Ransom Trojan

Trojan-Ransom.Win32.PornoAsset.dcmf removal guide

Malware Removal

The Trojan-Ransom.Win32.PornoAsset.dcmf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.PornoAsset.dcmf virus can do?

  • Creates RWX memory
  • Reads data out of its own binary image
  • Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.PornoAsset.dcmf?


File Info:

crc32: 1BF5C13C
md5: dffa3208ed76056add3137b868fa6476
name: DFFA3208ED76056ADD3137B868FA6476.mlw
sha1: 97febff1eb9d91fd62693a04f4941a6cd3130dc7
sha256: 8ee267a5ef952db3e4f7a70d521c872ae2be99183a3fd5720fc8ff7fb233d6db
sha512: 12c2d4bf564f265dfd6d2b594ae176a0f5befbab31a042771eb3c8c76cbee60a034056e1d0c9723569eb5ac8d826b5f58ad293d19a47e60a34dc85fe526abac1
ssdeep: 12288:RyqeAO+9bokf+qLrBSohBCsYuQzqQkl/xJ+NNhaSHDBEl5KLL:R3eAO+hXf+qvXrcqQG7iNUSHDBE8L
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.PornoAsset.dcmf also known as:

ClamAVWin.Trojan.Vbiframe-40
CrowdStrikewin/malicious_confidence_60% (W)
KasperskyTrojan-Ransom.Win32.PornoAsset.dcmf
AlibabaRansom:Win32/PornoAsset.36c3ba01
ViRobotTrojan.Win32.A.Clicker.839680
TencentWin32.Trojan.Pornoasset.Wxru
SophosGeneric PUA JH (PUA)
BitDefenderThetaGen:NN.ZexaF.34678.UuW@aexmCwni
McAfee-GW-EditionBehavesLike.Win32.BadFile.bh
MicrosoftPUA:Win32/Presenoker
AegisLabTrojan.Win32.PornoAsset.j!c
TACHYONRansom/W32.PornoAsset.757760.B
McAfeeArtemis!DFFA3208ED76
MalwarebytesMachineLearning/Anomalous.100%
RisingRansom.PornoAsset!8.6AA (CLOUD)
Qihoo-360Win32/Ransom.PornoAsset.HgIASS0A

How to remove Trojan-Ransom.Win32.PornoAsset.dcmf?

Trojan-Ransom.Win32.PornoAsset.dcmf removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment