Trojan-Ransom.Win32.Locky.akd removal tips

The Trojan-Ransom.Win32.Locky.akd is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Locky.akd virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Behavioural detection: Injection (Process Hollowing)
• Executed a process and injected code into it, probably while unpacking
• Behavioural detection: Injection (inter-process)
• Created a process from a suspicious location

How to determine Trojan-Ransom.Win32.Locky.akd?

File Info:
name: 0DB1B93F8C6A7243BF63.mlw
path: /opt/CAPEv2/storage/binaries/171114869eb98ddb73c69105f12959d202d49f2db42be87c09194298f67ce95c
crc32: 7E2260E3
md5: 0db1b93f8c6a7243bf637a6b3b534f74
sha1: 525d754cd7deeb8cffd2ac4f60f596239c2038cc
sha256: 171114869eb98ddb73c69105f12959d202d49f2db42be87c09194298f67ce95c
sha512: 68cdeea49205b6716a443495d0515e4a3d2daf20cb36cd3a6670b88056e4a36bcb3d313ef37cfc17d23a883663a798e30d247f8463f00d71ebbb61fed99927b5
ssdeep: 3072:r+jH14eHrQ6NMEwTyDMfoif5fMNMJOZOceU6RMHzpIzF7Xkj3P:wzQ6NKTLP5fWgWzZUo+5K
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18DE312F5481CD68BC5DA2ABFCFEE2D13D2791133B219C782533452A6E8BC760952EA41
sha3_384: b3392ebadbee0d6fa5d31e403673a4c0c292ebf5c0c9a07b383ff5409346d9d9d4b30167e98265288f4ae6edcf92f3df
ep_bytes: 60be006041008dbe00b0feff57eb0b90
timestamp: 2016-06-24 23:09:15

Version Info:
0: [No Data]

Trojan-Ransom.Win32.Locky.akd also known as:

How to remove Trojan-Ransom.Win32.Locky.akd?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.