Trojan:Win32/Ropest.J information

The Trojan:Win32/Ropest.J is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Ropest.J virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan:Win32/Ropest.J?


File Info:
crc32: 8FB9973D
md5: e3fba3f73154b2703d3a7d4378867923
name: E3FBA3F73154B2703D3A7D4378867923.mlw
sha1: 9068ace241e7245b01054f55fc357f2ce629ad3c
sha256: bd00d15e2e6e77097f6d159a95a4460001a07e038dbc1e79b03e747af7c497d9
sha512: 3c67907e2ff3f2f85a3f395a619707416fcf445c41d5641cb1d282d3a997d3e514634654cc39b24782e58fedbd4659459a6ca4a34a318052ffaac750ecb46982
ssdeep: 3072:yYIs55Fu6fFF0/EM0qXrTzB0Tx8USKZZEqFIrIvekxy3LpWkdqfR/9iLan5:yO5/0cM0irTlASi8uy1W4ki8
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Busyness Eros But
InternalName: suspensor
FileVersion: 11.5
CompanyName: Busyness Eros But
ProductName: suspensor mento phoo
ProductVersion: 11.5
FileDescription: suspensor cog scorny
OriginalFilename: suspensor.exe
Translation: 0x0409 0x04b0

Trojan:Win32/Ropest.J also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop6.42239
Cynet	Malicious (score: 100)
CAT-QuickHeal	Ransom.Cerber.A3
ALYac	Trojan.GenericKD.3267996
Cylance	Unsafe
Zillya	Trojan.Zerber.Win32.99
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Zerber.3040af84
K7GW	Trojan ( 004f7ebe1 )
K7AntiVirus	Trojan ( 004f7ebe1 )
Cyren	W32/Zerber.MSDT-5894
Symantec	Ransom.Cerber
ESET-NOD32	Win32/Filecoder.Cerber.B
Zoner	Trojan.Win32.42038
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Zerber.aqc
BitDefender	Trojan.GenericKD.3267996
NANO-Antivirus	Trojan.Win32.Samca.ftzcfi
ViRobot	Trojan.Win32.S.Ransom.173824
MicroWorld-eScan	Trojan.GenericKD.3267996
Tencent	Malware.Win32.Gencirc.116a3134
Ad-Aware	Trojan.GenericKD.3267996
Sophos	ML/PE-A + Troj/Ransom-DCT
Comodo	Malware@#3l906fo4wvi9k
BitDefenderTheta	AI:Packer.3D9ABAF11E
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_CERBER.IA
McAfee-GW-Edition	Ransom-O.c
FireEye	Generic.mg.e3fba3f73154b270
Emsisoft	Trojan.GenericKD.3267996 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Zerber.ee
Webroot	Trojan.Dropper.Gen
Avira	TR/Samca.14714870
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Ropest.J
AegisLab	Trojan.Win32.Buzus.kZ0o
GData	Win32.Trojan.Agent.R3IY77
TACHYON	Trojan/W32.Zerber.173824
AhnLab-V3	Trojan/Win32.Zerber.C1459421
McAfee	Ransom-O.c
MAX	malware (ai score=100)
VBA32	Malware-Cryptor.Limpopo
Malwarebytes	Malware.AI.2932676442
Panda	Trj/WLT.B
TrendMicro-HouseCall	Ransom_CERBER.IA
Rising	Ransom.Cerber!8.3058 (CLOUD)
Yandex	Trojan.GenAsa!tJiY/rlNdJM
Ikarus	Trojan.Win32.Filecoder
Fortinet	W32/Kryptik.EYKI!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Trojan:Win32/Ropest.J?

Trojan:Win32/Ropest.J removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X