Categories: Trojan

Trojan:Win32/GandCrab.C removal tips

The Trojan:Win32/GandCrab.C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/GandCrab.C virus can do?

Executable code extraction
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Unconventionial language used in binary resources: Danish
The binary likely contains encrypted or compressed data.
Collects information to fingerprint the system

Related domains:

z.whorecord.xyz

a.tomx.xyz

adrespotokano.info

How to determine Trojan:Win32/GandCrab.C?


File Info:
crc32: 31337561md5: 3e92bd40cd0b6c21d5c1e775440e25f6name: 3E92BD40CD0B6C21D5C1E775440E25F6.mlwsha1: 14d7f681cf9c7ad5eb9b8a9cea433c12c7703621sha256: a186cc702afbb2fc7e29307c548544979075adfe6dabb7008507fb12b68e2cbcsha512: 7f27dce1b2dc091eae4b775cfeda1920fa086dfa7a4062d41e62ea0b273f695a585464f98c6265e506ddf1ee61712bd45e9a9bf86544cc1823a376273c4ef0d6ssdeep: 3072:UHayCCcRz7DQKH+8gnftLDSWxBNFR8NqMoZ2CKrpuSAh+0I8kGtK:UrcRzwY+zVHBXt8NNCeMSAh+eBKtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
ProductVersion: 2.13.5.66

Trojan:Win32/GandCrab.C also known as:

Bkav	W32.AIDetectGBM.malware.01
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.23950
MicroWorld-eScan	Trojan.Mint.Jamg.C
FireEye	Generic.mg.3e92bd40cd0b6c21
CAT-QuickHeal	Trojan.Chapak.ZZ5
McAfee	Trojan-FPST!3E92BD40CD0B
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Generic.4!c
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00516fdf1 )
BitDefender	Trojan.Mint.Jamg.C
K7GW	Trojan ( 00516fdf1 )
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZexaF.34590.nu0@aapm0DgG
Cyren	W32/GandCrab.AN.gen!Eldorado
Symantec	Packed.Generic.525
TrendMicro-HouseCall	TSPY_EMOTET.SMB1
Avast	Win32:MalwareX-gen [Trj]
ClamAV	Win.Packed.addsub-6963063-0
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	Trojan:Win32/GandCrab.e240d2ca
NANO-Antivirus	Trojan.Win32.Stealer.fezgkg
Ad-Aware	Trojan.Mint.Jamg.C
Sophos	Mal/Generic-S + Mal/GandCrab-B
Comodo	TrojWare.Win32.Ransom.Gandcrab.GK@81g6wg
F-Secure	Heuristic.HEUR/AGEN.1121566
Zillya	Trojan.GenericKD.Win32.161235
TrendMicro	TSPY_EMOTET.SMB1
McAfee-GW-Edition	BehavesLike.Win32.Trojan.dc
Emsisoft	Trojan.Mint.Jamg.C (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.PSW.Coins.aaz
MaxSecure	Ransomeware.CRAB.gen
Avira	HEUR/AGEN.1121566
Antiy-AVL	Trojan[PSW]/Win32.Coins
Microsoft	Trojan:Win32/GandCrab.C
Arcabit	Trojan.Mint.Jamg.C
SUPERAntiSpyware	Trojan.Agent/Gen-Kryptik
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Win32.Trojan-Ransom.GandCrab.N
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/Gandcrab04.Exp
Acronis	suspicious
VBA32	BScope.TrojanPSW.Coins
ALYac	Trojan.Mint.Jamg.C
MAX	malware (ai score=95)
Malwarebytes	MachineLearning/Anomalous.100%
Panda	Trj/Genetic.gen
APEX	Malicious
ESET-NOD32	a variant of Win32/Kryptik.GIOK
Rising	Trojan.Kryptik!1.B3A9 (CLASSIC)
Yandex	Trojan.PWS.Coins!TeCsYZewvvM
Ikarus	Trojan-Dropper.Win32.Danabot
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Kryptik.GIRO!tr
AVG	Win32:MalwareX-gen [Trj]
Cybereason	malicious.0cd0b6
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.PSW.7bf