Ransom

What is “Generic.Ransom.Aura.8B7A56D6”?

Malware Removal

The Generic.Ransom.Aura.8B7A56D6 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Ransom.Aura.8B7A56D6 virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX

Related domains:

z.whorecord.xyz
a.tomx.xyz
calicutsaawariya.com

How to determine Generic.Ransom.Aura.8B7A56D6?


File Info:

crc32: 4435BBE8
md5: c5c5d07e2f4231568b39beee1c2989d5
name: C5C5D07E2F4231568B39BEEE1C2989D5.mlw
sha1: df525c2b07324bea36738346010179e9a8d3bdc2
sha256: 49d49020b8b643988ed4c25e0fddc112ff1dbb6544a2afcb3f168404797010eb
sha512: be5a62bf60d1be47f58406e4ca51c2b318e48120020f62b08374e5cc658bb1839aa11a80b5c1fd8ad00349d85a53e9859be3241f5eeeb610bb2c3076c009eea7
ssdeep: 12288:dJ87iCTi+5igwnq5s0YD839MulCGZVvJzdBRWidmEhEK/3aSit1CKo:dW7iO9igwKs0YDOMHGbBXdmHiitu
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

0: [No Data]

Generic.Ransom.Aura.8B7A56D6 also known as:

K7AntiVirusTrojan ( 004da4781 )
DrWebTrojan.Encoder.2667
CynetMalicious (score: 99)
ALYacGeneric.Ransom.Aura.8B7A56D6
CylanceUnsafe
ZillyaTrojan.Filecoder.Win32.6236
SangforRansom.Win32.Aura.8B7A56D6
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/FrauDrop.a5981c88
K7GWTrojan ( 004da4781 )
Cybereasonmalicious.e2f423
SymantecRansom.Locky.B
ESET-NOD32a variant of Win32/Filecoder.NFQ
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Dropper.Win32.FrauDrop.alwmx
BitDefenderGeneric.Ransom.Aura.8B7A56D6
NANO-AntivirusTrojan.Win32.Encoder.euoxbz
MicroWorld-eScanGeneric.Ransom.Aura.8B7A56D6
TencentWin32.Trojan.Raas.Auto
Ad-AwareGeneric.Ransom.Aura.8B7A56D6
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34692.KmGfaCoWCdpi
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom.Win32.POTTIEQ.SMAL
McAfee-GW-EditionBehavesLike.Win32.Generic.hc
FireEyeGeneric.Ransom.Aura.8B7A56D6
EmsisoftGeneric.Ransom.Aura.8B7A56D6 (B)
JiangminTrojan.Aura.dz
WebrootW32.FrauDrop.alwmx
AviraTR/FileCoder.lkoen
eGambitUnsafe.AI_Score_96%
Antiy-AVLTrojan/Generic.ASMalwS.1EB5E06
MicrosoftRansom:Win32/Pottieq.A
AegisLabTrojan.Multi.Generic.4!c
GDataGeneric.Ransom.Aura.8B7A56D6
AhnLab-V3Trojan/Win32.Aura.C2230724
McAfeeArtemis!C5C5D07E2F42
MAXmalware (ai score=99)
VBA32TrojanDropper.FrauDrop
PandaTrj/CI.A
TrendMicro-HouseCallRansom.Win32.POTTIEQ.SMAL
RisingRansom.Aura!8.112C (CLOUD)
YandexTrojan.GenAsa!fmr8pg5U9oU
IkarusTrojan.Win32.Filecoder
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Filecoder.NFQ!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Generic.Ransom.Aura.8B7A56D6?

Generic.Ransom.Aura.8B7A56D6 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment