Categories: RansomTrojan

Trojan-Ransom.Win32.Gen.hdg removal

The Trojan-Ransom.Win32.Gen.hdg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Gen.hdg virus can do?

Expresses interest in specific running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Reads data out of its own binary image
Attempts to modify desktop wallpaper
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Ransom.Win32.Gen.hdg?


File Info:
crc32: 9515E0E0md5: 582c1c6a9d4409701d8a67cccbf803fbname: 582C1C6A9D4409701D8A67CCCBF803FB.mlwsha1: dbe7073d311fcc316b7f61c239abc94a8d87732bsha256: 3ccdabdd73056f3d45c4400539cb300fac00e8a4b8a057b1e5a5cc9997833d73sha512: b683c7ff5aac0d2ec42a79725815f8a8ccbfec472f16c952ae0c66a0f3a7ec660ad73bc80d5f0d0b1af3aa8efe81ccaa979c1e05c64e1de4d0a425fcf90129fessdeep: 24576:cRmJkcoQricOIQxiZY1iaLu/yRN4PusuhwdsDqvwB+lCg8As47U:JJZoQrbTFZY1iaLuYm4y2qvwBwl8z47Utype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1FileVersion: 3, 3, 8, 1FileDescription: Translation: 0x0809 0x04b0

Trojan-Ransom.Win32.Gen.hdg also known as:

K7AntiVirus	Trojan ( 0050728b1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.24597
ClamAV	Win.Malware.Autoit-6992337-0
ALYac	Trojan.GenericKD.45242634
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 0050728b1 )
Cybereason	malicious.a9d440
Cyren	W32/FakeDoc.G.gen!Eldorado
Symantec	Ransom.CryptXXX
ESET-NOD32	a variant of Win32/Filecoder.Crypt888.B
APEX	Malicious
Avast	AutoIt:Ransom-L [Trj]
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Gen.hdg
BitDefender	Trojan.GenericKD.45242634
NANO-Antivirus	Trojan.Win32.Ransom.exgcnm
MicroWorld-eScan	Trojan.GenericKD.45242634
Ad-Aware	Trojan.GenericKD.45242634
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.Injector.EUXI@4yxp37
F-Secure	Heuristic.HEUR/AGEN.1110296
BitDefenderTheta	AI:Packer.4A72867A16
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom.AutoIt.CRYPTEIGHT.SMTH
McAfee-GW-Edition	BehavesLike.Win32.TrojanAitInject.tc
FireEye	Generic.mg.582c1c6a9d440970
Emsisoft	Trojan.GenericKD.45242634 (B)
Jiangmin	Trojan.Banker.Agent.cal
Avira	HEUR/AGEN.1110296
eGambit	Unsafe.AI_Score_88%
Antiy-AVL	Trojan/Generic.ASCommon.1A0
Microsoft	Ransom:Win32/Pocrimcrypt.A
Arcabit	Trojan.Generic.D2B2590A
ZoneAlarm	Trojan-Ransom.Win32.Gen.hdg
GData	Trojan.GenericKD.45242634
AhnLab-V3	Trojan/Win32.RL_Agent.R278204
McAfee	Artemis!582C1C6A9D44
MAX	malware (ai score=98)
Malwarebytes	Ransom.Microcop.AutoIt
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom.AutoIt.CRYPTEIGHT.SMTH
Tencent	Win32.Trojan.Gen.Suoa
Ikarus	Trojan-Ransom.Crypt888
Fortinet	W32/Filecoder.DYB!tr
AVG	AutoIt:Ransom-L [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Pocrimcrypt.HwoCEpsA