What is “Trojan-Ransom.Win32.Locky.cnu”?

The Trojan-Ransom.Win32.Locky.cnu is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Locky.cnu virus can do?

• Executable code extraction
• Creates RWX memory
• Mimics the system’s user agent string for its own requests
• Reads data out of its own binary image
• Behavior consistent with a dropper attempting to download the next stage.
• Exhibits behavior characteristic of Locky ransomware
• Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.Locky.cnu?

File Info:
crc32: 6741F5CA
md5: 26ef1e269a5b87f01520e39bd97f4e98
name: 26EF1E269A5B87F01520E39BD97F4E98.mlw
sha1: fe907cd3a6f7e7c73a530cd791752a444c11c693
sha256: 7c9aa63bd228203d87caccb7b1e75b56d3eb90d43d7ccc4290c1a4fedc4e74da
sha512: 4dfa6a2b89beb53ff9fcc4c4607b4f0306a2c4c46bccf2c49bc0f734a0485bbd9a8b3c474e08ebbbd23ef0edd951e70dbf3d977059cffce96f409edc3e7e8ed2
ssdeep: 6144:zW+7+eMtWcGurBhqU0Fzm0Q273rLPMM0aWRrGH:zRYxGuFhpmQ273rL0M0KH
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
0: [No Data]

Trojan-Ransom.Win32.Locky.cnu also known as:

How to remove Trojan-Ransom.Win32.Locky.cnu?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.