Categories: RansomTrojan

About “UDS:Trojan-Ransom.Win32.CryFile.bks” infection

The UDS:Trojan-Ransom.Win32.CryFile.bks is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What UDS:Trojan-Ransom.Win32.CryFile.bks virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine UDS:Trojan-Ransom.Win32.CryFile.bks?


File Info:
name: 14920A47C2E4D6F50D7D.mlwpath: /opt/CAPEv2/storage/binaries/41d92b717d11c9417cd2c3185752ca3ce0e06a3959196fdb11502a2c436282e9crc32: 720F8722md5: 14920a47c2e4d6f50d7db04c8cf97919sha1: 0513e5543ded59bec012705c43c8be252c20694asha256: 41d92b717d11c9417cd2c3185752ca3ce0e06a3959196fdb11502a2c436282e9sha512: 90038ee085ff15708c6a93b500f909ed9acbdba33854d0880307847caa964eed551a5f342ea3700eb2169d12477421d1ddd21b31eeab014b74726227d3dccaa0ssdeep: 49152:cIAEbdTr/zTFnRg3+rl26N+iwqdQFwo9Lqvc3uDOE6HnBnIY5gnU:aEJH/VR6+LN+iwh/Lawl5gUtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D40622C2F59A7C55D043853AB13DB72406AECF620BA9CA9E3E29F11C8EF36443950D5Esha3_384: cb55d372bf6957da6757a4687672f2b0acc931082c29fa06d87f4f47b0c9872e6c8a897c11749dafe43758866ed0f7efep_bytes: 558bec6aff68886d4000689a51400064timestamp: 2008-09-25 09:08:46
Version Info:
Comments: CompanyName: FileDescription: 读书宝－网上读书的好工具FileVersion: 0, 9, 0, 0InternalName: 读书宝安装程序LegalCopyright: 版权所有 (C) 2008 读书宝网络LegalTrademarks: OriginalFilename: finesetup.EXEPrivateBuild: 2008-7-10ProductName: 读书宝安装程序ProductVersion: 0, 9, 0, 0SpecialBuild: Translation: 0x0804 0x04b0

UDS:Trojan-Ransom.Win32.CryFile.bks also known as:

Bkav	W32.AIDetectMalware
FireEye	Generic.mg.14920a47c2e4d6f5
McAfee	Artemis!14920A47C2E4
Cylance	unsafe
Cybereason	malicious.43ded5
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan-Ransom.Win32.CryFile.bks
DrWeb	Trojan.Siggen6.33634
VIPRE	Gen:Trojan.Heur.JP.cq0@aqs!Xkcb
McAfee-GW-Edition	BehavesLike.Win32.Dropper.wc
Trapmine	suspicious.low.ml.score
SentinelOne	Static AI – Suspicious PE
Xcitium	TrojWare.Win32.TrojanDownloader.Small.GW@1igsbl
ZoneAlarm	UDS:Trojan-Ransom.Win32.CryFile.bks
ALYac	Gen:Trojan.Heur.JP.cq0@aqs!Xkcb
Fortinet	W32/PossibleThreat
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (W)