Categories: Ransom

How to remove “Generic.MSIL.Ransomware.Jigsaw.FD373068”?

The Generic.MSIL.Ransomware.Jigsaw.FD373068 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.MSIL.Ransomware.Jigsaw.FD373068 virus can do?

Executable code extraction
Creates RWX memory
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Creates a copy of itself

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic.MSIL.Ransomware.Jigsaw.FD373068?


File Info:
crc32: 4CB2DE14md5: 571d8f0666d09bbb5444213732679b2cname: 571D8F0666D09BBB5444213732679B2C.mlwsha1: 813885e745f3ef232d9252c4ebcd9200ac4dc27csha256: d050f477674959d422acc71c1489d5ddec90cdf7de5500594492fcf5b182d784sha512: 72556755595fa82e51341a34fd4b69d7a9247a7fca36d86fa70c3a5df47803051f4d37b3d5fbb6f2d2df43e17f7249d24bf72613c914bdb8c28708651ea9d4adssdeep: 24576:DZslN6rkZjkpA0te7HW7GDOMuBKxRc535mgYGvf37kmAbrxfYsYa7T:DZs76Bq0c7H1OyK5pmg7vAbBTYaftype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
LegalCopyright: xa92017, Inc. All Rights Reserved.InternalName: loaderFileVersion: 4.5.0.44990CompanyName: LoaderSpecialBuild: stable36 stableProductName: LoaderProductVersion: 4.5.0.44790FileDescription: WinOriginalFilename: loaderTranslation: 0x0409 0x04e4

Generic.MSIL.Ransomware.Jigsaw.FD373068 also known as:

Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
ALYac	Generic.MSIL.Ransomware.Jigsaw.FD373068
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Trojan ( 0053fc801 )
K7AntiVirus	Trojan ( 0053fc801 )
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan-Banker.MSIL.BitStealer.gen
BitDefender	Generic.MSIL.Ransomware.Jigsaw.FD373068
NANO-Antivirus	Trojan.Win32.Jigsaw.fahtsj
MicroWorld-eScan	Generic.MSIL.Ransomware.Jigsaw.FD373068
Tencent	Win32.Trojan.Generic.Stuj
Ad-Aware	Generic.MSIL.Ransomware.Jigsaw.FD373068
Sophos	Mal/Generic-R + Troj/Jigsaw-L
Comodo	Malware@#19n2dps0xtjan
BitDefenderTheta	Gen:NN.ZemsilF.34142.un0@a0j8yqki
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
FireEye	Generic.mg.571d8f0666d09bbb
Emsisoft	Generic.MSIL.Ransomware.Jigsaw.FD373068 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.fefel
Avira	TR/Jigsaw.lzrac
Microsoft	Trojan:MSIL/Confuser.UI
Arcabit	Generic.MSIL.Ransomware.Jigsaw.FDD5B14C
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Generic.MSIL.Ransomware.Jigsaw.FD373068
McAfee	Artemis!571D8F0666D0
Malwarebytes	Malware.AI.4209406916
Panda	Trj/GdSda.A
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/CoinStealer.AA!tr.pws
AVG	Win32:PWSX-gen [Trj]