The Win32:Ransom-ZO [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.
What Win32:Ransom-ZO [Trj] virus can do?
File Info:
name: 36B68713B9BCA27F26CD.mlwpath: /opt/CAPEv2/storage/binaries/5b0c5fa9d59e440ac231f497e37fc43cd1b34a9c60da103b29be4cd245f9506acrc32: 7BE30CE9md5: 36b68713b9bca27f26cd3e6af3a650d0sha1: dde6a3a9fbff6cdf81d12ab95714c872d910a3basha256: 5b0c5fa9d59e440ac231f497e37fc43cd1b34a9c60da103b29be4cd245f9506asha512: f1f5537b969c266ed3910b704bf949032ec2973a46eda7372aaa4159d2608624fd768e89ea8a0b69f1a72666d1f11447cd1319aef5fd68e87a372b242ce48c35ssdeep: 3072:hr0GTskqdmb6fo6fb8+9pMCtCHVGXi4fEvezI9WUk0b96Z2dKJXT8:h0GeEP6T8vCtCHV/4fEGzP056Z2UJtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1FE441503DB9B3662F4690E3910FC0B1ED719BA043F178BE7A519797AD66B3C22791348sha3_384: 8d4538e916a2a64e1818934c79e6017a15e65eb581faa6d5256d9f17ff4c96db89ab60a3624781a14bb70e2b93c5055aep_bytes: 558bec83c4dc535633c08945dc8945ectimestamp: 1992-06-19 22:22:17Version Info:
Comments: Novell BorderManagerCompanyName: www.novell.comFileDescription: Novell BorderManagerLegalCopyright: Copyright (c) 2009 novell.com All Rights ReservedLegalTrademarks: novell.comProductName: Novell BorderManagerFileVersion: 6.2.0ProductVersion: 6.2.0InternalName: Novell BorderManagerOriginalFilename: bordermanager.exeResourcesEditedWith: Restorator 2007 TrialResourceEditorWWW: http://www.bome.com/Restorator/Translation: 0x0409 0x04b0
Bkav | W32.AIDetectMalware |
Lionic | Trojan.Win32.Generic.4!c |
tehtris | Generic.Malware |
MicroWorld-eScan | Gen:Heur.Zygug.6 |
FireEye | Generic.mg.36b68713b9bca27f |
CAT-QuickHeal | Trojan.GenericIH.S11740496 |
ALYac | Gen:Heur.Zygug.6 |
Malwarebytes | Malware.Heuristic.1001 |
Zillya | Trojan.Foreign.Win32.2094 |
Sangfor | Trojan.Win32.Save.a |
K7AntiVirus | Trojan ( 7000000f1 ) |
Alibaba | Worm:Win32/Dorkbot.aee092b8 |
K7GW | Trojan ( 7000000f1 ) |
Cybereason | malicious.3b9bca |
VirIT | Trojan.Win32.Foreign.UBT |
Cyren | W32/S-9af908cd!Eldorado |
Elastic | malicious (high confidence) |
ESET-NOD32 | Win32/Dorkbot.B |
APEX | Malicious |
Paloalto | generic.ml |
ClamAV | Win.Trojan.Dorkbot-8011204-0 |
BitDefender | Gen:Heur.Zygug.6 |
NANO-Antivirus | Trojan.Win32.NgrBot.bfnyom |
Avast | Win32:Ransom-ZO [Trj] |
Sophos | Mal/Generic-S |
F-Secure | Worm.WORM/Dorkbot.I.427 |
DrWeb | BackDoor.IRC.NgrBot.42 |
VIPRE | Gen:Heur.Zygug.6 |
TrendMicro | TSPY_RANSOM_CA25019E.TOMC |
McAfee-GW-Edition | W32/Dorkbot!36B68713B9BC |
Trapmine | malicious.high.ml.score |
Emsisoft | Gen:Heur.Zygug.6 (B) |
SentinelOne | Static AI – Malicious PE |
GData | Gen:Heur.Zygug.6 |
Jiangmin | Trojan/Foreign.bhc |
Detected | |
Avira | WORM/Dorkbot.I.427 |
MAX | malware (ai score=100) |
Antiy-AVL | Trojan[Ransom]/Win32.Foreign |
Xcitium | Malware@#252pl5papyk7b |
Arcabit | Trojan.Zygug.6 |
ViRobot | Trojan.Win32.A.Foreign.192512.B |
ZoneAlarm | HEUR:Trojan.Win32.Generic |
Microsoft | Trojan:Win32/DorkBot.DU |
Cynet | Malicious (score: 100) |
AhnLab-V3 | Trojan/Win32.Xema.R47515 |
Acronis | suspicious |
BitDefenderTheta | Gen:NN.ZelphiF.36196.qG0@a0FcoFlG |
VBA32 | BScope.Malware-Cryptor.Oop |
Cylance | unsafe |
Panda | Generic Malware |
TrendMicro-HouseCall | TSPY_RANSOM_CA25019E.TOMC |
Tencent | Win32.Trojan.Generic.Gajl |
Yandex | Trojan.GenAsa!E3+PXwRutxc |
Ikarus | Gen:Heur |
Fortinet | W32/Injector.YWU!tr |
AVG | Win32:Ransom-ZO [Trj] |
DeepInstinct | MALICIOUS |
CrowdStrike | win/malicious_confidence_100% (W) |
The VHO:RiskTool.Win32.ProcPatcher is considered dangerous by lots of security experts. When this infection is active,…
The Lazy.280688 is considered dangerous by lots of security experts. When this infection is active,…
The Malware.AI.3454153382 is considered dangerous by lots of security experts. When this infection is active,…
The Midie.100502 is considered dangerous by lots of security experts. When this infection is active,…
The Malware.AI.3915743673 is considered dangerous by lots of security experts. When this infection is active,…
The Malware.AI.2034266737 is considered dangerous by lots of security experts. When this infection is active,…