Quantcast
Channel: How to Remove Malware
Viewing all articles
Browse latest Browse all 38585

FBI.CYBERCRIME DICISION ransomware is Trojan Tobfy

$
0
0

Is the file INFO.PDF________________________________________________________________.EXE located on your computer? Then your computer is infected.
We do suggest you should remove INFO.PDF________________________________________________________________.EXE from your computer as soon as possible.
INFO.PDF________________________________________________________________.EXE is Trojan/Backdoor.
Kill the process INFO.PDF________________________________________________________________.EXE and remove INFO.PDF________________________________________________________________.EXE from the Windows startup.

Malware Analysis of FBI.CYBERCRIME DICISION ransomware.
Full path on a computer: INFO.PDF________________________________________________________________.EXE

Detected by RegRun Warrior:

Item Name:
Author: Unknown
Related File: %TEMP%\INFO.PDF________________________________________________________________.EXE
Type: Registry Run

Removal Results: Success
Number of reboot: 1

INFO.PDF________________________________________________________________.EXE is known as:

Trojan.Tobfy, RDN.Ransom.de, Trojan.Ransom.SRP, Posible_Worm32, Trojan.LockScreen.bwbzgq, Downloader, Trojan-Ransom.Foreign.evml, Trojan.Foreign.uHzXs+uUEeY, Trojan.Fakealert.39276, Mal.Behav-031, Trojan.Foreign, Trojan.Tobfy.M, W32.Trojan.HTWD-6076, Hoax.Foreign, a variant of Win32.LockScreen.AXE, W32.LockScreen.AXE

INFO.PDF________________________________________________________________.EXE hash:

  • MD5: 30ae49e2bd4b63e643c5a714fbccb3ee
The file tries to download information from some web sites.
How to quickly detect INFO.PDF________________________________________________________________.EXE presence?
Registry:
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run\: “c:\sand-box\Info.Pdf________________________________________________________________.exe”
Files:
  • c:\sand-box\Info.Pdf________________________________________________________________.exe


Viewing all articles
Browse latest Browse all 38585

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>