomware file modification behavior
• Creates a hidden or system file
• Checks the CPU name from registry, possibly for anti-virtualization
• Attempts to modify proxy settings
• Appends a known encryptJJS ransomware file extension to files that have been encrypted
• Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.GandCrypt.eyv?

File Info:
crc32: B53029BA
md5: a9a0348a9f1a745366d7820f1072f245
name: A9A0348A9F1A745366D7820F1072F245.mlw
sha1: 9c00203573fc231f4c46f72ad4388c05eb38bdf3
sha256: 910509c5ec831116d25322946c152bc844da754ef379c2461d3549774707c546
sha512: 25da7ef6e0aabbd7b3ea914a6fb1dab0697da2d994f76a95311e0fe5803621294836a734940840fc4614e51ba3715524155d01d86cb336c2710dce3d4d657ef7
ssdeep: 3072:ffh+niXMdKXMeLVeh+mVcP8a3meDElg9qCPMN8wYuS0QdpVFsRqy9e:R+iXMdKXMh5cLJ1ETf8Cq0e
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
FileVersion: 1.0.0.2
Translation: 0x0809 0x04b0

Trojan-Ransom.Win32.GandCrypt.eyv also known as:

How to remove Trojan-Ransom.Win32.GandCrypt.eyv?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.