Categories: RansomTrojan

Trojan-Ransom.Win32.Hermez.bf removal instruction

The Trojan-Ransom.Win32.Hermez.bf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Hermez.bf virus can do?

Executable code extraction
Creates RWX memory
Installs itself for autorun at Windows startup
Exhibits possible ransomware file modification behavior

How to determine Trojan-Ransom.Win32.Hermez.bf?


File Info:
crc32: 38E31A0Cmd5: ad0c74d7c4293d38130068e904069836name: AD0C74D7C4293D38130068E904069836.mlwsha1: bfbb592f688df5a5804387498dd44cb3841755a1sha256: c52b139b1eed3c8412b47f0ea8715265c728b49760e2d165276d25e96728d18csha512: f0bdbde118e6efd02927b02134d9e6d904884caf3276b261a8c93dcab5f7792fcb3ec35a35fbbdc98751e0941a7e7e04d963bbf549152f72d0f8cdc9b67e3578ssdeep: 49152:v5zze4zQD9vKHEidaZ7f4GtZ9Npizy22OBcJclXkp5dkppega5n:Vze4G9vridaxf4GtZ9Npizy22OqgUXd3type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: TeamViewer GmbH (C)InternalName: 35kFileVersion: 2.8.7.2CompanyName: TeamViewer GmbHPrivateBuild: 2.8.7.2LegalTrademarks: TeamViewer GmbH (C)Comments: Datatheft Ulongxatransidlength Vigilant Accelerated MsvcProductName: 35kLanguages: EnglishProductVersion: 2.8.7.2FileDescription: Datatheft Ulongxatransidlength Vigilant Accelerated MsvcOriginalFilename: 35k.exeTranslation: 0x0409 0x04b0

Trojan-Ransom.Win32.Hermez.bf also known as:

K7AntiVirus	Trojan ( 005362e11 )
Lionic	Trojan.Win32.Hermez.j!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.10700
Cynet	Malicious (score: 99)
ALYac	Trojan.GenericKD.31025617
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan ( 005362e11 )
Cybereason	malicious.7c4293
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Filecoder.Hermes.I
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Packer.MalwareCrypter-6620810-1
Kaspersky	Trojan-Ransom.Win32.Hermez.bf
BitDefender	Trojan.GenericKD.31025617
NANO-Antivirus	Trojan.Win32.Hermez.fesryr
MicroWorld-eScan	Trojan.GenericKD.31025617
Tencent	Win32.Trojan.Hermez.Lmkq
Ad-Aware	Trojan.GenericKD.31025617
Sophos	Mal/Generic-R + Troj/Hermes-N
Comodo	Malware@#2oep25vwbl2or
BitDefenderTheta	Gen:NN.ZexaF.34058.Rr0@ae6qI5ki
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_FRS.VSN05G18
McAfee-GW-Edition	BehavesLike.Win32.Dropper.th
FireEye	Generic.mg.ad0c74d7c4293d38
Emsisoft	Trojan.GenericKD.31025617 (B)
Webroot	W32.Trojan.Gen
Avira	TR/AD.MalwareCrypter.lrzjr
Antiy-AVL	Trojan/Generic.ASMalwS.26C6632
Microsoft	Trojan:Win32/Occamy.CC5
GData	Trojan.GenericKD.31025617
AhnLab-V3	Trojan/Win32.Kryptik.C2588393
McAfee	Artemis!AD0C74D7C429
MAX	malware (ai score=96)
VBA32	BScope.TrojanRansom.Hermez
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_FRS.VSN05G18
Yandex	Trojan.Hermez!7HJS/3DEvBk
Ikarus	Trojan-Ransom.GandCrab
Fortinet	W32/Kryptik.FAWV!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Generic.HgIASQ0A