Ransom Trojan

What is “Trojan-Ransom.Win32.Rack.vho”?

Malware Removal

The Trojan-Ransom.Win32.Rack.vho is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.Rack.vho virus can do?

  • Network activity detected but not expressed in API logs

How to determine Trojan-Ransom.Win32.Rack.vho?


File Info:

crc32: 4FDA985B
md5: 89b21c5f375fde4f3a1c9cd26b67250b
name: 89B21C5F375FDE4F3A1C9CD26B67250B.mlw
sha1: 48271ea76e08912ffb917a6c2a76034a066c3eee
sha256: 3ed2c7c4f7153eef8fd894beb8f95ae1df70604b0108f57a63379a990f4bc6a1
sha512: 61b4af2f2d2269ba0c1a08a3f88f4d517e6aaaf8f7de18fe311ffb1a56a07496eb57ef0f2bb4d18fab891f8a1099f3c4b5a05dcd920946997a62a934f453ee5a
ssdeep: 3072:OFM0tF+Skt3nDr2YBg6crZZq2qmdBVYQmrrOfrTpNYV5ytkHmB6JeFsZvuATtyA:Z0tFwtzBg6c9I2xdwQm+TTKZvZLHX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Ransom.Win32.Rack.vho also known as:

ALYacTrojan.GenericKD.37140048
APEXMalicious
AvastFileRepMalware
KasperskyHEUR:Trojan-Ransom.Win32.Rack.vho
BitDefenderTrojan.GenericKD.37140048
MicroWorld-eScanTrojan.GenericKD.37140048
Ad-AwareTrojan.GenericKD.37140048
BitDefenderThetaGen:NN.ZexaE.34758.nuW@ay@qe8li
McAfee-GW-EditionBehavesLike.Win32.Multiplug.dh
FireEyeTrojan.GenericKD.37140048
EmsisoftTrojan.GenericKD.37140048 (B)
AegisLabTrojan.Win32.Rack.j!c
ZoneAlarmHEUR:Trojan-Ransom.Win32.Rack.vho
GDataTrojan.GenericKD.37140048
AhnLab-V3Trojan/Win.Generic.C4535036
McAfeeArtemis!89B21C5F375F
MAXmalware (ai score=88)
RisingTrojan.Generic@ML.86 (RDML:1ib5g1iucvzJOdnSJe4qPQ)
FortinetW32/Rack.VHO!tr
AVGFileRepMalware

How to remove Trojan-Ransom.Win32.Rack.vho?

Trojan-Ransom.Win32.Rack.vho removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment