Trojan-Ransom.Win32.Encoder.adwh


Detection added: 21.08.2025 21:25:17 (GMT+2)
MD5: 9EA9103FBC5A94A07FB7F1FD5FEF9E46
SHA1: 98DA42B353683AB3A7B3F2A9A957DE64138DC802
Behavior: Trojan Program (Trojan Ransom)
The harmful program intended for unapproved user updating data on the computer-victim so that to make impossible work with them or block normal work of the computer. After the data (taken blocked), to the user the repayment demand is made.


Platform: This malware is the Portable Executable (PE) format (is a file format for executables, object code, DLLs, FON Font files, and others used in 32-bit and 64-bit versions of Windows operating systems).

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP, Windows Vista, Windows 7 (x86/x64), Windows 8 (x86/x64), Windows 10 (x86/x64), Windows 11 (x86/x64)


NOTE: The hash is only listed for the first detected malicious file. SHA/MD5 hash should not be intended as a security/antivirus solution, instead it provides you an additional information, allowing you to identify known malware files.
Learn more about:
 Latest threats
 Nicta Anti-Virus Engine (SDK)
 Anti-Malware Digital Patrol
 Anti-Virus Cloud Engine

Take the following steps to help prevent infection on your computer:
  • Use up-to-date antivirus software.
  • Get the latest updates for Operating system and your installed software.
  • Use strong passwords and password management software.
  • Use caution when opening attachments, accepting file transfers and clicking on links to webpages.