Categories: RansomTrojan

Trojan-Ransom.Win32.MyxaH information

The Trojan-Ransom.Win32.MyxaH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.MyxaH virus can do?

  • Executable code extraction
  • Compression (or decompression)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • A process created a hidden window
  • Sniffs keystrokes
  • Tries to unhook or modify Windows functions monitored by Cuckoo
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

marianavilla3008m.duckdns.org

How to determine Trojan-Ransom.Win32.MyxaH?


File Info:

crc32: 11C63843md5: 20e614b4be28c7345e5ee0b6dd01244cname: upload_filesha1: 7e44a76b4690110e14fc939f88086f73293f9dd1sha256: 213eecc6c8dcf62e5c6e49d8e9b66f99940a7ad4d20d7a5b228848838b66f45fsha512: 0a0744e58b9b777aa6631e8c125bccdba79ff14cf916cd8603b6568a48ee438943954203794be145e644a5174ffc88cd0efbfca4badd90a9aeaa51ed35cb19bcssdeep: 6144:uHfYbOCHHWkcBVGF/cDOzI1mZ1xehEbwvNCQh+cQWqrth69FdbiLszRwwkKV5h:ulCHEGFkCLxemxQw6qhgbUszRwEFtype: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

0: [No Data]

Trojan-Ransom.Win32.MyxaH also known as:

Elastic malicious (high confidence)
Cynet Malicious (score: 85)
McAfee Artemis!20E614B4BE28
Cylance Unsafe
CrowdStrike win/malicious_confidence_60% (W)
Alibaba Trojan:Win32/Injector.7bae330b
K7GW Trojan ( 0056c5aa1 )
K7AntiVirus Trojan ( 0056c5aa1 )
Symantec ML.Attribute.HighConfidence
ESET-NOD32 Win32/Injector.EMZC
APEX Malicious
Kaspersky HEUR:Trojan-Ransom.Win32.MyxaH.gen
Comodo .UnclassifiedMalware@0
Invincea heuristic
FireEye Generic.mg.20e614b4be28c734
Sophos Mal/Generic-S
Ikarus Win32.Outbreak
Jiangmin TrojanDownloader.Generic.bful
Avira TR/Injector.rrgbs
Microsoft Trojan:Win32/Wacatac.C!ml
ZoneAlarm HEUR:Trojan-Ransom.Win32.MyxaH.gen
GData Win32.Packed.Kryptik.FV6I4P
AhnLab-V3 Malware/Win32.RL_Generic.R339226
Malwarebytes Trojan.Injector
Tencent Win32.Trojan.Myxah.Hrfi
SentinelOne DFI – Suspicious PE
Webroot W32.Trojan.Gen
AVG FileRepMalware
Cybereason malicious.b46901

How to remove Trojan-Ransom.Win32.MyxaH?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Should I remove “Trojan.Agent.Delf.RVB”?

The Trojan.Agent.Delf.RVB is considered dangerous by lots of security experts. When this infection is active,…

14 mins ago

IL:Trojan.MSILZilla.124965 malicious file

The IL:Trojan.MSILZilla.124965 is considered dangerous by lots of security experts. When this infection is active,…

19 mins ago

Trojan.Generic.35601204 removal

The Trojan.Generic.35601204 is considered dangerous by lots of security experts. When this infection is active,…

43 mins ago

AIT:Trojan.Nymeria.6000 information

The AIT:Trojan.Nymeria.6000 is considered dangerous by lots of security experts. When this infection is active,…

49 mins ago

MSILHeracles.68689 (B) removal instruction

The MSILHeracles.68689 (B) is considered dangerous by lots of security experts. When this infection is…

54 mins ago

Zusy.547004 removal guide

The Zusy.547004 is considered dangerous by lots of security experts. When this infection is active,…

54 mins ago