Ransom Trojan

Trojan-Ransom.Win32.PornoAsset.ddnv removal guide

Malware Removal

The Trojan-Ransom.Win32.PornoAsset.ddnv is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.PornoAsset.ddnv virus can do?

  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.PornoAsset.ddnv?


File Info:

crc32: A649FCB5
md5: e0a4a36da33f56f3bd65ffe2f90272ce
name: E0A4A36DA33F56F3BD65FFE2F90272CE.mlw
sha1: 67d3e48d9adb9303f73f46ef228883340d1fb79e
sha256: d4e5f55b40faa9a1000784e0cff912c85f4b3ad4310c34e53602212afe24c908
sha512: 63932ca3bd800695402ac36a18f9ceeabb646b34489cb53d82cb01755a2c824f6f523168388488a2948082cb53f51d295b4934d7b30615eb9d87ee314a7f2a28
ssdeep: 6144:c0AzTQxIbzkiZ4WhWdGn4SLXKb5RHRO4r4Kdyj7XKUTa8m23d7KJqKWMJcjo+eC:c0gU3iYdnBLHVI7XHgZQKhJgeCm
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 2006 Microsoft Corporation. All rights reserved.
InternalName: ODSERV
FileVersion: 12.0.6606.1000
CompanyName: Microsoft Corporation
LegalTrademarks1: Microsoftxae is a registered trademark of Microsoft Corporation.
LegalTrademarks2: Windowsxae is a registered trademark of Microsoft Corporation.
ProductName: Office Diagnostics Service
ProductVersion: 12.0.6606.1000
FileDescription: Microsoft Office Diagnostics
OriginalFilename: ODServ.exe
Translation: 0x0000 0x04e4

Trojan-Ransom.Win32.PornoAsset.ddnv also known as:

LionicTrojan.Win32.PornoAsset.4!c
Elasticmalicious (high confidence)
CylanceUnsafe
AlibabaRansom:Win32/PornoAsset.fdfca94c
Cybereasonmalicious.d9adb9
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastFileRepMalware
KasperskyTrojan-Ransom.Win32.PornoAsset.ddnv
TencentWin32.Trojan.Pornoasset.Ajbg
SophosMal/Generic-S
ComodoMalware@#1j15n9j1k37l0
McAfee-GW-EditionBehavesLike.Win32.Dropper.tz
FireEyeGeneric.mg.e0a4a36da33f56f3
SentinelOneStatic AI – Malicious PE
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!E0A4A36DA33F
YandexTrojan.PornoAsset!/UeVnGGYzY8
FortinetW32/PornoAsset.DDNV!tr
AVGFileRepMalware

How to remove Trojan-Ransom.Win32.PornoAsset.ddnv?

Trojan-Ransom.Win32.PornoAsset.ddnv removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment