Trojan.RansomKD.12449821 removal

The Trojan.RansomKD.12449821 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.RansomKD.12449821 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.RansomKD.12449821?


File Info:
crc32: C5826999
md5: b3b9d51062a9aa7356efc96ee2ab734a
name: B3B9D51062A9AA7356EFC96EE2AB734A.mlw
sha1: d6f9dce540d1fb95a83bc17fed9e792b70b826a7
sha256: 30961ac7a04a50d7b26b5e44cfc91e2b37ba12b5f8c8a1748c586b4eeba38cf8
sha512: f730f1830689d24072d4e91abc7143a13357e3b572e3041dbc5fbbaec6ab5f193a0b636cf0daf1f2a68193b4861944298606f0822dd20d2d5d9a33c2fbb45f19
ssdeep: 24576:k7bl0DY2LNX9RK3b0L6CsOgygLcBxbTlJrGwMNZW5FDvoFtdN4oR09Ewvbx4AVCC:k75BEe3bJwJNvMNk5FDvoxNiiO4A5Xf
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion:                     
CompanyName: Cyberland                                                   
Comments: This installation was built with Inno Setup.
ProductName: Cyber Prot                                                  
ProductVersion: 2.1                                               
FileDescription: Cyber Prot Setup                                            
Translation: 0x0000 0x04b0

Trojan.RansomKD.12449821 also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Trojan.RansomKD.12449821
FireEye	Trojan.RansomKD.12449821
ALYac	Trojan.RansomKD.12449821
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Zerber.usrg
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.RansomKD.12449821
K7GW	Riskware ( 0040eff71 )
Symantec	Trojan.Gen.7
Kaspersky	Trojan-Ransom.Win32.Zerber.gckp
Alibaba	Ransom:Win32/Zerber.65846724
AegisLab	Trojan.Win32.Zerber.j!c
Tencent	Win32.Trojan.Agent.Pfsz
Ad-Aware	Trojan.RansomKD.12449821
Emsisoft	Trojan.RansomKD.12449821 (B)
Zillya	Trojan.Agent.Win32.759040
McAfee-GW-Edition	BehavesLike.Win32.AdwareFileTour.tc
Sophos	Generic PUA NG (PUA)
Jiangmin	Trojan.Agent.cird
MAX	malware (ai score=97)
Microsoft	Trojan:Win32/Ymacco.AA30
Arcabit	Trojan.RansomKD.DBDF81D
ZoneAlarm	Trojan-Ransom.Win32.Zerber.gckp
GData	Trojan.RansomKD.12449821
McAfee	Artemis!B3B9D51062A9
VBA32	Hoax.Agent
Malwarebytes	Generic.Malware/Suspicious
Ikarus	Trojan-RansomKD
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Agent.AAFK!tr
Cybereason	malicious.062a9a
Paloalto	generic.ml

How to remove Trojan.RansomKD.12449821?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.RansomKD.12449821 removal