Categories: RansomTrojan

Trojan-Ransom.Win32.Wanna.amet removal tips

The Trojan-Ransom.Win32.Wanna.amet is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Wanna.amet virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (3 unique times)
A process attempted to delay the analysis task.
At least one IP Address, Domain, or File Name was found in a crypto call
Performs some HTTP requests
Attempts to modify desktop wallpaper
Installs itself for autorun at Windows startup
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

www.iuqssfsodp9ifjaposdfjhgosurijfaewrwergwea.com

www.youtube.com

ocsp.pki.goog

How to determine Trojan-Ransom.Win32.Wanna.amet?


File Info:
crc32: 692307B0md5: e6c18ad94bb12c0f35a4533223a43e56name: E6C18AD94BB12C0F35A4533223A43E56.mlwsha1: 83853fc0f727de262f4252b75e4fc442e95379ddsha256: b427e0dc86fd457ecab29c209c4a27fe32c168cea560eb8f0c4c96d5f060be69sha512: 64578a25f2aa02628cda1df24205732df7c63a4ca975a08ef4bddbfac48367fa1b70868f5969f8bd4964c735b88fb9ec5d4fa7835da1f04e7c92f2160ef4961dssdeep: 12288:snmtxD3F00wOKnXmxpa4uUXVrGHGlirIN7okSf2tg8Fc1NU:lXNKnWxpa4ua9/oHMc1NUtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0LegalCopyright:  InternalName: emtecFileVersion: 1.00CompanyName:  LegalTrademarks:  ProductName:  ProductVersion: 1.00OriginalFilename: emtec.exe

Trojan-Ransom.Win32.Wanna.amet also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	P2PWorm ( 0052362d1 )
ALYac	Trojan.GenericKD.12789156
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	Trojan:Win32/dark.ali1000040
K7GW	P2PWorm ( 0052362d1 )
Cybereason	malicious.94bb12
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/VB.OTF
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Wanna.amet
BitDefender	Trojan.GenericKD.12789156
NANO-Antivirus	Trojan.Win32.Wanna.exirqe
MicroWorld-eScan	Trojan.GenericKD.12789156
Tencent	Win32.Trojan.Raas.Auto
Ad-Aware	Trojan.GenericKD.12789156
Sophos	Mal/VB-GI
Comodo	Malware@#2zdpo052o9mhn
BitDefenderTheta	Gen:NN.ZevbaF.34790.Vn0@a04R8ahi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Trojan.tz
FireEye	Generic.mg.e6c18ad94bb12c0f
Emsisoft	Trojan-Ransom.Filecoder (A)
Avira	HEUR/AGEN.1122147
Microsoft	Ransom:Win32/Wadhrama.B
Arcabit	Trojan.Generic.DC325A4
AegisLab	Trojan.Win32.Wanna.j!c
ZoneAlarm	Trojan-Ransom.Win32.Wanna.amet
GData	Trojan.GenericKD.12789156
TACHYON	Ransom/W32.VB-WannaCry.1822720
McAfee	Artemis!E6C18AD94BB1
MAX	malware (ai score=96)
VBA32	BScope.Trojan.Dynamer
Malwarebytes	Malware.AI.3688842831
Panda	Trj/GdSda.A
Ikarus	Worm.Win32.VB
Fortinet	W32/VB.GI!worm
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Wadhrama.HgIASSkA