Ransom • Trojan

Should I remove “UDS:Trojan-Ransom.Win32.Wanna”?

The UDS:Trojan-Ransom.Win32.Wanna is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What UDS:Trojan-Ransom.Win32.Wanna virus can do?

Authenticode signature is invalid

How to determine UDS:Trojan-Ransom.Win32.Wanna?


File Info:
name: BF9D345D5AB7612996B0.mlw
path: /opt/CAPEv2/storage/binaries/59efd82ffe01d16f97dfb650446695e6f5fa6eac4fc2fe6ae74b5b2414ce99b2
crc32: 0A957F97
md5: bf9d345d5ab7612996b0516625ae1462
sha1: ed23e506d8eb7418ea68267b06881bc57171532b
sha256: 59efd82ffe01d16f97dfb650446695e6f5fa6eac4fc2fe6ae74b5b2414ce99b2
sha512: da7531ba6aad38d2fedc53ce8a48edc9bd7c3fb656353e25cf19cd4335cf93da228df644e757d63da92fe220a94190eb0d2cbb7c4015f2cd90a6a433d2237157
ssdeep: 96:ChrAb4Q7HuLm3fnFt6WdeTyrMtk5x6+68qO7g8W:EAr7amPF5deurlx6+M8W
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T188955BE328C52DB7EA8C1A70E648B652A32086765B7DCB416BE54E26B702B360601537
sha3_384: 2c41fe985704e12180aa3025fe3b2b1b6bc96ada806fd424db4c99debd70d966d9f19247f1d3b7cbd00121ba6dcaea3b
ep_bytes: 00000000000000000000000000000000
timestamp: 2015-09-20 19:44:01

Version Info:
0: [No Data]

UDS:Trojan-Ransom.Win32.Wanna also known as:

Bkav	W32.AIDetect.malware2
Malwarebytes	MachineLearning/Anomalous.100%
Elastic	malicious (moderate confidence)
APEX	Malicious
Kaspersky	UDS:Trojan-Ransom.Win32.Wanna
SUPERAntiSpyware	Ransom.Crypt/Variant
Avast	FileRepMalware [Trj]
Zillya	Trojan.Wanna.Win32.1779
McAfee-GW-Edition	Artemis
Trapmine	suspicious.low.ml.score
Webroot	W32.Ransomware.Wcry
Microsoft	Trojan:Win32/Zpevdo.B
Cynet	Malicious (score: 100)
McAfee	Artemis!BF9D345D5AB7
VBA32	TrojanRansom.Wanna
Rising	Trojan.Generic@AI.84 (RDML:9ffw3ra3ttezSfdi/wofkQ)
Fortinet	W32/Wanna.AMIR!tr
AVG	FileRepMalware [Trj]
CrowdStrike	win/malicious_confidence_90% (W)

How to remove UDS:Trojan-Ransom.Win32.Wanna?

UDS:Trojan-Ransom.Win32.Wanna removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X