Ransom Trojan

What is “Trojan.RansomKD.12390132”?

Malware Removal

The Trojan.RansomKD.12390132 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.RansomKD.12390132 virus can do?

  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Deletes its original binary from disk
  • Exhibits possible ransomware file modification behavior
  • Network activity detected but not expressed in API logs
  • Clears Windows events or logs
  • Clears web history
  • Uses suspicious command line tools or Windows utilities

How to determine Trojan.RansomKD.12390132?


File Info:

crc32: F0EA7E30
md5: 45553753db3a5c5ce5fa41bfae5e95fd
name: 45553753DB3A5C5CE5FA41BFAE5E95FD.mlw
sha1: 43e2e9c3689d361bc8a0f882485d269182ef0e6a
sha256: 09f015cc9cd6e28c691bef92d79747a9ab49806edec25d8c16e9b597c3928e04
sha512: 75b26880d8ac54981f388b95c5d57de53f1d5998ac513d2565c9a3bc73e1a727959d9e1775705ae52a2d31b317ffc5e9c14172dfe074ed76e027ddcd254ad838
ssdeep: 3072:Zr3u1wVtulaOpe//h5KFChxeVQPr3XplqRyVVW3iXYmtihM+0vSUCRsRukcbbXw4:53uYOS9dPr358y3WwqGvSUZRvg7Skd
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.RansomKD.12390132 also known as:

BkavW32.AIDetect.malware2
DrWebTrojan.KillProc.50363
CynetMalicious (score: 100)
ALYacTrojan.RansomKD.12390132
CylanceUnsafe
CrowdStrikewin/malicious_confidence_60% (D)
AlibabaRansom:Win32/KillFiles.a8ce3dbd
Cybereasonmalicious.3db3a5
CyrenBAT/KillFil.BQ
SymantecTrojan.Gen.MBT
ESET-NOD32BAT/KillFiles.NKC
APEXMalicious
AvastFileRepMalware
KasperskyTrojan-Ransom.Win32.Gen.flf
BitDefenderTrojan.RansomKD.12390132
NANO-AntivirusTrojan.Win32.KillProc.esuwss
MicroWorld-eScanTrojan.RansomKD.12390132
TencentWin32.Trojan.Gen.Pbpd
Ad-AwareTrojan.RansomKD.12390132
SophosMal/Generic-S
ComodoMalware@#it9l8karhrjh
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Dropper.dh
FireEyeGeneric.mg.45553753db3a5c5c
EmsisoftTrojan.RansomKD.12390132 (B)
JiangminBackdoor.Xtreme.blw
MicrosoftTrojan:Win32/Tiggre!rfn
AegisLabTrojan.Win32.Gen.4!c
ZoneAlarmTrojan-Ransom.Win32.Gen.flf
GDataTrojan.RansomKD.12390132
AhnLab-V3Trojan/Win32.Gen
McAfeeArtemis!45553753DB3A
MAXmalware (ai score=76)
PandaTrj/CI.A
IkarusTrojan.BAT.KillFiles
MaxSecureTrojan.Malware.300983.susgen
FortinetBAT/KillFiles.NKB!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Trojan.RansomKD.12390132?

Trojan.RansomKD.12390132 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment