Ransom Trojan

What is “Trojan-Ransom.Win32.Gen.gft”?

Malware Removal

The Trojan-Ransom.Win32.Gen.gft is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Gen.gft virus can do?

  • Reads data out of its own binary image
  • Deletes its original binary from disk
  • Exhibits possible ransomware file modification behavior
  • Network activity detected but not expressed in API logs
  • Clears Windows events or logs
  • Clears web history

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan-Ransom.Win32.Gen.gft?


File Info:

crc32: D0943116
md5: 9a3d34f7a9b617d2bffc4ce02f4dd599
name: 9A3D34F7A9B617D2BFFC4CE02F4DD599.mlw
sha1: ffd54b2e8b7a6de18b4ffa908fd3be62b8d9c911
sha256: 4bef8e4518e77dac889e87a1977b836dc8aee50816abebf2f5fe7ee2d4157119
sha512: 8267c8b02ff4166fed70db79e08cfee726a4c96357d74d80debeeb697675c30f0cb300b7abcaaba94b627cc2c958f8eda49651e2ae8a4493488470b67e1299b8
ssdeep: 3072:6r3u1wVtulaOpe//h5KFChxeVQPr3XplqRyVVW3iXYmtihM+0v9p8/Hkbj:w3uYOS9dPr358y3WwqGv9O/s
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Gen.gft also known as:

McAfeeArtemis!9A3D34F7A9B6
CylanceUnsafe
SangforTrojan.Win32.KillFiles.8
CrowdStrikewin/malicious_confidence_60% (D)
Cybereasonmalicious.e8b7a6
CyrenBAT/KillFil.BQ
SymantecDownloader
ESET-NOD32BAT/KillFiles.NKC
APEXMalicious
AvastFileRepMalware
KasperskyTrojan-Ransom.Win32.Gen.gft
NANO-AntivirusTrojan.Win32.KillFiles.ewandf
TencentWin32.Trojan.Gen.Htmb
SophosMal/Generic-S
ComodoMalware@#1x55npvxxqrm4
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Dropper.dh
JiangminBackdoor.Xtreme.blw
MicrosoftRansom:Win32/Genasom
AegisLabTrojan.Win32.Generic.j!c
ZoneAlarmTrojan-Ransom.Win32.Gen.gft
AhnLab-V3Trojan/Win32.Gen
MAXmalware (ai score=97)
PandaTrj/CI.A
IkarusTrojan.BAT.KillFiles
FortinetBAT/KillFiles.NKB!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Trojan-Ransom.Win32.Gen.gft?

Trojan-Ransom.Win32.Gen.gft removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment