What is “Generic.MSIL.Ransomware.Jigsaw.39244DB2”?

The Generic.MSIL.Ransomware.Jigsaw.39244DB2 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.MSIL.Ransomware.Jigsaw.39244DB2 virus can do?

Creates RWX memory
Network activity detected but not expressed in API logs

How to determine Generic.MSIL.Ransomware.Jigsaw.39244DB2?


File Info:
crc32: A3C14A74
md5: 55a447c36f99d8cb375d146f84e3be0c
name: 55A447C36F99D8CB375D146F84E3BE0C.mlw
sha1: cac5aa9bbec39ccc076c82083741c841c5288619
sha256: dde7001678a2485b9d5d84be2127e97a5b1a4f2692a4cc5f37bd14a7e9d3af69
sha512: b2352bb2a47099d1637ace85799a01df578de440c841a8569fd4508ee4f67a028c9c910c8da79eae9323b85564cb2677bf432367997a58a32fa7aae27e324fef
ssdeep: 6144:bdevFH85KZ/FzOOs/TOsQiotuTgfhhPzm/JkSKccsUGazXqMW:svFHV/lArOJMgfzPzm/JBcs
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright (c) Hewlett - Packard. All rights reserved.
Assembly Version: 1.0.0.0
InternalName: BitcoinStealer.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 1.0.0.0
FileDescription: okstl
OriginalFilename: BitcoinStealer.exe

Generic.MSIL.Ransomware.Jigsaw.39244DB2 also known as:

K7AntiVirus	Trojan ( 700000121 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Coinbit.46
ALYac	Generic.MSIL.Ransomware.Jigsaw.39244DB2
Cylance	Unsafe
Zillya	Trojan.CoinStealer.Win32.507
CrowdStrike	win/malicious_confidence_70% (D)
Alibaba	TrojanPSW:MSIL/CoinStealer.1bdb1309
K7GW	Trojan ( 700000121 )
Cybereason	malicious.36f99d
Cyren	W32/Jigsaw.A2.gen!Eldorado
ESET-NOD32	a variant of MSIL/ClipBanker.FM
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
ClamAV	Win.Trojan.SatoshiBypass-6853426-0
Kaspersky	Trojan-PSW.MSIL.Agent.afxy
BitDefender	Generic.MSIL.Ransomware.Jigsaw.39244DB2
NANO-Antivirus	Trojan.Win32.Coinbit.evafco
MicroWorld-eScan	Generic.MSIL.Ransomware.Jigsaw.39244DB2
Tencent	Msil.Trojan-qqpass.Qqrob.Swky
Ad-Aware	Generic.MSIL.Ransomware.Jigsaw.39244DB2
Sophos	ML/PE-A + Mal/CoinSteal-A
Comodo	Malware@#262f42cpzaq3a
BitDefenderTheta	Gen:NN.ZemsilF.34142.yn0@aakxYwp
VIPRE	Trojan.Win32.Generic!BT
FireEye	Generic.mg.55a447c36f99d8cb
Emsisoft	Generic.MSIL.Ransomware.Jigsaw.39244DB2 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1132047
Antiy-AVL	Trojan/Generic.ASMalwS.22B9B4C
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	TrojanSpy:MSIL/CoinStealer.C!bit
GData	MSIL.Trojan.ClipBanker.C
McAfee	GenericRXCJ-ST!55A447C36F99
MAX	malware (ai score=100)
VBA32	Trojan.MSIL.gen.11
Panda	Trj/GdSda.A
Yandex	Trojan.PWS.Agent!sJsthoSVhc4
Ikarus	Trojan.MSIL.PSW
Fortinet	MSIL/Jigsaw.K!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml

How to remove Generic.MSIL.Ransomware.Jigsaw.39244DB2?

Generic.MSIL.Ransomware.Jigsaw.39244DB2 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X