Ransom Trojan

Trojan-Ransom.Win32.Mbro.bbqk removal guide

Malware Removal

The Trojan-Ransom.Win32.Mbro.bbqk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Mbro.bbqk virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.Mbro.bbqk?


File Info:

crc32: 1F4060E1
md5: fcad4e755ba0ae7d695e5394eb09e39b
name: FCAD4E755BA0AE7D695E5394EB09E39B.mlw
sha1: 5fad73914b55270edf4f1e65ea0a7b60bb23ff52
sha256: c7457680766ebdb905ba867b44dffc9111c7d2e6d4e013b61f81469b6eb2e9f9
sha512: 7933b30ef7d759b6aab72e85410e6ab6a0c63e40bacf042ae21226caa8e4de336b3046196866b0aa03788b318997ca0927520d800a9ce795763610fde1ca2864
ssdeep: 768:zsMQKzwcnBISlZzW3k7u763yf1uesvikB3MUvC:gMQKzwcnBIK+k7u7rVWiktMUvC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: WAB.EXE
FileVersion: 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.00.2900.2180
FileDescription: Address Book
OriginalFilename: WAB.EXE
Translation: 0x0409 0x04b0

Trojan-Ransom.Win32.Mbro.bbqk also known as:

BkavW32.AIDetect.malware2
K7AntiVirusRiskware ( 0040eff71 )
CynetMalicious (score: 100)
ALYacTrojan.GenericKD.31105381
ZillyaTrojan.Mbro.Win32.4813
SangforTrojan.Win32.GenericKD.31105381
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaRansom:Win32/Virut.8d62d457
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.55ba0a
SymantecW32.Virut.CF
APEXMalicious
AvastWin32:Vitro [Inf]
ClamAVWin.Virus.Virut-5901233-0
KasperskyTrojan-Ransom.Win32.Mbro.bbqk
BitDefenderTrojan.GenericKD.31105381
NANO-AntivirusVirus.Win32.Virut-Gen.bwpxnc
MicroWorld-eScanTrojan.GenericKD.31105381
TencentVirus.Win32.Virut.ue
Ad-AwareTrojan.GenericKD.31105381
SophosMal/Generic-S
ComodoMalware@#1kiyk7xaytv12
BitDefenderThetaGen:NN.ZexaF.34058.cm0@aWADMBki
McAfee-GW-EditionBehavesLike.Win32.Virut.pm
FireEyeGeneric.mg.fcad4e755ba0ae7d
EmsisoftTrojan.GenericKD.31105381 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Patched.Ren.Gen
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataTrojan.GenericKD.31105381
Acronissuspicious
McAfeeArtemis!FCAD4E755BA0
MAXmalware (ai score=95)
PandaTrj/CI.A
IkarusVirus.Win32.Virut
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Mbro.BBQK!tr
AVGWin32:Vitro [Inf]
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.MBRlock.HgAASSkA

How to remove Trojan-Ransom.Win32.Mbro.bbqk?

Trojan-Ransom.Win32.Mbro.bbqk removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment