Trojan.RansomKD.6247185 (file analysis)

The Trojan.RansomKD.6247185 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.RansomKD.6247185 virus can do?

Reads data out of its own binary image
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.RansomKD.6247185?


File Info:
crc32: 0ED8BA48
md5: dfaf407058ad367af57290862e76a8ca
name: DFAF407058AD367AF57290862E76A8CA.mlw
sha1: 39c595d4cd9f451e2780fb36692a6b4e4eb889b3
sha256: 74fd72ed46d7c42f05ef894ddbf5e4b5e592c4f481a0d4641342b4bd3e242ebe
sha512: 7834bd07b7276204d7d5afa1256be2fb0b5eec8f22c5162cbf55e426803fcaddff775ee6a8cef195aba5de2d973fa81954eeb13625ccffca47b0c87885fdb9d6
ssdeep: 96:mDw72YvEG//4BH3L6y+gccVyYF+IiKtkNo6SCRG/tcs2vKPQzUPpPrmfm:mE2k4B76y+WyY9kMLtdDPQahr8m
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2016
InternalName: zfgzgzyylt.exe
FileVersion: 1.0.0.1
CompanyName: TODO: 
ProductName: TODO: 
ProductVersion: 1.0.0.1
FileDescription: TODO: 
OriginalFilename: rgergerge.exe
Translation: 0x040c 0x04b0

Trojan.RansomKD.6247185 also known as:

Lionic	Trojan.Win32.Generic.4!c
Cynet	Malicious (score: 99)
ALYac	Trojan.RansomKD.6247185
Cylance	Unsafe
Alibaba	Trojan:Win32/StartPage.f0fab8af
Cybereason	malicious.058ad3
Symantec	Trojan Horse
ESET-NOD32	a variant of Generik.NIYLSUI
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Trojan.RansomKD.6247185
NANO-Antivirus	Trojan.Win32.StartPage.ewkmtt
MicroWorld-eScan	Trojan.RansomKD.6247185
Tencent	Win32.Trojan.Ransomkd.Wvut
Ad-Aware	Trojan.RansomKD.6247185
Sophos	Mal/Generic-S
Comodo	Malware@#gsbht37jd121
BitDefenderTheta	Gen:NN.ZexaF.34170.au0@aKlzjrfm
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	RDN/Generic StartPage.cf
FireEye	Trojan.RansomKD.6247185
Emsisoft	Trojan.RansomKD.6247185 (B)
Avira	HEUR/AGEN.1102646
Microsoft	Trojan:Win32/Ymacco.AA74
GData	Trojan.RansomKD.6247185
AhnLab-V3	Malware/Win32.Generic.C2383746
McAfee	RDN/Generic StartPage.cf
MAX	malware (ai score=100)
Panda	Trj/GdSda.A
Rising	Trojan.Generic@ML.84 (RDML:x5XvVN5UfTUmsgL/7XSOIA)
Ikarus	Trojan.SuspectCRC
Fortinet	Generik.NIYLSUI!tr
AVG	Win32:Malware-gen

How to remove Trojan.RansomKD.6247185?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.RansomKD.6247185 (file analysis)