Malware

Should I remove “Win32:TeslaCrypt-AJ [Trj]”?

Malware Removal

The Win32:TeslaCrypt-AJ [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32:TeslaCrypt-AJ [Trj] virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Chinese (Singapore)
  • Attempts to repeatedly call a single API many times in order to delay analysis time

How to determine Win32:TeslaCrypt-AJ [Trj]?


File Info:

crc32: 4020FF3C
md5: 74a7c701f8df76070ac4df651ffcb03b
name: 74A7C701F8DF76070AC4DF651FFCB03B.mlw
sha1: 362a7ad393c1ee28079534a5f407b4aa79263ac5
sha256: 38edf6a104ed3779488b8be0e68b26a7c8adb848b1b458df5cb7887e4ce91ba1
sha512: 46b36be3d63055813e5a891d5e5e1dedd58d09ef71bd7eeb692430b7270218325d45b84454af26fbd5c86d96c7f2af6a09369b5f7c6fe60d17ced48f10cb7cfb
ssdeep: 6144:/6MvqOPk0xsPtERtGl+3IIfx4zD+n+2ZtZiOZdTU+KgkIMO7W1263fEG63v:/6MrPl+tC7fqGtZ7fU+1/0b3bw
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Pleated xa9 2041
InternalName: Parch
FileVersion: 205, 7, 220, 87
CompanyName: Phoenix Labs
ProductName: Roundup Outlining
FileDescription: Overran
OriginalFilename: Quintessential.exe

Win32:TeslaCrypt-AJ [Trj] also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0055e3ef1 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.1770
CynetMalicious (score: 100)
CAT-QuickHealRansom.TeslaCrypt.WR4
CylanceUnsafe
ZillyaTrojan.Filecoder.Win32.743
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/TeslaCrypt.cd8e051c
K7GWTrojan ( 0055e3ef1 )
Cybereasonmalicious.1f8df7
ESET-NOD32Win32/Filecoder.TeslaCrypt.E
APEXMalicious
AvastWin32:TeslaCrypt-AJ [Trj]
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderTrojan.Cripack.Gen.1
NANO-AntivirusTrojan.Win32.Encoder.dvvljg
MicroWorld-eScanTrojan.Cripack.Gen.1
TencentMalware.Win32.Gencirc.114c7b0d
Ad-AwareTrojan.Cripack.Gen.1
SophosML/PE-A + Mal/Tinba-L
ComodoMalware@#d3f7iqyyif04
BitDefenderThetaGen:NN.ZexaF.34628.wu3@amMLxpab
VIPRETrojan.Win32.Generic!BT
TrendMicroCryp_HpMyApp
McAfee-GW-EditionBehavesLike.Win32.Ursnif.fc
FireEyeGeneric.mg.74a7c701f8df7607
EmsisoftTrojan.Cripack.Gen.1 (B)
SentinelOneStatic AI – Malicious PE
WebrootW32.Trojan.GenKD
AviraHEUR/AGEN.1125260
eGambitGeneric.Malware
MicrosoftRansom:Win32/Tescrypt!rfn
AegisLabTrojan.Win32.TeslaCrypt.4!c
GDataTrojan.Cripack.Gen.1
AhnLab-V3Trojan/Win32.Teslacrypt.C957575
Acronissuspicious
McAfeeTeslaCrypt!74A7C701F8DF
MAXmalware (ai score=100)
VBA32Trojan.Encoder
PandaTrj/Genetic.gen
TrendMicro-HouseCallCryp_HpMyApp
RisingRansom.Tescrypt!8.3AF (CLOUD)
YandexTrojan.Filecoder!S4MEJLewoco
IkarusTrojan-Ransom.TeslaCrypt
FortinetW32/Papras.EH!tr
AVGWin32:TeslaCrypt-AJ [Trj]
Qihoo-360Win32/Ransom.Bitman.HwcBEpsA

How to remove Win32:TeslaCrypt-AJ [Trj]?

Win32:TeslaCrypt-AJ [Trj] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment