Categories: RansomTrojan

How to remove “Trojan-Ransom.Win32.Gen.iwi”?

The Trojan-Ransom.Win32.Gen.iwi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Gen.iwi virus can do?

Expresses interest in specific running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Reads data out of its own binary image
Attempts to modify desktop wallpaper
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Ransom.Win32.Gen.iwi?


File Info:
crc32: BD27DF1Bmd5: 776c2faccb9fdcc734f4806efba68363name: 776C2FACCB9FDCC734F4806EFBA68363.mlwsha1: 14bb1bb983a05853cc8e4d28a6057e857c521c54sha256: b928d4db8b116a8683287f004f753649af6dacba21b43c652fbfbaf39e5b6a3esha512: f3cfbb1d7544b5ab9545d3d4e14f9360e00e3d6eef92d7a596df01764e750e8451b59eef86df38833576b6c980473dfb4126869978cc9bc9012618606f98c078ssdeep: 12288:ghkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4a73JCg58:oRmJkcoQricOIQxiZY1iaDJDWtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1FileVersion: 3, 3, 8, 1FileDescription: Translation: 0x0809 0x04b0

Trojan-Ransom.Win32.Gen.iwi also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 0055e3ef1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.24597
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.45241846
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan ( 0055e3ef1 )
Cybereason	malicious.ccb9fd
Cyren	W32/Autoit.XNSP-2917
Symantec	Ransom.CryptXXX
ESET-NOD32	a variant of Win32/Filecoder.Crypt888.B
APEX	Malicious
Avast	AutoIt:Ransom-L [Trj]
ClamAV	Win.Malware.Autoit-6992337-0
Kaspersky	Trojan-Ransom.Win32.Gen.iwi
BitDefender	Trojan.GenericKD.45241846
NANO-Antivirus	Trojan.Win32.Encoder.fcgkxs
MicroWorld-eScan	Trojan.GenericKD.45241846
Tencent	Win32.Trojan.Gen.Ahou
Ad-Aware	Trojan.GenericKD.45241846
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1110296
BitDefenderTheta	AI:Packer.E19D7A3317
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom.AutoIt.CRYPTEIGHT.SMTH
McAfee-GW-Edition	BehavesLike.Win32.AutoitDropper.bh
FireEye	Generic.mg.776c2faccb9fdcc7
Emsisoft	Trojan.GenericKD.45241846 (B)
Jiangmin	Trojan.Banker.Agent.cal
Avira	HEUR/AGEN.1110296
Antiy-AVL	Trojan/Generic.ASCommon.1A0
Microsoft	Ransom:Win32/Pocrimcrypt.A
Arcabit	Trojan.Generic.D2B255F6
ZoneAlarm	Trojan-Ransom.Win32.Gen.iwi
GData	Trojan.GenericKD.45241846
AhnLab-V3	Trojan/Win32.FileCoder.R291305
McAfee	Artemis!776C2FACCB9F
MAX	malware (ai score=99)
Malwarebytes	Ransom.Microcop
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom.AutoIt.CRYPTEIGHT.SMTH
Rising	Ransom.Crypt888/Autoit!1.C27B (CLASSIC)
Ikarus	Trojan-Ransom.Crypt888
MaxSecure	Trojan.Autoit.AZA
Fortinet	W32/Filecoder.DYB!tr
AVG	AutoIt:Ransom-L [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Pocrimcrypt.HwoCEpsA