Ransom Trojan

Should I remove “Trojan-Ransom.Win32.GenericCryptor.jqi”?

Malware Removal

The Trojan-Ransom.Win32.GenericCryptor.jqi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.GenericCryptor.jqi virus can do?

  • Executable code extraction
  • Compression (or decompression)
  • Enumerates user accounts on the system
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Attempts to modify desktop wallpaper
  • Exhibits behavior characteristic of Cerber ransomware
  • Attempts to execute a binary from a dead or sinkholed URL
  • Creates a hidden or system file
  • Attempts to modify proxy settings
  • Attempts to access Bitcoin/ALTCoin wallets
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.GenericCryptor.jqi?


File Info:

crc32: D13AA4EE
md5: f68eba70db0616da4eef6a72a706f7ac
name: F68EBA70DB0616DA4EEF6A72A706F7AC.mlw
sha1: 00f375be4da422d411abeb7ff3891a17a77bb32a
sha256: 99ab9705ababea4a94e48000719de28ab25e0d687437a80f39d66340c1746aa3
sha512: e964c83e0df87d44bb735aa14ccd644b7efdf87294af902b713f71fb555f64d5699e9364e25151f5160b4207263d5015823bc01208f9a98de2bee7ddc759d779
ssdeep: 6144:SGy4qM153SMzkNpfVghxRmLGvRTqa37IWYdH4/PKv9Ev9V4YpeKHRk5SYl:S6qOSYkNmxRvvkakWYG/PK4VGKk8m
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Trojan-Ransom.Win32.GenericCryptor.jqi also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005034d51 )
Elasticmalicious (high confidence)
CynetMalicious (score: 90)
ALYacTrojan.GenericKD.4335040
CylanceUnsafe
SangforRansom.Win32.GenericCryptor.jqi
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/Injector.18fde580
K7GWTrojan ( 005034d51 )
Cybereasonmalicious.0db061
SymantecRansom.Cerber
ESET-NOD32a variant of NSIS/Injector.SG
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Dropper.Cerber-7765753-0
KasperskyTrojan-Ransom.Win32.GenericCryptor.jqi
BitDefenderTrojan.GenericKD.4335040
NANO-AntivirusTrojan.Nsis.Zerber.ekugia
SUPERAntiSpywareRansom.Cerber/Variant
MicroWorld-eScanTrojan.GenericKD.4335040
TencentWin32.Trojan.Raas.Auto
Ad-AwareTrojan.GenericKD.4335040
SophosMal/Generic-R + Mal/Cerber-AA
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_GenericCryptor.R002C0OK720
McAfee-GW-EditionBehavesLike.Win32.ObfusRansom.dc
FireEyeGeneric.mg.f68eba70db0616da
EmsisoftTrojan.GenericKD.4335040 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Nisloder.ii
AviraTR/Dropper.Gen
MicrosoftRansom:Win32/Cerber!rfn
ArcabitTrojan.Generic.D4225C0
AegisLabTrojan.Win32.Zerber.j!c
GDataTrojan.GenericKD.4335040
AhnLab-V3Trojan/Win32.Cerber.R194240
McAfeeArtemis!F68EBA70DB06
MAXmalware (ai score=82)
VBA32TrojanRansom.Cerber
MalwarebytesMalware.AI.1602372018
PandaTrj/CI.A
TrendMicro-HouseCallRansom_GenericCryptor.R002C0OK720
IkarusTrojan.NSIS.Injector
FortinetW32/Injector.SH!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Generic.HyoDSN8A

How to remove Trojan-Ransom.Win32.GenericCryptor.jqi?

Trojan-Ransom.Win32.GenericCryptor.jqi removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment