Trojan-Ransom.Win32.PornoAsset.ddpi (file analysis)

The Trojan-Ransom.Win32.PornoAsset.ddpi is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.PornoAsset.ddpi virus can do?

Presents an Authenticode digital signature
Creates RWX memory
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Ransom.Win32.PornoAsset.ddpi?


File Info:
crc32: 6548205A
md5: 1604a6af3cc97a3826cd6aa84e1cead6
name: 1604A6AF3CC97A3826CD6AA84E1CEAD6.mlw
sha1: 09dca2f03c5592e0df33bc01d6e2e61d3a191082
sha256: c810822c481b05f6d55ca58048c756e429aa103a3148cb3feeffaab22695a860
sha512: cdece9b1dc059dbcf4e914ccada9dbb8672522eea0f5677f6dcd822a61dd57bb480a59c16020a5a5a867d2e6bafd4f70a19d8ff150e0791521bea2f42cfdf888
ssdeep: 6144:+UTxxIXB0iS0GaYApLhTrKUfdOtvHtKrr4Kdyj7XKUTa8m23d7KJqKWMJcjo+eCq:+UtNL8YcL5YHaI7XHgZQKhJgeCmdh
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 2006 Microsoft Corporation.  All rights reserved.
InternalName: dwtrig20.exe
FileVersion: 12.0.4518.1014
CompanyName: Microsoft Corporation
LegalTrademarks1: Microsoftxae is a registered trademark of Microsoft Corporation.
LegalTrademarks2: Windowsxae is a registered trademark of Microsoft Corporation.
ProductName: Watson Subscriber for SENS Network Notifications
ProductVersion: 12.0.4518.1014
FileDescription: Watson Subscriber for SENS Network Notifications
OriginalFilename: dwtrig20.exe
Translation: 0x0000 0x04e4

Trojan-Ransom.Win32.PornoAsset.ddpi also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.PornoAsset.j!c
Elastic	malicious (high confidence)
ALYac	Trojan.GenericKD.46806303
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (D)
Alibaba	Ransom:Win32/PornoAsset.80b04678
Cyren	W32/Sality.BF.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.PornoAsset.ddpi
BitDefender	Trojan.GenericKD.46806303
NANO-Antivirus	Virus.Win32.Gen.ccmw
MicroWorld-eScan	Trojan.GenericKD.46806303
Ad-Aware	Trojan.GenericKD.46806303
Sophos	Generic ML PUA (PUA)
FireEye	Generic.mg.1604a6af3cc97a38
Emsisoft	Trojan.GenericKD.46806303 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Patched.Ren.Gen
eGambit	Unsafe.AI_Score_77%
GData	Trojan.GenericKD.46806303
McAfee	Artemis!1604A6AF3CC9
MAX	malware (ai score=84)
Yandex	Trojan.Kazy!u+xnKhrX6W0
Ikarus	Trojan.Patched
AVG	FileRepMalware
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.PornoAsset.HgIASacA

How to remove Trojan-Ransom.Win32.PornoAsset.ddpi?

Trojan-Ransom.Win32.PornoAsset.ddpi removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan-Ransom.Win32.PornoAsset.ddpi (file analysis)